$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: hJoWoC6aKd4vIyC+llQkM/g+8cJNG+L9cUezr5fG4gU= Subject key identifier: F8:B2:84:22:74:17:80:69:D9:1F:78:94:36:6C:85:F5:D5:30:D7:0F Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0C02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0BF5 Signing time: Fri 22 Aug 2025 18:58:08 +0000 Manifest this update: Fri 22 Aug 2025 18:58:08 +0000 Manifest next update: Fri 29 Aug 2025 18:58:08 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: fjM4kgr7h7i63uZDzdOGnvHR71EoJU9k5SiTXfMyBiU=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Aug 22 18:58:08 2025 GMT Not After : Aug 29 18:58:08 2025 GMT Subject: CN=68a8bdc0-b0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:0a:71:ab:ad:14:50:59:d7:10:24:a9:82: 2c:3f:f4:09:da:32:ac:dc:93:ff:a0:8b:f0:e9:0b: 51:f4:f6:f3:8e:f4:28:1b:71:48:90:ed:23:1e:d5: 28:1f:c0:69:67:85:49:3e:98:8a:79:6f:be:a2:01: a8:a7:2c:be:13:9c:d9:43:85:03:05:1a:ef:22:f4: 9c:af:b6:8e:bf:16:07:e9:61:53:d3:af:3d:bc:71: 1a:c7:b1:8c:79:1e:8a:fa:60:c0:c4:ad:a4:77:04: 52:83:b8:a9:e5:d3:b7:eb:97:db:00:82:cf:11:c0: 74:6d:81:2e:1f:c7:30:bb:20:f4:57:22:22:07:d9: d3:71:99:b0:10:62:ca:e6:45:52:df:3f:c5:15:13: 53:75:10:9a:ef:36:6f:a4:0d:52:d6:f2:86:80:d9: 2c:a4:c2:20:22:dc:72:13:96:78:63:16:0b:98:07: 54:2e:a4:e6:65:34:7d:d8:37:51:92:ae:5b:96:9d: f2:ba:46:02:a8:9b:e3:e5:2a:58:79:24:7b:cc:eb: 71:a8:01:40:4e:1f:ac:c9:7c:7f:dd:c5:d3:ed:ae: a8:12:5e:45:29:28:4c:75:58:a8:0d:68:9b:7f:e2: 11:28:7d:0f:d5:bb:6f:ef:b8:06:d9:a2:74:5d:70: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B2:84:22:74:17:80:69:D9:1F:78:94:36:6C:85:F5:D5:30:D7:0F X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:3c:ff:ca:c5:dc:ee:94:b5:5a:c8:4f:f6:36:b5:47:da: db:f8:b1:ce:de:32:cd:ae:07:d1:63:e4:61:ba:9b:d5:ff:ca: 4e:1b:2f:bb:4e:38:05:90:b7:45:c6:99:3f:f6:be:65:f8:eb: 00:2d:0f:38:4c:e8:8f:d5:56:22:1e:6d:c1:54:7c:72:50:dc: 39:31:62:76:89:48:56:81:22:10:7f:af:ac:2f:cf:da:3b:bc: 37:08:bf:c0:20:0d:3f:f3:ff:fe:05:f3:a6:44:3b:ba:d0:cd: 6b:c6:e9:f9:be:fa:48:09:9c:3f:8e:b9:bc:30:97:12:e1:cc: d1:6b:d2:19:b0:74:c9:be:80:e5:0a:d3:12:88:8a:40:6d:32: 81:d8:ca:d8:af:ec:f4:5f:b1:b5:b4:28:e1:56:64:c0:37:cb: 6b:2b:b0:f9:f0:9d:0e:02:b1:b9:5c:94:52:84:6d:dd:ef:46: e8:d9:1e:73:aa:fb:4e:9f:66:30:04:a8:7e:79:c3:5a:d8:21: 13:c4:78:f5:11:60:82:85:bd:27:b3:49:d1:18:97:5e:f0:30: ab:1e:6f:da:10:78:0e:fa:35:d6:bd:2d:7d:c3:33:26:08:32: 5c:b4:f8:7a:21:d6:cc:c4:eb:b8:f0:1f:e9:86:d3:0c:e3:81: 68:64:ae:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUwODIyMTg1ODA4WhcNMjUwODI5MTg1ODA4WjAYMRYwFAYD VQQDEw02OGE4YmRjMC1iMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmEKcautFFBZ1xAkqYIsP/QJ2jKs3JP/oIvw6QtR9PbzjvQoG3FIkO0jHtUo H8BpZ4VJPpiKeW++ogGopyy+E5zZQ4UDBRrvIvScr7aOvxYH6WFT0689vHEax7GM eR6K+mDAxK2kdwRSg7ip5dO365fbAILPEcB0bYEuH8cwuyD0VyIiB9nTcZmwEGLK 5kVS3z/FFRNTdRCa7zZvpA1S1vKGgNkspMIgItxyE5Z4YxYLmAdULqTmZTR92DdR kq5blp3yukYCqJvj5SpYeSR7zOtxqAFATh+syXx/3cXT7a6oEl5FKShMdVioDWib f+IRKH0P1btv77gG2aJ0XXCn0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiyhCJ0 F4Bp2R94lDZshfXVMNcPMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHPDz/ysXc7pS1WshP9ja1R9rb+LHO3jLNrgfRY+RhupvV/8pOGy+7 TjgFkLdFxpk/9r5l+OsALQ84TOiP1VYiHm3BVHxyUNw5MWJ2iUhWgSIQf6+sL8/a O7w3CL/AIA0/8//+BfOmRDu60M1rxun5vvpICZw/jrm8MJcS4czRa9IZsHTJvoDl CtMSiIpAbTKB2MrYr+z0X7G1tCjhVmTAN8trK7D58J0OArG5XJRShG3d70bo2R5z qvtOn2YwBKh+ecNa2CETxHj1EWCChb0ns0nRGJde8DCrHm/aEHgO+jXWvS19wzMm CDJctPh6IdbMxOu48B/phtMM44FoZK6G -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:28 2025 by rpki-client