$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: mAAmaM/Fxjw1TnhTdR0CK1wzD/cKoIDVGUxLxjxpV88= Subject key identifier: 96:D3:DA:6E:34:F1:C2:D7:EB:9D:A2:26:77:67:5F:AE:7D:45:A7:0A Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: A1 Signing time: Sat 23 Aug 2025 06:28:47 +0000 Manifest this update: Sat 23 Aug 2025 06:28:47 +0000 Manifest next update: Sat 30 Aug 2025 06:28:47 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: NRwXDfkwVSn9v4Nlch0Yp+GYBhsLnZVVqQEWAniEa/c=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Aug 23 06:28:47 2025 GMT Not After : Aug 30 06:28:47 2025 GMT Subject: CN=68a95f9f-6381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:53:3d:8f:7f:62:80:d5:a7:1b:25:02:5c: 79:a8:b2:41:dc:5f:ea:ab:13:10:b8:79:8b:88:75: d2:5e:0c:44:64:0c:28:a0:ac:29:1d:1f:47:d2:44: 63:ab:c5:e0:7f:92:20:55:3d:8d:ad:68:be:54:5c: 3a:24:0f:39:d5:62:09:00:75:a8:85:4f:4e:5a:85: 77:ff:70:89:c5:4b:f4:4f:8b:47:2c:be:a0:03:c0: ef:37:ad:79:9d:8b:f6:44:35:f2:b5:df:a1:62:01: b6:cf:36:f8:4b:37:1a:a4:01:12:b9:8c:84:e7:0a: 15:0f:c4:4d:d3:49:df:ab:e8:25:17:93:43:55:25: 12:2e:b8:97:83:7e:5b:ec:c5:54:8b:16:3f:23:06: 57:86:2c:81:54:74:52:59:77:f1:4e:56:0a:3d:c2: 4e:fc:cf:90:6e:d4:df:2c:eb:af:47:49:e7:8d:eb: 7f:d5:4d:ae:a6:6e:85:37:df:67:92:2c:0f:08:73: 30:6f:a4:54:6c:86:c8:e0:f0:a5:19:6a:15:ec:2b: 15:c4:c9:9c:94:cd:a8:a7:55:92:3c:5d:14:7f:cc: 7d:84:74:c7:8e:8f:33:55:27:66:7c:08:b0:e6:d7: 4b:47:99:ba:74:64:94:10:3c:33:3d:6d:f0:ac:cb: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:DA:6E:34:F1:C2:D7:EB:9D:A2:26:77:67:5F:AE:7D:45:A7:0A X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:da:8a:54:b0:ef:bc:cb:26:02:11:f2:d7:12:77:5a:29:c4: 31:5e:7d:28:0f:00:9f:85:cb:5b:94:fb:03:ee:2f:05:18:2b: 9b:0d:fa:18:33:a8:42:50:4a:e9:1f:df:bd:d2:da:29:71:09: 07:51:6a:50:6d:c2:f2:a5:35:ec:94:e9:bb:c5:5b:cd:39:44: 60:39:90:67:9e:76:84:a0:d1:9c:0b:85:17:88:17:50:8f:88: 1d:64:29:ee:35:0c:4b:19:dc:b9:40:96:46:8e:7e:ae:54:99: d7:c6:b0:be:82:2a:06:3f:f4:f4:02:8a:1e:30:73:08:f5:a8: 51:9c:fa:cd:0e:5e:4e:55:9f:03:bd:c0:6f:3e:af:30:a2:4c: 8e:0a:84:b4:0b:9d:9e:8c:d5:a9:7f:aa:56:95:2b:2b:e1:5c: 9b:05:af:da:1e:61:10:12:0e:48:3c:00:6a:8d:9d:25:1d:a6: 9a:cc:50:f7:0c:99:47:27:4a:59:6c:64:b3:ef:cd:a3:df:4f: 32:20:a2:97:49:e2:e5:d6:c0:de:9c:02:f0:cb:b9:4e:82:b6: 09:83:ec:97:ee:9f:ef:4c:bc:a8:a6:89:88:42:b0:20:10:67: 5a:c6:a3:99:fe:c8:a3:e4:ce:6d:37:83:7e:01:63:75:84:cd: 78:92:7b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUwODIzMDYyODQ3WhcNMjUwODMwMDYyODQ3WjAYMRYwFAYD VQQDEw02OGE5NWY5Zi02MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5xTPY9/YoDVpxslAlx5qLJB3F/qqxMQuHmLiHXSXgxEZAwooKwpHR9H0kRj q8Xgf5IgVT2NrWi+VFw6JA851WIJAHWohU9OWoV3/3CJxUv0T4tHLL6gA8DvN615 nYv2RDXytd+hYgG2zzb4SzcapAESuYyE5woVD8RN00nfq+glF5NDVSUSLriXg35b 7MVUixY/IwZXhiyBVHRSWXfxTlYKPcJO/M+QbtTfLOuvR0nnjet/1U2upm6FN99n kiwPCHMwb6RUbIbI4PClGWoV7CsVxMmclM2op1WSPF0Uf8x9hHTHjo8zVSdmfAiw 5tdLR5m6dGSUEDwzPW3wrMufsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbT2m40 8cLX652iJndnX659RacKMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk2opUsO+8yyYCEfLXEndaKcQxXn0oDwCfhctblPsD7i8FGCubDfoY M6hCUErpH9+90topcQkHUWpQbcLypTXslOm7xVvNOURgOZBnnnaEoNGcC4UXiBdQ j4gdZCnuNQxLGdy5QJZGjn6uVJnXxrC+gioGP/T0AooeMHMI9ahRnPrNDl5OVZ8D vcBvPq8wokyOCoS0C52ejNWpf6pWlSsr4VybBa/aHmEQEg5IPABqjZ0lHaaazFD3 DJlHJ0pZbGSz782j308yIKKXSeLl1sDenALwy7lOgrYJg+yX7p/vTLyopomIQrAg EGdaxqOZ/sij5M5tN4N+AWN1hM14knur -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:29 2025 by rpki-client