$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: kbogujIFpLoIpUeIkfj3EWwydCRG4SetRoRS4ujYANQ= Subject key identifier: 39:E2:A2:7E:4E:E9:0A:E5:67:C1:32:E2:AE:8A:79:36:45:61:65:AA Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: BB Signing time: Sat 23 Aug 2025 06:07:55 +0000 Manifest this update: Sat 23 Aug 2025 06:07:54 +0000 Manifest next update: Sat 30 Aug 2025 06:07:54 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: lkYIz4DSzl9vj4xV+tI99hjGQ5ColSQsGTUbIVACQ0c=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Aug 23 06:07:54 2025 GMT Not After : Aug 30 06:07:54 2025 GMT Subject: CN=68a95aba-e2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:f8:95:11:93:a2:f3:c7:a6:21:82:e8:50: fd:77:b0:43:63:a6:b7:ce:a3:74:5f:fe:40:e1:fc: 7f:60:ce:e7:7b:bb:66:cc:36:a5:d4:30:fd:83:2c: a2:af:79:ac:4e:f7:07:d7:63:b6:f8:d8:2b:11:64: 3d:e8:0d:f9:d1:52:94:65:84:4c:8b:ab:a0:32:a9: f7:77:53:43:db:ea:d3:31:98:a8:85:d9:31:0d:f4: d9:1d:6b:c8:70:d8:01:13:f8:7a:10:bb:ad:1d:d6: ff:c3:61:e4:0b:bc:57:ff:90:0a:44:3f:27:ac:3f: 6e:ba:63:68:8a:02:29:3f:83:3b:40:e3:ef:a6:4d: 73:67:eb:73:0b:26:22:3c:48:e0:2c:80:6b:79:9c: 3c:0c:36:5d:ca:47:fc:a8:75:86:51:d3:d6:80:1a: d3:55:c1:cc:55:ca:c5:d6:48:bd:45:cb:5c:e1:bd: 53:62:03:3d:c3:86:b8:0d:16:e5:62:30:f8:e4:a5: 1f:ab:22:65:c9:d7:01:17:15:4b:bb:9c:96:9c:99: f3:23:c8:cb:7f:49:f9:5c:35:a4:1c:33:12:58:7b: 57:fa:e1:31:c0:46:de:d6:30:11:64:98:d6:cf:58: e8:a3:2d:f3:98:17:78:39:61:4f:67:60:00:84:03: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:A2:7E:4E:E9:0A:E5:67:C1:32:E2:AE:8A:79:36:45:61:65:AA X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b4:c3:15:7f:05:b6:8e:d3:93:3b:e3:5c:01:d1:c8:85:39: 56:45:c3:06:e1:a3:bc:17:35:29:26:d1:41:b8:b6:71:82:ac: 2a:67:5b:d4:8e:c8:c3:55:74:24:a5:64:63:3e:27:e0:b2:8c: 35:6c:65:a4:f4:ba:7b:46:c8:ac:50:5e:f0:55:10:96:95:cd: e7:49:0e:d4:62:5c:bb:3d:a1:81:ed:01:a2:aa:ce:50:10:04: 4b:79:54:6c:9f:dc:bb:24:fc:d3:bf:2f:a9:8a:d3:08:93:2b: 24:ce:6d:18:57:b4:9d:36:1e:5d:b4:23:13:b0:93:d4:3b:69: bd:7f:02:d2:28:57:66:af:45:c9:77:8d:91:56:71:34:6b:61: e8:1d:3e:dd:a5:0c:1a:57:3f:3b:32:0b:55:7e:e8:aa:4e:f2: 2f:b5:47:67:69:9e:93:29:18:bd:d1:42:cc:74:40:99:ff:aa: 12:cc:74:bf:5e:c0:d6:ed:af:2a:ed:3d:a8:57:cc:c0:f4:ee: f9:a6:df:eb:7d:06:02:bc:71:3a:68:be:c1:ae:09:c5:0c:63: ba:bd:54:ef:e2:3f:da:d2:0c:09:63:7a:bb:54:ac:8c:e9:c1: 98:de:4a:36:8c:17:99:3b:f9:4b:f4:3a:6b:87:d1:86:75:26: 7f:7a:89:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKENFRTczQTk1RDVDQ0VFMDYyRTdENUVCQTFCNUExMjcw NTJFMTI1MzgwHhcNMjUwODIzMDYwNzU0WhcNMjUwODMwMDYwNzU0WjAYMRYwFAYD VQQDEw02OGE5NWFiYS1lMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycH4lRGTovPHpiGC6FD9d7BDY6a3zqN0X/5A4fx/YM7ne7tmzDal1DD9gyyi r3msTvcH12O2+NgrEWQ96A350VKUZYRMi6ugMqn3d1ND2+rTMZiohdkxDfTZHWvI cNgBE/h6ELutHdb/w2HkC7xX/5AKRD8nrD9uumNoigIpP4M7QOPvpk1zZ+tzCyYi PEjgLIBreZw8DDZdykf8qHWGUdPWgBrTVcHMVcrF1ki9Rctc4b1TYgM9w4a4DRbl YjD45KUfqyJlydcBFxVLu5yWnJnzI8jLf0n5XDWkHDMSWHtX+uExwEbe1jARZJjW z1jooy3zmBd4OWFPZ2AAhANK0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnion5O 6QrlZ8Ey4q6KeTZFYWWqMB8GA1UdIwQYMBaAFM7nOpXVzO4GLn1euhtaEnBS4SU4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9DRjM3MzVEMDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdnWXVmVjY2RzFvU2NGTGhK VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9DRjM3MzVEMDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdn WXVmVjY2RzFvU2NGTGhKVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxtMMVfwW2jtOTO+NcAdHIhTlWRcMG4aO8FzUpJtFBuLZxgqwqZ1vU jsjDVXQkpWRjPifgsow1bGWk9Lp7RsisUF7wVRCWlc3nSQ7UYly7PaGB7QGiqs5Q EARLeVRsn9y7JPzTvy+pitMIkyskzm0YV7SdNh5dtCMTsJPUO2m9fwLSKFdmr0XJ d42RVnE0a2HoHT7dpQwaVz87MgtVfuiqTvIvtUdnaZ6TKRi90ULMdECZ/6oSzHS/ XsDW7a8q7T2oV8zA9O75pt/rfQYCvHE6aL7BrgnFDGO6vVTv4j/a0gwJY3q7VKyM 6cGY3ko2jBeZO/lL9Dprh9GGdSZ/eol9 -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:12 2025 by rpki-client