$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json) Hash identifier: 5vN1IKmULV9ihr22SsVO0Wj5QYvKITGJq+PglEt9Qxs= Subject key identifier: 17:CA:5D:15:DD:B6:18:44:47:28:93:5A:A3:3D:FE:48:F6:86:B1:5A Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 04:07:33 +0000 Manifest this update: Sat 23 Aug 2025 04:07:33 +0000 Manifest next update: Sat 30 Aug 2025 04:07:33 +0000 Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: VG1jiF62IbL2VVM23OpKzW+cFbtgDKg7JEK5HNFdNs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Validity Not Before: Aug 23 04:07:33 2025 GMT Not After : Aug 30 04:07:33 2025 GMT Subject: CN=68a93e85-d314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:a6:4a:5e:78:fd:cf:89:f7:2e:12:91:63: 8a:03:4e:ac:70:e5:9b:c2:df:4b:1f:eb:86:26:11: 38:90:ea:b1:92:c8:24:cd:ab:28:84:ee:71:36:99: 32:d6:76:3f:68:06:04:3f:dd:f5:a0:6c:5f:ed:56: a1:5e:45:17:4b:bc:58:1d:29:39:fb:ec:b8:34:9a: 56:80:37:3a:88:e2:3d:0c:2e:7c:07:32:d7:f3:59: 2f:53:c3:55:b1:ed:fc:84:8b:c8:97:2b:e0:6c:fc: 78:f5:90:72:0a:32:30:ea:f2:ce:07:c7:a8:82:f8: 82:54:e5:69:f6:b5:de:59:48:0a:27:d6:c2:ac:4f: b0:3b:f0:78:ec:3f:9c:43:10:c6:2d:91:0c:6e:0b: 38:d3:26:90:f6:9d:30:a5:e3:5c:d7:7c:89:11:57: 94:8b:86:e8:5f:f7:85:ea:2d:1e:c8:6b:35:44:aa: 1d:ea:7d:0e:48:a5:c2:e2:4e:c3:e9:d5:30:fc:02: f4:ea:84:04:79:18:66:59:b3:ac:05:7c:1f:3c:59: 40:8f:54:8b:83:1c:9f:1b:d9:c4:c4:aa:2a:b5:ca: 2a:e5:88:e1:7d:b1:06:66:68:0f:7c:fc:dd:a8:08: 0f:b2:5f:3a:44:26:73:ac:0e:8d:9b:b8:24:b3:f2: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CA:5D:15:DD:B6:18:44:47:28:93:5A:A3:3D:FE:48:F6:86:B1:5A X509v3 Authority Key Identifier: keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b4:b1:ee:bd:c9:33:ab:c8:e1:b2:74:35:f9:83:da:6f:8b: 21:14:42:da:4e:93:fc:48:e9:ee:0b:84:44:c3:9d:33:c0:5e: 7b:21:6a:dd:2b:79:ad:96:ad:6a:9a:7f:5a:d8:f0:e6:ce:00: 25:2b:25:f9:c6:73:31:d0:d4:43:c5:ec:36:eb:a5:4d:6f:6a: 35:32:0a:cf:19:27:b3:e3:7a:6f:ed:7f:18:3f:f8:9d:87:9a: 70:a9:6f:54:04:4c:72:f8:0a:3e:bd:a7:74:f8:fc:d2:42:92: 42:a3:b8:ea:4c:28:5a:1e:3a:26:de:2f:a0:46:53:12:8e:ad: 1f:8f:7e:80:cf:df:d2:5d:6e:7c:05:97:02:77:fe:af:b4:91: 5b:53:00:df:34:02:e4:54:32:7b:1e:0d:af:3e:c4:3d:89:73: 79:87:a2:1d:fa:28:86:98:1a:38:3f:2f:93:24:8c:e6:a7:af: 32:c8:2e:56:eb:f8:f9:66:18:25:fe:8a:8b:59:cd:0d:d6:c8: 60:e6:63:02:4a:e7:a9:8f:93:2e:bc:4f:b6:f5:6d:b9:ee:63: 70:06:a8:64:b7:f0:d5:90:4f:fc:e0:00:9e:df:b1:8b:97:20: 48:24:22:22:c2:f1:59:2b:4e:e4:f8:7b:4d:51:72:fe:28:90: 69:f3:65:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKENGRDExOERBOTZGRjYwNUZCRERGMjdBQTRBQTAyNjNC NEVGNjc5REEwHhcNMjUwODIzMDQwNzMzWhcNMjUwODMwMDQwNzMzWjAYMRYwFAYD VQQDEw02OGE5M2U4NS1kMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTemSl54/c+J9y4SkWOKA06scOWbwt9LH+uGJhE4kOqxksgkzasohO5xNpky 1nY/aAYEP931oGxf7VahXkUXS7xYHSk5++y4NJpWgDc6iOI9DC58BzLX81kvU8NV se38hIvIlyvgbPx49ZByCjIw6vLOB8eogviCVOVp9rXeWUgKJ9bCrE+wO/B47D+c QxDGLZEMbgs40yaQ9p0wpeNc13yJEVeUi4boX/eF6i0eyGs1RKod6n0OSKXC4k7D 6dUw/AL06oQEeRhmWbOsBXwfPFlAj1SLgxyfG9nExKoqtcoq5YjhfbEGZmgPfPzd qAgPsl86RCZzrA6Nm7gks/JFfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfKXRXd thhERyiTWqM9/kj2hrFaMB8GA1UdIwQYMBaAFM/RGNqW/2Bfvd8nqkqgJjtO9nna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FMjMwMzIyQTYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lGLTkzeWVxU3FBbU8wNzJl ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o5RVkycGJfWUYtOTN5ZXFTcUFtTzA3MmVkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FMjMwMzIyQTYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lG LTkzeWVxU3FBbU8wNzJlZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBetLHuvckzq8jhsnQ1+YPab4shFELaTpP8SOnuC4REw50zwF57IWrd K3mtlq1qmn9a2PDmzgAlKyX5xnMx0NRDxew266VNb2o1MgrPGSez43pv7X8YP/id h5pwqW9UBExy+Ao+vad0+PzSQpJCo7jqTChaHjom3i+gRlMSjq0fj36Az9/SXW58 BZcCd/6vtJFbUwDfNALkVDJ7Hg2vPsQ9iXN5h6Id+iiGmBo4Py+TJIzmp68yyC5W 6/j5Zhgl/oqLWc0N1shg5mMCSuepj5MuvE+29W257mNwBqhkt/DVkE/84ACe37GL lyBIJCIiwvFZK07k+HtNUXL+KJBp82Vh -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:07 2025 by rpki-client