$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json) Hash identifier: wVXJKJzI1gZsTP5lQkQZ/37QucjRNGC9droRhwege+M= Subject key identifier: 71:5A:75:0A:55:B5:70:2B:0F:A2:C1:C9:AF:40:50:C8:8E:A4:B5:32 Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft Manifest number: CB Signing time: Sat 23 Aug 2025 05:53:37 +0000 Manifest this update: Sat 23 Aug 2025 05:53:37 +0000 Manifest next update: Sat 30 Aug 2025 05:53:37 +0000 Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: GLNvOYLgZ1wd/weweUBwr+n2P6jt7IkPBuq59NoM7HY=) 2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: Aug 23 05:53:37 2025 GMT Not After : Aug 30 05:53:37 2025 GMT Subject: CN=68a95761-45c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:94:ad:27:06:4f:0c:db:f8:97:a8:8e:98: 4e:49:28:2e:c3:a2:53:cc:ad:fd:66:df:a4:97:1b: b2:fb:77:b6:64:8e:35:06:c5:8e:d9:ad:90:74:a8: 45:8c:2a:f8:12:e2:99:c4:a4:b3:e5:1a:14:c3:9c: 16:67:1f:f2:c3:bd:9c:84:fb:7e:a0:ac:bb:11:e8: 16:f4:74:ea:46:ce:d0:a6:52:b3:16:88:6e:35:80: b5:ca:61:05:d7:fd:00:63:f6:bf:21:97:0f:db:08: 5c:a3:5a:a8:40:8c:19:ed:0a:3d:52:8b:27:5f:ad: 97:7b:22:40:99:a3:b8:62:c7:95:29:e6:db:54:36: cb:6d:5b:7e:82:cb:3a:00:60:0b:be:e7:cd:64:fa: 4e:47:be:e6:21:96:e4:34:fe:0f:18:dd:b6:38:fc: 2c:17:bb:4a:91:da:20:13:93:97:4e:9d:e2:28:ea: 5d:9d:02:ad:71:a0:88:81:dd:97:f0:76:c8:7f:e0: ad:6d:54:6a:d1:8f:f2:99:94:cd:b0:c6:29:26:74: f4:d3:70:93:b8:9b:61:40:a0:5d:c8:32:1e:60:fb: 00:eb:71:63:84:cb:95:b4:e8:2b:4b:11:09:19:bc: ec:de:a0:8c:34:37:31:bd:4b:38:04:a2:80:0d:9b: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:75:0A:55:B5:70:2B:0F:A2:C1:C9:AF:40:50:C8:8E:A4:B5:32 X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:32:9a:a2:62:26:72:3c:e0:d7:c4:65:f3:59:87:4d:a8: b2:e2:e7:dc:90:70:3c:81:62:47:74:4b:6b:7c:5b:0d:dc:31: 9c:d3:54:7f:16:04:75:fa:67:be:3f:70:0a:bc:e7:64:30:fa: ac:a7:d7:24:cc:1f:6d:c1:0d:8e:50:f8:1c:24:f6:91:1c:a6: b3:5c:43:29:fa:d5:4b:cd:40:8e:07:62:ab:67:9a:54:11:d2: 85:ea:b4:57:d7:83:ca:08:b0:f0:03:f7:6f:6d:a9:70:0d:40: de:56:2f:19:a8:90:02:88:3e:47:60:ea:d4:08:2e:50:8a:e6: 61:10:46:0e:1c:0d:37:28:e4:2a:24:bb:13:c5:6e:ce:67:a1: 2d:16:99:9d:38:6a:d0:61:21:9b:5f:e5:f1:f3:1a:a0:57:c3: c7:7c:6f:27:c8:c8:f2:ad:bc:95:ad:c6:2b:a1:47:44:a6:19: ca:8c:03:b8:a1:05:04:4a:26:c0:04:1e:ff:4e:b0:f9:b0:28: 39:e0:4e:82:3b:ac:94:fd:c3:be:cb:ce:00:e0:9d:17:c9:7a: 63:12:a1:8b:8e:f1:45:10:f5:18:6c:2c:57:f8:2d:b0:88:7c: d4:91:4e:4c:b5:c7:ec:05:f4:b3:b1:85:e7:03:1a:74:2b:7a: 13:01:b8:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz NzE4MzJDQTUwHhcNMjUwODIzMDU1MzM3WhcNMjUwODMwMDU1MzM3WjAYMRYwFAYD VQQDEw02OGE5NTc2MS00NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRqUrScGTwzb+JeojphOSSguw6JTzK39Zt+klxuy+3e2ZI41BsWO2a2QdKhF jCr4EuKZxKSz5RoUw5wWZx/yw72chPt+oKy7EegW9HTqRs7QplKzFohuNYC1ymEF 1/0AY/a/IZcP2whco1qoQIwZ7Qo9UosnX62XeyJAmaO4YseVKebbVDbLbVt+gss6 AGALvufNZPpOR77mIZbkNP4PGN22OPwsF7tKkdogE5OXTp3iKOpdnQKtcaCIgd2X 8HbIf+CtbVRq0Y/ymZTNsMYpJnT003CTuJthQKBdyDIeYPsA63FjhMuVtOgrSxEJ Gbzs3qCMNDcxvUs4BKKADZumPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFadQpV tXArD6LBya9AUMiOpLUyMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3TzKaomImcjzg18Rl81mHTaiy4ufckHA8gWJHdEtrfFsN3DGc01R/ FgR1+me+P3AKvOdkMPqsp9ckzB9twQ2OUPgcJPaRHKazXEMp+tVLzUCOB2KrZ5pU EdKF6rRX14PKCLDwA/dvbalwDUDeVi8ZqJACiD5HYOrUCC5QiuZhEEYOHA03KOQq JLsTxW7OZ6EtFpmdOGrQYSGbX+Xx8xqgV8PHfG8nyMjyrbyVrcYroUdEphnKjAO4 oQUESibABB7/TrD5sCg54E6CO6yU/cO+y84A4J0XyXpjEqGLjvFFEPUYbCxX+C2w iHzUkU5MtcfsBfSzsYXnAxp0K3oTAbjB -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:00 2025 by rpki-client