$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: Sg9jREzLavLeqqn4GE1m7+SL3kkVdpcqv+r7aLhEJVE= Subject key identifier: 59:44:5C:49:71:E2:EF:27:11:8E:18:A4:41:36:C5:2F:C9:06:A6:7C Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0E69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2A37 Signing time: Fri 22 Aug 2025 17:05:07 +0000 Manifest this update: Fri 22 Aug 2025 17:05:06 +0000 Manifest next update: Fri 29 Aug 2025 17:05:06 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: gjNmbh6evNlsNswhCRS6/mFUFYImQA3r/GCqLJgqEb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3689 (0xe69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Aug 22 17:05:06 2025 GMT Not After : Aug 29 17:05:06 2025 GMT Subject: CN=68a8a343-a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:06:94:5d:e6:bd:30:48:39:e8:09:37:1b: 5a:2a:0b:e4:29:27:46:92:ad:c2:01:0c:7d:b3:35: fc:2b:61:be:c4:33:43:a6:ad:3b:c3:52:12:5e:d5: e9:3a:d9:85:79:ab:85:94:da:2e:9f:84:68:60:cc: c3:63:0f:23:b9:d8:96:f0:3b:72:94:f0:84:a5:d8: a0:bd:bc:5a:3a:c2:03:4c:03:e8:4b:d4:38:fc:ea: bf:cc:3e:0d:c5:16:ae:f7:92:41:9c:3a:a0:6a:ee: 9e:19:95:c3:bf:c9:40:2a:5d:07:67:d8:af:3e:99: 42:7a:e5:80:d1:0b:ac:26:da:91:11:6b:50:05:3f: 72:9e:6d:03:06:6e:b5:64:40:7b:60:5e:8f:ca:f6: 98:22:66:0f:09:a5:58:26:94:00:89:0f:cf:e9:15: 28:6a:dc:5d:4e:d2:77:d1:4d:e5:4c:4c:7c:3f:69: 6d:da:d5:db:e3:b7:1a:03:7d:ce:14:62:a0:1d:c9: 67:7d:ca:3c:4b:e5:57:9d:45:f7:5e:65:f4:b4:a8: fb:fc:be:56:a8:19:86:98:86:90:48:63:97:76:b3: a1:3d:6e:cc:54:77:28:d5:97:dc:b9:50:54:08:d4: 96:41:ca:d1:5b:f6:b5:f1:b4:ea:46:8c:15:74:4f: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:44:5C:49:71:E2:EF:27:11:8E:18:A4:41:36:C5:2F:C9:06:A6:7C X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e1:49:f0:bd:e4:44:82:70:bb:87:b6:33:5c:63:65:71:1d: 6e:48:19:25:a0:63:7e:ac:a9:37:20:00:f1:55:24:eb:c5:29: 10:99:ea:99:cd:d2:03:b4:f8:a2:f6:24:f1:5b:be:18:8a:9d: 58:af:5a:94:6f:8a:26:5f:95:c4:aa:41:8b:19:9f:13:07:53: d7:5e:3f:8b:34:99:d1:25:4f:e2:4e:27:64:09:16:e8:71:85: 02:0d:d4:97:a3:40:07:9d:3a:35:23:dd:45:4f:09:27:47:d6: 7d:e7:12:a3:ce:ca:b5:93:b3:d4:60:7b:04:48:57:44:54:e8: ac:41:90:be:d2:1f:68:22:cb:bb:55:40:8f:2c:bb:17:a0:80: 93:7a:70:b3:7b:67:b8:ed:e7:9a:0f:61:99:37:40:08:5a:85: 45:2b:59:e4:a1:b1:1b:43:3f:a5:35:06:84:04:93:8f:56:a0: ec:31:b8:21:21:ce:5f:b7:97:82:d8:d8:cb:14:26:2e:b3:12: 11:de:22:64:a0:e3:cd:75:ad:c8:48:4c:cd:03:80:b7:89:77: b6:4b:d7:13:81:52:49:f4:9f:bf:fb:61:af:44:1e:b5:b7:bd: 61:41:87:5c:c7:a8:0d:85:af:01:a6:94:69:92:50:42:a5:76: 6d:b5:ae:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUwODIyMTcwNTA2WhcNMjUwODI5MTcwNTA2WjAYMRYwFAYD VQQDEw02OGE4YTM0My1hMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG4GlF3mvTBIOegJNxtaKgvkKSdGkq3CAQx9szX8K2G+xDNDpq07w1ISXtXp OtmFeauFlNoun4RoYMzDYw8judiW8DtylPCEpdigvbxaOsIDTAPoS9Q4/Oq/zD4N xRau95JBnDqgau6eGZXDv8lAKl0HZ9ivPplCeuWA0QusJtqREWtQBT9ynm0DBm61 ZEB7YF6PyvaYImYPCaVYJpQAiQ/P6RUoatxdTtJ30U3lTEx8P2lt2tXb47caA33O FGKgHclnfco8S+VXnUX3XmX0tKj7/L5WqBmGmIaQSGOXdrOhPW7MVHco1ZfcuVBU CNSWQcrRW/a18bTqRowVdE94CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlEXElx 4u8nEY4YpEE2xS/JBqZ8MB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ4UnwveREgnC7h7YzXGNlcR1uSBkloGN+rKk3IADxVSTrxSkQmeqZ zdIDtPii9iTxW74Yip1Yr1qUb4omX5XEqkGLGZ8TB1PXXj+LNJnRJU/iTidkCRbo cYUCDdSXo0AHnTo1I91FTwknR9Z95xKjzsq1k7PUYHsESFdEVOisQZC+0h9oIsu7 VUCPLLsXoICTenCze2e47eeaD2GZN0AIWoVFK1nkobEbQz+lNQaEBJOPVqDsMbgh Ic5ft5eC2NjLFCYusxIR3iJkoOPNda3ISEzNA4C3iXe2S9cTgVJJ9J+/+2GvRB61 t71hQYdcx6gNha8BppRpklBCpXZtta53 -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:23 2025 by rpki-client