$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: n2hSZPqsXcmpEa4gAAdaas1kw+tU2cH4uKu2eOoKAtA= Subject key identifier: 3B:00:0E:0F:FD:AF:27:8B:22:C3:78:B9:EF:ED:97:90:01:1B:A2:44 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: C7 Signing time: Sat 23 Aug 2025 05:55:33 +0000 Manifest this update: Sat 23 Aug 2025 05:55:33 +0000 Manifest next update: Sat 30 Aug 2025 05:55:33 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: aXOxDaEI4bxusstOSQIF2o0KWesE8+Nr+53OeFzIKUY=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Aug 23 05:55:33 2025 GMT Not After : Aug 30 05:55:33 2025 GMT Subject: CN=68a957d5-eb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:b2:12:dc:ba:f1:62:d3:75:db:74:34:b0: 8d:38:68:6f:71:98:c2:c0:d3:44:0e:77:ac:06:51: bf:2a:f3:18:db:3f:f2:6e:f2:77:b9:8e:b7:15:ce: 83:f6:f8:1f:71:cd:13:d5:c2:d6:dd:b8:c3:6f:25: 1d:43:e8:52:ac:8e:81:e2:fb:8e:d7:17:a2:58:a5: 4b:d9:a0:a2:b9:d2:e1:32:5f:68:c6:a1:bc:cf:c2: 46:37:9f:dd:ba:bd:3d:a7:f3:9d:f9:85:d4:f3:40: 21:da:3b:b7:76:bc:e1:f4:58:b6:d6:a5:4d:f2:14: 36:15:ac:2f:51:79:e5:ec:97:35:b8:d6:1b:6d:18: 7a:3a:99:2f:2c:aa:b7:ac:06:11:cb:32:87:12:16: 93:67:5c:50:d1:df:20:7a:9d:60:7c:87:60:bf:07: d3:04:33:1e:d8:4e:3b:b8:d2:cd:b1:b8:41:1d:17: 35:ab:ac:c8:07:10:33:71:bc:23:11:28:1a:79:b4: e7:40:84:09:a2:4e:a9:8c:e9:0a:0b:86:12:c9:63: 74:32:fa:36:b4:a1:a5:8b:51:7e:cc:a4:0e:bf:22: 7a:01:a5:ed:21:e8:3b:4e:0e:e6:e5:bd:c1:8c:fe: 75:61:6d:bc:14:e1:c8:63:a8:2a:af:6c:52:ec:da: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:0E:0F:FD:AF:27:8B:22:C3:78:B9:EF:ED:97:90:01:1B:A2:44 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:a2:cf:f7:7c:48:79:3d:fe:e9:c3:bc:1e:1a:72:92:9a:25: c7:f9:35:4d:dd:6a:8e:5d:28:45:7d:fb:f0:38:93:09:01:37: db:7e:86:2a:30:c0:73:fd:32:0c:13:e6:c6:89:93:c5:f6:65: 8d:ec:ec:1d:c9:22:ba:e6:66:53:c1:e0:f6:27:88:7a:c6:80: 6f:90:c3:7d:9b:db:06:3f:18:d8:17:57:47:83:bb:ea:53:73: fd:98:02:a7:8f:b9:6d:fc:f8:71:13:6c:ed:b2:dc:3e:f3:43: 51:31:b6:fc:9e:03:51:34:79:65:ac:38:c2:45:6f:20:cd:a9: 2e:bb:6f:7c:5f:7f:4d:0d:21:7c:db:d9:a1:bd:ac:e0:a8:d6: 22:bb:4e:f5:ca:19:96:8c:75:38:64:89:a9:64:4f:02:f2:68: 1b:6b:f3:ad:d2:29:a9:51:e7:be:dd:b2:80:8e:4f:ca:84:18: 32:68:1b:5f:90:e2:b3:33:f6:c0:e4:e9:c8:85:df:f8:76:a0: 8a:64:7d:07:2b:c7:72:99:45:97:59:9a:af:96:db:0c:81:19: ea:69:23:2e:7f:d1:61:64:c6:17:42:e0:7a:f0:f9:f2:0a:0c: b1:5e:40:fb:20:64:89:34:f5:ad:a9:47:4c:ed:86:1b:4d:9a: 91:78:c7:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwODIzMDU1NTMzWhcNMjUwODMwMDU1NTMzWjAYMRYwFAYD VQQDEw02OGE5NTdkNS1lYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9eyEty68WLTddt0NLCNOGhvcZjCwNNEDnesBlG/KvMY2z/ybvJ3uY63Fc6D 9vgfcc0T1cLW3bjDbyUdQ+hSrI6B4vuO1xeiWKVL2aCiudLhMl9oxqG8z8JGN5/d ur09p/Od+YXU80Ah2ju3drzh9Fi21qVN8hQ2FawvUXnl7Jc1uNYbbRh6OpkvLKq3 rAYRyzKHEhaTZ1xQ0d8gep1gfIdgvwfTBDMe2E47uNLNsbhBHRc1q6zIBxAzcbwj ESgaebTnQIQJok6pjOkKC4YSyWN0Mvo2tKGli1F+zKQOvyJ6AaXtIeg7Tg7m5b3B jP51YW28FOHIY6gqr2xS7NoGSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsADg/9 ryeLIsN4ue/tl5ABG6JEMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGos/3fEh5Pf7pw7weGnKSmiXH+TVN3WqOXShFffvwOJMJATfbfoYq MMBz/TIME+bGiZPF9mWN7OwdySK65mZTweD2J4h6xoBvkMN9m9sGPxjYF1dHg7vq U3P9mAKnj7lt/PhxE2ztstw+80NRMbb8ngNRNHllrDjCRW8gzakuu298X39NDSF8 29mhvazgqNYiu071yhmWjHU4ZImpZE8C8mgba/Ot0impUee+3bKAjk/KhBgyaBtf kOKzM/bA5OnIhd/4dqCKZH0HK8dymUWXWZqvltsMgRnqaSMuf9FhZMYXQuB68Pny CgyxXkD7IGSJNPWtqUdM7YYbTZqReMep -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:33 2025 by rpki-client