$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: /nBLrIPHY6rIkPGHUmmhAxt+WG5LBaGOXmqqxUJ9lnE= Subject key identifier: C4:A9:BF:B7:39:28:0F:93:24:76:5E:63:F0:7B:F0:D6:0A:E9:9C:42 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 0133 Signing time: Sat 23 Aug 2025 04:54:58 +0000 Manifest this update: Sat 23 Aug 2025 04:54:58 +0000 Manifest next update: Sat 30 Aug 2025 04:54:58 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: +LHrcxMHeJgdurbAgVUdk5PgwUUz0Y5lmCWFVntCbwM=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Aug 23 04:54:58 2025 GMT Not After : Aug 30 04:54:58 2025 GMT Subject: CN=68a949a2-a48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:8f:21:17:a6:18:55:ec:f2:7f:9a:c0:e0: 32:e4:41:12:1e:c7:c4:96:4a:e2:3d:27:73:91:33: 84:95:1e:71:74:53:e5:43:c7:18:4d:02:bf:6c:bb: 19:48:1c:4b:8f:24:2f:97:3d:23:8e:df:65:b9:93: a4:78:76:29:3f:25:6c:86:32:4c:1e:f5:7f:4d:87: 42:79:be:50:44:d7:a0:b0:4d:38:96:2b:2b:78:f9: 6a:6b:bd:c5:05:53:d7:73:79:7a:ce:18:ef:e5:5b: cb:cf:60:ca:fe:05:10:66:2f:76:f3:80:da:da:70: 85:5a:fa:c8:87:d1:1f:e2:66:6b:fe:d1:3a:cb:55: 85:ff:ef:e5:c8:10:d7:9f:db:7e:9f:e4:1a:65:21: 50:ab:3c:0e:00:e6:fe:c7:4f:44:cd:06:c7:5e:8c: fa:bb:5e:ee:ca:49:39:1f:e3:ad:9b:1c:c2:9c:9f: 24:e9:0b:8b:fc:36:28:23:8e:04:03:fa:40:68:c8: 70:73:b2:3a:4c:d6:14:35:02:08:54:0e:f4:e3:a1: 4e:b8:b4:2d:93:c3:6c:55:4d:3a:0a:b7:46:a2:7e: e6:c8:48:2b:41:79:37:3a:f3:90:d1:88:8c:29:37: d4:c8:45:43:8c:3f:55:f6:99:a1:a6:46:ec:a0:2e: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:BF:B7:39:28:0F:93:24:76:5E:63:F0:7B:F0:D6:0A:E9:9C:42 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ee:61:62:7a:db:5a:18:5c:86:75:60:59:72:49:55:3b:5f: 3d:d7:f1:9c:76:a8:cf:43:8a:9f:39:55:5c:57:36:43:34:66: 6e:68:f0:04:52:3b:09:ee:3b:bf:85:cb:d5:8d:73:e7:ce:c7: 83:c1:3c:50:3f:4a:0c:1a:be:48:7d:88:68:64:28:1c:c6:34: bf:f5:a7:f0:5f:1f:d6:98:05:4d:9f:21:db:a1:54:92:50:04: 82:9b:a7:b9:83:25:0c:6e:b7:44:42:ea:28:43:2a:fa:68:03: 1f:92:94:3a:0b:7d:8a:df:ca:f6:7b:84:f6:d8:71:84:61:dc: 79:e9:7b:64:9e:da:49:76:18:20:56:84:cb:78:73:48:f5:3b: 68:00:3f:f3:15:55:1d:40:61:d7:51:f5:45:b8:ec:f7:be:78: 33:a7:ca:d1:d8:a0:99:d8:34:19:3f:37:81:2c:1d:2a:81:9a: cb:5b:9c:a7:db:d9:de:ce:c0:ba:e9:ce:0d:d0:0a:4e:b7:56: 11:38:3d:3a:b4:2f:c3:3f:31:70:85:68:1a:00:79:3d:9b:3e: 69:ef:66:61:bc:44:6d:d4:a9:ef:59:6e:16:53:bc:e7:8f:6a: e5:b4:cd:c0:5d:a2:fd:41:01:df:de:87:f2:db:b8:f7:2f:51: a4:e5:61:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwODIzMDQ1NDU4WhcNMjUwODMwMDQ1NDU4WjAYMRYwFAYD VQQDEw02OGE5NDlhMi1hNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rmPIRemGFXs8n+awOAy5EESHsfElkriPSdzkTOElR5xdFPlQ8cYTQK/bLsZ SBxLjyQvlz0jjt9luZOkeHYpPyVshjJMHvV/TYdCeb5QRNegsE04lisrePlqa73F BVPXc3l6zhjv5VvLz2DK/gUQZi9284Da2nCFWvrIh9Ef4mZr/tE6y1WF/+/lyBDX n9t+n+QaZSFQqzwOAOb+x09EzQbHXoz6u17uykk5H+OtmxzCnJ8k6QuL/DYoI44E A/pAaMhwc7I6TNYUNQIIVA7046FOuLQtk8NsVU06CrdGon7myEgrQXk3OvOQ0YiM KTfUyEVDjD9V9pmhpkbsoC7J3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSpv7c5 KA+TJHZeY/B78NYK6ZxCMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA77mFiettaGFyGdWBZcklVO1891/GcdqjPQ4qfOVVcVzZDNGZuaPAE UjsJ7ju/hcvVjXPnzseDwTxQP0oMGr5IfYhoZCgcxjS/9afwXx/WmAVNnyHboVSS UASCm6e5gyUMbrdEQuooQyr6aAMfkpQ6C32K38r2e4T22HGEYdx56XtkntpJdhgg VoTLeHNI9TtoAD/zFVUdQGHXUfVFuOz3vngzp8rR2KCZ2DQZPzeBLB0qgZrLW5yn 29nezsC66c4N0ApOt1YROD06tC/DPzFwhWgaAHk9mz5p72ZhvERt1KnvWW4WU7zn j2rltM3AXaL9QQHf3ofy27j3L1Gk5WHT -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:15 2025 by rpki-client