$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: CLOK9WrsgUMn01VwIoMKMq0Be/oAtAWypOL//YdqWW4= Subject key identifier: B1:97:30:B4:10:69:C9:BB:14:29:5D:8D:59:B3:C9:DB:E3:4D:5C:BA Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 014F Signing time: Sat 23 Aug 2025 04:32:08 +0000 Manifest this update: Sat 23 Aug 2025 04:32:07 +0000 Manifest next update: Sat 30 Aug 2025 04:32:07 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: u+3a3/EG7zqbemqjV0YqHQnpFQoXwXpQlDdQkGTsKgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Aug 23 04:32:07 2025 GMT Not After : Aug 30 04:32:07 2025 GMT Subject: CN=68a94447-1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:17:41:ad:31:a7:23:d2:d5:da:2c:b8:2e: a2:55:01:34:6f:8c:af:3f:4e:74:eb:bc:64:85:e4: 68:35:df:da:37:3e:ca:7e:89:24:02:ca:7a:aa:3c: 9a:a2:16:6a:f8:83:c8:b8:1d:8d:c7:66:34:a9:b7: a7:fd:fd:44:33:35:65:87:47:bd:80:fd:7a:d3:05: 82:e4:db:59:d4:84:26:54:b7:a1:45:e5:00:16:24: d4:d1:8c:8c:1c:fb:50:fd:a3:37:0a:f8:8b:08:1f: 1d:b7:5f:8c:80:b3:f6:35:de:3c:6f:47:0f:48:08: 43:df:d4:87:17:22:5b:24:30:bd:06:37:22:15:58: b9:1b:20:31:77:63:9f:b5:f4:5d:f1:57:dc:39:e6: 1e:1a:b5:4b:54:58:68:ab:d0:12:36:28:3b:66:a4: 49:9d:82:63:6b:af:f8:62:e4:cb:85:76:21:11:ff: ad:d8:92:f7:b7:e5:e0:c1:8d:9d:83:f9:95:f9:5b: b7:93:6e:4e:75:ee:90:9b:7a:ed:54:ec:b7:06:a3: fd:06:f4:6b:49:56:08:39:d8:a6:3e:3e:c5:4b:fa: 9a:10:6e:e6:35:53:0f:31:42:62:44:9e:22:80:a3: b5:31:8d:ce:a1:2a:8d:42:99:cb:b2:09:81:b9:94: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:97:30:B4:10:69:C9:BB:14:29:5D:8D:59:B3:C9:DB:E3:4D:5C:BA X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b4:b2:1f:11:a8:5d:49:b3:75:4d:32:79:c2:d8:dc:23:40: 02:b7:7b:97:d1:a6:5b:7a:2e:ea:76:1a:b3:f9:4e:30:75:38: 2c:38:3b:8c:ee:3d:a8:47:b0:81:e9:e1:1f:60:a5:cd:32:37: e9:e9:01:16:bc:4a:40:1f:8c:bb:d6:e3:ce:52:6a:8b:3e:5b: 3a:61:8d:b8:80:a2:d7:44:4e:e2:94:70:93:d9:ad:ce:bf:55: 0e:1f:05:3e:86:71:4e:4d:d3:e9:f5:84:79:6b:01:6b:47:ad: 7d:a4:3c:e4:31:22:a5:b0:a8:94:e8:61:9a:c1:6f:bd:a8:41: 9c:f7:8c:f5:f2:4c:6e:3d:d6:a3:83:8e:d1:0c:60:cc:8e:09: c4:87:0c:4f:87:b7:49:b7:23:9f:6b:e9:51:89:c5:4c:54:0a: 27:0d:38:d4:2a:84:80:c5:94:da:af:4d:b1:12:eb:da:8e:20: f0:d4:55:85:4c:ed:5d:71:63:a8:ec:9f:c0:8e:71:db:c2:49: 81:f9:20:a9:1f:96:da:16:b3:3a:31:a0:af:aa:49:a2:78:f8: 43:8f:23:68:7b:e1:66:d0:7a:be:10:aa:2e:8b:04:9d:38:52: c9:1e:de:57:2c:43:a4:c7:9e:d4:88:98:71:bd:7f:c3:f1:ec: 0d:f3:38:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwODIzMDQzMjA3WhcNMjUwODMwMDQzMjA3WjAYMRYwFAYD VQQDEw02OGE5NDQ0Ny0xZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEEXQa0xpyPS1dosuC6iVQE0b4yvP05067xkheRoNd/aNz7KfokkAsp6qjya ohZq+IPIuB2Nx2Y0qben/f1EMzVlh0e9gP160wWC5NtZ1IQmVLehReUAFiTU0YyM HPtQ/aM3CviLCB8dt1+MgLP2Nd48b0cPSAhD39SHFyJbJDC9BjciFVi5GyAxd2Of tfRd8VfcOeYeGrVLVFhoq9ASNig7ZqRJnYJja6/4YuTLhXYhEf+t2JL3t+XgwY2d g/mV+Vu3k25Ode6Qm3rtVOy3BqP9BvRrSVYIOdimPj7FS/qaEG7mNVMPMUJiRJ4i gKO1MY3OoSqNQpnLsgmBuZSZhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGXMLQQ acm7FCldjVmzydvjTVy6MB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBotLIfEahdSbN1TTJ5wtjcI0ACt3uX0aZbei7qdhqz+U4wdTgsODuM 7j2oR7CB6eEfYKXNMjfp6QEWvEpAH4y71uPOUmqLPls6YY24gKLXRE7ilHCT2a3O v1UOHwU+hnFOTdPp9YR5awFrR619pDzkMSKlsKiU6GGawW+9qEGc94z18kxuPdaj g47RDGDMjgnEhwxPh7dJtyOfa+lRicVMVAonDTjUKoSAxZTar02xEuvajiDw1FWF TO1dcWOo7J/AjnHbwkmB+SCpH5baFrM6MaCvqkmiePhDjyNoe+Fm0Hq+EKouiwSd OFLJHt5XLEOkx57UiJhxvX/D8ewN8zjS -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:37 2025 by rpki-client