$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: wUWM2QFE/IHpyN753VLJaTiNSISxjEVb8Gm1J56pucg= Subject key identifier: 8D:99:07:05:53:92:42:22:A1:3E:4E:39:E8:F4:2B:D3:7D:42:66:2E Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A49 Signing time: Fri 22 Aug 2025 16:26:48 +0000 Manifest this update: Fri 22 Aug 2025 16:26:47 +0000 Manifest next update: Fri 29 Aug 2025 16:26:47 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: 23WZcs8jPSqIhAlLaowMqlMQwgZXVC7+YUD4xUFgR1k=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6757 (0x1a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Aug 22 16:26:47 2025 GMT Not After : Aug 29 16:26:47 2025 GMT Subject: CN=68a89a47-56eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:07:27:61:42:ff:d8:70:69:82:b2:0f:a0: 03:b7:bc:34:99:95:7c:3f:6f:03:a9:7b:aa:f5:b3: 6b:8e:20:9d:5c:c1:6a:60:e7:8e:f5:a7:26:a9:8a: 96:5f:00:91:9e:fe:ce:67:b5:48:ec:e4:ab:ea:a0: 85:f1:ed:ef:58:79:38:1e:81:b3:47:a9:03:77:7c: c4:b4:a1:0c:c0:2d:ed:7d:32:a2:79:05:6c:bf:ea: b3:ee:06:ed:05:0b:4f:90:36:34:21:e1:7c:b1:c4: 88:99:cb:43:e2:8d:fe:07:71:36:ea:7c:d8:ed:27: 8b:b0:74:1e:c9:31:98:d2:db:8a:4e:7c:62:1d:76: c4:5c:43:72:73:e4:79:f3:20:cc:41:14:53:95:6d: c3:a8:51:58:07:e6:fd:64:86:df:45:0e:67:f6:d0: 05:07:91:c8:8a:2e:b0:2b:c2:97:e8:de:ed:00:d7: fc:86:13:7d:34:76:8e:9b:b9:15:1c:ec:ce:46:d9: 37:f5:26:a5:51:ba:9b:27:71:8e:5c:4e:18:ae:ba: 58:66:ab:7c:00:6c:b5:f5:24:b8:21:cb:41:bf:82: 6a:62:dd:d5:f8:eb:c2:70:eb:ff:7c:60:75:2b:80: 17:35:32:f0:95:1c:94:cf:e9:6a:d3:65:b0:82:5a: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:07:05:53:92:42:22:A1:3E:4E:39:E8:F4:2B:D3:7D:42:66:2E X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ff:2a:b2:23:f1:ab:44:58:6c:50:ab:1a:56:59:6c:a6:b8: 48:85:f0:61:ea:f8:f9:80:e8:f2:2e:8e:c8:d8:fa:2f:f4:3f: e1:15:10:07:bc:e1:10:fe:16:7b:c6:11:6e:8c:be:a9:7a:b6: 76:f8:50:9c:c2:fb:9e:ea:6b:bb:aa:9e:c8:a5:36:5b:fb:32: f7:22:02:49:f6:3f:5e:89:b6:61:be:33:a9:4d:a3:ed:04:bd: 54:7b:9e:dd:fc:41:df:2d:33:ba:65:63:4f:af:51:b3:7e:f0: c3:4e:78:68:6a:90:66:33:dd:36:d5:cf:e2:17:4a:cc:7e:f5: f8:59:a2:3d:b8:9b:fa:89:8c:a1:6f:90:14:6a:4b:25:12:b6: 4b:db:07:53:2c:33:08:bb:f6:50:1c:60:99:9a:4b:c6:49:2b: 73:22:c5:70:db:ac:9c:01:ee:54:af:9d:fd:f7:05:ba:8c:7e: af:18:d4:a3:93:d8:be:e6:5b:84:65:f4:f0:83:25:78:36:2d: 01:7d:38:d6:b6:53:01:eb:aa:50:75:f6:12:64:2b:28:ea:65: f2:cd:99:59:b2:6f:41:66:9e:32:9a:42:66:46:fb:09:06:55: 8e:90:8a:0f:66:83:37:6f:b5:3e:60:0c:87:ee:98:95:03:a4: f1:25:d9:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUwODIyMTYyNjQ3WhcNMjUwODI5MTYyNjQ3WjAYMRYwFAYD VQQDEw02OGE4OWE0Ny01NmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcIHJ2FC/9hwaYKyD6ADt7w0mZV8P28DqXuq9bNrjiCdXMFqYOeO9acmqYqW XwCRnv7OZ7VI7OSr6qCF8e3vWHk4HoGzR6kDd3zEtKEMwC3tfTKieQVsv+qz7gbt BQtPkDY0IeF8scSImctD4o3+B3E26nzY7SeLsHQeyTGY0tuKTnxiHXbEXENyc+R5 8yDMQRRTlW3DqFFYB+b9ZIbfRQ5n9tAFB5HIii6wK8KX6N7tANf8hhN9NHaOm7kV HOzORtk39SalUbqbJ3GOXE4YrrpYZqt8AGy19SS4IctBv4JqYt3V+OvCcOv/fGB1 K4AXNTLwlRyUz+lq02WwglpF8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2ZBwVT kkIioT5OOej0K9N9QmYuMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB/yqyI/GrRFhsUKsaVllsprhIhfBh6vj5gOjyLo7I2Pov9D/hFRAH vOEQ/hZ7xhFujL6perZ2+FCcwvue6mu7qp7IpTZb+zL3IgJJ9j9eibZhvjOpTaPt BL1Ue57d/EHfLTO6ZWNPr1GzfvDDTnhoapBmM9021c/iF0rMfvX4WaI9uJv6iYyh b5AUakslErZL2wdTLDMIu/ZQHGCZmkvGSStzIsVw26ycAe5Ur5399wW6jH6vGNSj k9i+5luEZfTwgyV4Ni0BfTjWtlMB66pQdfYSZCso6mXyzZlZsm9BZp4ymkJmRvsJ BlWOkIoPZoM3b7U+YAyH7piVA6TxJdmW -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:12 2025 by rpki-client