$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: D4AyAYiQ/imGSQ59oM3BogCvMB0bB5JQDJpuaTsHckM= Subject key identifier: 05:01:4D:92:E5:4B:97:6B:09:63:14:BF:7F:9C:DE:31:CD:C4:63:CD Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: AF Signing time: Sat 23 Aug 2025 06:18:55 +0000 Manifest this update: Sat 23 Aug 2025 06:18:54 +0000 Manifest next update: Sat 30 Aug 2025 06:18:54 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: VM/7Fz9fhHEQCY85w23f2E7awy1ZCazOVDkM/GwboUk=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: WB7ggddHEomyZcx3S7RLh6MvEgEJdGUHo6oxjSeOfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Aug 23 06:18:54 2025 GMT Not After : Aug 30 06:18:54 2025 GMT Subject: CN=68a95d4f-cf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:69:31:c1:42:12:d1:f2:9a:48:ff:4a:61: 85:48:cc:bf:d5:f1:9b:85:bd:db:b6:d8:a4:37:dc: 49:65:1d:e3:31:f7:64:9e:86:57:2a:bb:af:ca:ef: e2:58:b7:a7:55:6f:18:54:f9:8c:03:07:86:4f:8b: 56:a3:f2:b7:c9:80:09:aa:42:3a:eb:ed:06:17:98: 51:5c:98:58:6a:d5:4a:6d:0f:f8:48:1f:11:87:57: 24:05:39:b2:13:31:60:c0:ba:0d:39:9e:17:5d:06: 67:62:24:4e:91:89:c1:f6:92:31:f6:5d:6d:d9:5a: 22:60:66:f3:8c:f2:9d:72:69:88:c8:0f:05:a0:58: 9d:f7:aa:5f:c7:c9:3f:61:48:9f:15:3e:bd:26:b8: 3a:92:c7:ad:6d:f5:f6:9f:1f:3e:c3:b5:5e:a4:58: 49:af:bc:29:af:ee:03:f5:81:44:55:d8:9c:b1:f6: 5c:7b:65:ef:a9:e1:3c:1a:56:d9:ca:ba:fb:ba:9a: c3:87:a6:d1:f4:cc:97:62:55:e8:c4:cb:c5:ad:65: d5:2e:cb:9d:dc:b6:ff:f1:9b:59:c6:40:60:56:66: a4:5b:b0:5a:b2:42:87:15:70:6a:a4:13:d0:db:23: 9e:a6:95:09:d4:b0:cc:72:1e:78:fc:91:96:81:e6: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:4D:92:E5:4B:97:6B:09:63:14:BF:7F:9C:DE:31:CD:C4:63:CD X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b0:1a:f7:f9:47:7a:b3:ce:1a:d2:04:ca:d6:cd:81:d6:e3: 48:47:0b:ae:bd:08:7c:48:a0:5d:82:b4:a6:05:12:a0:34:8e: 4e:c8:3b:84:3b:bf:88:c7:3e:f9:e8:ea:62:8d:b8:22:ee:08: 8d:0e:f5:04:91:e7:ea:b5:37:66:c8:54:b5:f5:08:7e:cf:d6: fe:df:30:96:50:6f:a0:a0:82:d3:15:f1:10:8f:1d:b0:5f:e3: e3:e3:c7:86:f2:a9:33:25:74:c4:38:1e:3b:5e:4d:47:01:9c: 7a:ed:d7:ed:5a:c7:64:de:0c:60:63:06:e1:89:a0:60:e5:b8: eb:ac:1e:3d:3c:8c:5f:0e:08:77:07:c5:d7:e3:44:82:07:fc: 55:19:4a:3a:9b:91:ce:cd:e5:ac:81:64:2e:09:26:0e:01:49: e9:ec:a9:1a:16:1c:20:4f:7c:9a:3c:89:6f:3e:38:c3:d5:f7: 21:5a:f0:a9:4a:a6:f8:d4:ff:cf:65:13:74:ea:6e:fd:86:f7: cc:ef:8e:d0:9f:87:2e:89:e1:7a:b6:d6:fc:e1:39:44:30:3a: 75:82:3d:f2:69:ef:eb:81:84:8a:e6:46:53:5f:e4:b4:1c:de: 34:fe:b4:70:07:9a:9c:79:13:ed:a8:d6:c2:e9:23:57:7e:83: ae:e8:b5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjUwODIzMDYxODU0WhcNMjUwODMwMDYxODU0WjAYMRYwFAYD VQQDEw02OGE5NWQ0Zi1jZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa5pMcFCEtHymkj/SmGFSMy/1fGbhb3bttikN9xJZR3jMfdknoZXKruvyu/i WLenVW8YVPmMAweGT4tWo/K3yYAJqkI66+0GF5hRXJhYatVKbQ/4SB8Rh1ckBTmy EzFgwLoNOZ4XXQZnYiROkYnB9pIx9l1t2VoiYGbzjPKdcmmIyA8FoFid96pfx8k/ YUifFT69Jrg6ksetbfX2nx8+w7VepFhJr7wpr+4D9YFEVdicsfZce2XvqeE8GlbZ yrr7uprDh6bR9MyXYlXoxMvFrWXVLsud3Lb/8ZtZxkBgVmakW7BaskKHFXBqpBPQ 2yOeppUJ1LDMch54/JGWgeYToQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUBTZLl S5drCWMUv3+c3jHNxGPNMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEsBr3+Ud6s84a0gTK1s2B1uNIRwuuvQh8SKBdgrSmBRKgNI5OyDuE O7+Ixz756Opijbgi7giNDvUEkefqtTdmyFS19Qh+z9b+3zCWUG+goILTFfEQjx2w X+Pj48eG8qkzJXTEOB47Xk1HAZx67dftWsdk3gxgYwbhiaBg5bjrrB49PIxfDgh3 B8XX40SCB/xVGUo6m5HOzeWsgWQuCSYOAUnp7KkaFhwgT3yaPIlvPjjD1fchWvCp Sqb41P/PZRN06m79hvfM747Qn4cuieF6ttb84TlEMDp1gj3yae/rgYSK5kZTX+S0 HN40/rRwB5qceRPtqNbC6SNXfoOu6LXI -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:37 2025 by rpki-client