$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: rUaZ2H0CjVKtpxg6IXUp4szSdPgYOtIOf0ZEzWSIWPU= Subject key identifier: 0B:D2:37:1E:F0:2F:C9:C3:F3:72:01:1C:FB:7F:AA:B0:7D:7F:1C:4A Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 3517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 34E7 Signing time: Fri 22 Aug 2025 14:27:55 +0000 Manifest this update: Fri 22 Aug 2025 14:27:55 +0000 Manifest next update: Fri 29 Aug 2025 14:27:55 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: WK26f93OjWW4J7P3VNwGYUB2iXJqdKQzNr218kBQ+VA=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13591 (0x3517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Aug 22 14:27:55 2025 GMT Not After : Aug 29 14:27:55 2025 GMT Subject: CN=68a87e6b-0e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:b3:64:2b:4d:da:e4:51:c1:33:40:c0:79: 2c:7c:e6:f1:9f:32:e9:c8:c0:b3:18:f0:44:79:17: 1f:90:e7:56:64:7c:ba:17:b5:b6:00:73:94:e9:bd: 83:01:82:8b:d8:aa:d3:2f:d8:55:10:1d:9c:c0:0e: b5:14:ed:2d:14:c1:77:f2:04:a0:ce:a5:4d:bf:8a: b0:db:80:c8:4a:4c:fb:dc:d6:b5:dc:eb:f1:0a:10: 22:7f:43:ab:79:da:28:c6:e6:3e:ff:5a:1a:2f:15: 70:ef:d9:c6:5c:cc:fe:94:f9:2d:4b:cd:cc:30:42: 2d:23:dd:21:1c:f5:ac:45:91:77:04:44:04:14:d0: bc:de:59:ec:82:7e:9b:ac:e3:81:76:44:2f:18:f5: 58:18:ca:19:d6:33:16:30:99:2e:0a:02:f2:d4:f9: 3c:62:51:51:b9:97:05:0c:69:2f:07:86:c1:ef:07: 92:6c:44:0a:f4:d3:b8:86:ef:fa:e9:7f:93:f2:64: 91:cf:db:c9:29:2a:80:df:bb:ef:fc:3e:ed:e0:c6: 9b:ac:f2:89:e7:4c:6d:a2:10:ec:87:45:28:a8:e9: 3b:7d:be:da:15:25:c4:7b:24:65:44:4d:76:ce:f3: 2c:10:0d:bf:0b:6d:bb:00:4f:89:a9:00:1a:4d:07: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:37:1E:F0:2F:C9:C3:F3:72:01:1C:FB:7F:AA:B0:7D:7F:1C:4A X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c1:ce:97:f4:77:7e:8f:8f:95:63:4c:e1:8e:5a:88:74:a0: 65:d3:d9:34:16:b1:6c:a1:f8:26:01:84:d7:bd:3e:c6:0b:2e: df:12:10:fa:cc:80:bc:be:3b:5a:73:c1:03:d4:3d:36:4e:33: de:5b:bd:d2:30:71:d9:dd:23:03:1b:24:36:87:59:d6:6f:95: 51:1c:e9:8c:8b:9e:43:90:1f:2e:4c:3f:47:45:85:77:8d:8e: c3:12:cf:22:1b:c9:b5:e5:97:e8:df:ba:e2:13:63:b3:af:b1: 97:c5:41:0a:fe:3c:04:20:2a:20:72:e2:cf:36:b9:9c:68:33: a6:74:61:c7:a9:02:b9:c0:06:86:34:da:78:11:20:ef:07:9e: 42:21:ee:ce:e4:4a:ca:8e:18:e8:21:de:90:31:5c:ad:53:4f: 60:31:b4:51:39:17:40:67:e5:c6:f5:fe:1f:88:92:b0:50:ce: 52:5c:66:70:71:10:89:ef:f2:cc:f2:c6:0c:d5:9a:95:63:99: cc:a5:25:e9:06:c3:0d:4e:a1:41:a6:ba:cc:bc:79:60:3f:f2: 77:35:27:61:43:30:74:20:b7:d5:61:01:7f:2f:d9:38:94:ef: 7f:d7:96:cb:9c:ef:31:e4:fa:9e:7c:6c:4b:3d:07:34:e1:46: 40:25:fa:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUwODIyMTQyNzU1WhcNMjUwODI5MTQyNzU1WjAYMRYwFAYD VQQDEw02OGE4N2U2Yi0wZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sWzZCtN2uRRwTNAwHksfObxnzLpyMCzGPBEeRcfkOdWZHy6F7W2AHOU6b2D AYKL2KrTL9hVEB2cwA61FO0tFMF38gSgzqVNv4qw24DISkz73Na13OvxChAif0Or edooxuY+/1oaLxVw79nGXMz+lPktS83MMEItI90hHPWsRZF3BEQEFNC83lnsgn6b rOOBdkQvGPVYGMoZ1jMWMJkuCgLy1Pk8YlFRuZcFDGkvB4bB7weSbEQK9NO4hu/6 6X+T8mSRz9vJKSqA37vv/D7t4MabrPKJ50xtohDsh0UoqOk7fb7aFSXEeyRlRE12 zvMsEA2/C227AE+JqQAaTQcNZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvSNx7w L8nD83IBHPt/qrB9fxxKMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwwc6X9Hd+j4+VY0zhjlqIdKBl09k0FrFsofgmAYTXvT7GCy7fEhD6 zIC8vjtac8ED1D02TjPeW73SMHHZ3SMDGyQ2h1nWb5VRHOmMi55DkB8uTD9HRYV3 jY7DEs8iG8m15Zfo37riE2Ozr7GXxUEK/jwEICogcuLPNrmcaDOmdGHHqQK5wAaG NNp4ESDvB55CIe7O5ErKjhjoId6QMVytU09gMbRRORdAZ+XG9f4fiJKwUM5SXGZw cRCJ7/LM8sYM1ZqVY5nMpSXpBsMNTqFBprrMvHlgP/J3NSdhQzB0ILfVYQF/L9k4 lO9/15bLnO8x5PqefGxLPQc04UZAJfoS -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:21 2025 by rpki-client