$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json) Hash identifier: riKMiSZbKKNE0Fz0Ng5bFtswfA/GC9Qs1jT1mxC4MU4= Subject key identifier: E3:A6:98:84:BE:ED:78:53:DF:AE:2E:21:44:EA:BE:73:F3:1B:D7:E1 Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft Manifest number: 034F Signing time: Sat 23 Aug 2025 01:15:29 +0000 Manifest this update: Sat 23 Aug 2025 01:15:29 +0000 Manifest next update: Sat 30 Aug 2025 01:15:29 +0000 Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: O6TWwQmUMXGoETVW3MYQ2EVlB2k2IRAP+x9gi1m0IbQ=) 2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: qH/kmALWQxd9w+o7ml/PHWheO95UYxgo26aceJX0/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: Aug 23 01:15:29 2025 GMT Not After : Aug 30 01:15:29 2025 GMT Subject: CN=68a91631-c208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:fa:6a:52:d9:37:c2:1a:63:b3:e9:15:16: c7:07:30:0f:17:56:10:e4:c4:f9:38:f4:3e:62:cc: 61:3d:d1:72:73:9b:91:c9:7f:34:99:67:fd:77:d9: 11:a0:04:86:c3:25:2b:9d:f0:ea:e4:7d:ea:bd:55: 3f:8e:b8:25:e4:1a:4e:49:54:3e:3b:07:ea:60:08: 76:3f:57:04:c9:a6:f6:01:2e:94:0f:49:27:53:06: 95:4f:f8:e6:69:f6:89:dc:75:02:aa:45:b9:fa:a1: a5:04:7e:3b:8f:34:85:64:37:10:7a:d4:1c:21:4c: 06:79:c0:db:76:93:50:9c:a1:21:0c:04:23:64:d1: 80:44:27:12:d9:63:9a:9d:ef:5c:8a:17:36:3b:37: 26:b4:59:c2:55:6c:31:2e:df:d9:e6:df:37:b1:09: 0e:10:53:77:e9:72:19:95:9a:3b:f5:19:dc:a7:7e: 24:c9:1c:56:38:86:07:d2:6b:08:56:c2:d0:09:77: 45:b9:72:d9:ab:e5:09:db:34:98:27:d3:61:38:d4: 79:69:f6:c6:f1:ba:b1:06:7e:63:47:e1:ed:2f:db: cd:1b:21:17:c8:bb:6b:ba:a2:1a:cc:0a:cd:73:b9: 57:43:5c:0f:2b:14:0e:5d:52:a0:66:e5:f9:2e:72: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A6:98:84:BE:ED:78:53:DF:AE:2E:21:44:EA:BE:73:F3:1B:D7:E1 X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:d8:30:4d:d7:b0:8b:35:51:0a:0d:db:4d:c0:95:45:da:03: 90:ce:d9:40:2e:4a:6c:ab:a8:b0:40:fc:f3:c3:f7:ba:95:d9: 77:3c:22:75:b8:b0:68:c6:a1:71:9a:7f:c4:48:be:b6:a3:ac: 0f:d3:85:59:44:ca:e5:4e:94:3e:4d:87:27:b2:2c:da:6a:f6: 6c:70:f4:70:79:ca:e7:91:3a:96:5d:78:6d:f2:d6:63:91:7d: d9:4a:d2:67:fb:81:24:fb:e1:85:69:33:29:e7:cf:7b:c9:da: ce:b4:bb:ce:3c:31:8e:60:2e:52:49:a1:26:79:45:4f:16:85: 37:71:15:4c:98:8f:e6:24:a4:2c:5a:5e:af:c8:fc:31:d4:cc: c5:12:e6:fa:e3:1a:b5:31:9c:00:d3:6c:29:6e:aa:82:a3:43: 62:4c:d9:41:c6:c4:35:16:15:6a:60:b6:da:4c:b2:96:1a:92: 40:bd:82:24:d1:bb:3c:04:77:3c:c2:5d:e1:e3:e0:e8:59:ed: 14:c3:83:e6:25:91:0c:17:ee:22:df:4d:91:12:15:99:13:bb: d6:32:18:8f:67:c1:ff:b3:bf:ed:54:2d:8b:30:91:69:2d:c0: 64:0e:d7:34:3c:22:7c:ad:d3:cb:66:89:f1:1d:18:db:c5:66: c5:ee:0d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjUwODIzMDExNTI5WhcNMjUwODMwMDExNTI5WjAYMRYwFAYD VQQDEw02OGE5MTYzMS1jMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkP6alLZN8IaY7PpFRbHBzAPF1YQ5MT5OPQ+YsxhPdFyc5uRyX80mWf9d9kR oASGwyUrnfDq5H3qvVU/jrgl5BpOSVQ+OwfqYAh2P1cEyab2AS6UD0knUwaVT/jm afaJ3HUCqkW5+qGlBH47jzSFZDcQetQcIUwGecDbdpNQnKEhDAQjZNGARCcS2WOa ne9cihc2OzcmtFnCVWwxLt/Z5t83sQkOEFN36XIZlZo79Rncp34kyRxWOIYH0msI VsLQCXdFuXLZq+UJ2zSYJ9NhONR5afbG8bqxBn5jR+HtL9vNGyEXyLtruqIazArN c7lXQ1wPKxQOXVKgZuX5LnLXdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOmmIS+ 7XhT364uIUTqvnPzG9fhMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1 M3FGcDdicEtRQ0tONGh2WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDr2DBN17CLNVEKDdtNwJVF2gOQztlALkpsq6iwQPzzw/e6ldl3PCJ1 uLBoxqFxmn/ESL62o6wP04VZRMrlTpQ+TYcnsizaavZscPRwecrnkTqWXXht8tZj kX3ZStJn+4Ek++GFaTMp5897ydrOtLvOPDGOYC5SSaEmeUVPFoU3cRVMmI/mJKQs Wl6vyPwx1MzFEub64xq1MZwA02wpbqqCo0NiTNlBxsQ1FhVqYLbaTLKWGpJAvYIk 0bs8BHc8wl3h4+DoWe0Uw4PmJZEMF+4i302REhWZE7vWMhiPZ8H/s7/tVC2LMJFp LcBkDtc0PCJ8rdPLZonxHRjbxWbF7g2x -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:41 2025 by rpki-client