$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: uSu4Kvapf0nyAaLU0J9XVNY+1j7mlPxqIWVtK4mMTes= Subject key identifier: 4F:78:0D:DC:7B:D8:08:0D:7B:29:1E:FD:69:DE:70:5B:0A:C4:39:22 Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 082A Signing time: Fri 22 Aug 2025 20:59:33 +0000 Manifest this update: Fri 22 Aug 2025 20:59:32 +0000 Manifest next update: Fri 29 Aug 2025 20:59:32 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: Q2Aa/s3rQlIKn5flwwKPVyF2zktl1CnVZsXlVnl7CWQ=) 2: 5CC56600558F11F084E6F15EC4F9AE02.roa (hash: xIBKPrrFFxiQYfc9KkaEQ4EE2NMobEqzAjMwpy97Iaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Aug 22 20:59:32 2025 GMT Not After : Aug 29 20:59:32 2025 GMT Subject: CN=68a8da35-ec34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:d9:2f:c4:a4:18:5e:a9:47:91:02:a0:cb: 0c:69:06:e7:d9:fe:b4:6c:36:db:77:b2:b2:fa:d9: a9:a5:46:83:a3:d0:c5:ef:83:21:e2:97:18:ee:e1: f7:66:ab:b7:22:2b:2a:91:58:78:f7:60:73:7f:94: 12:44:cc:04:53:16:b6:b4:84:e9:d0:d6:42:bf:15: a8:f6:66:32:39:d8:ff:91:a3:b9:1e:42:4c:2d:3a: 76:53:b8:d9:39:22:15:79:74:37:ec:7f:40:bd:16: fc:a9:fa:99:e1:7e:9c:b8:03:98:a0:69:0f:58:74: 7b:da:61:6e:90:54:93:b7:80:b7:84:59:b6:a6:00: b7:fe:fc:ca:9e:a9:d9:e3:96:82:66:af:5f:c9:ab: 20:4e:0d:b8:45:58:f7:53:91:37:49:13:d4:69:9a: 5a:db:f3:c6:60:cc:57:4a:02:ac:5f:82:99:ca:c3: f6:2a:00:0c:6b:a5:d6:96:61:43:a3:aa:81:ef:03: 1a:1d:d7:fd:ab:ee:f8:27:fa:19:5b:29:9f:de:8a: 90:20:ee:7a:45:81:12:72:e6:0f:f6:c7:3b:e4:0b: bd:f8:80:46:7b:06:8e:cb:41:17:57:a3:de:61:f7: cc:17:5a:f2:61:de:e6:2c:8b:85:d7:6d:80:04:02: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:78:0D:DC:7B:D8:08:0D:7B:29:1E:FD:69:DE:70:5B:0A:C4:39:22 X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:fa:e1:3a:9d:ec:c8:1e:59:44:42:ae:73:26:7c:0c:da:90: 29:ea:bb:d5:2e:ec:f2:4d:64:19:82:31:87:9b:57:57:e8:7a: d8:0f:3c:7f:4b:9d:d6:af:e8:54:dd:d6:a7:9a:b9:58:ef:26: 0b:3c:ef:04:3a:39:69:eb:69:8d:b6:83:8a:84:b7:14:0f:95: 67:81:37:6e:98:78:af:87:ef:40:d5:47:11:67:15:b4:93:42: c2:3f:51:e3:9e:e5:96:b0:47:32:3d:3c:41:d2:1d:85:b5:4d: 89:f8:30:e1:e9:00:7d:95:29:a6:e3:19:3e:e6:d9:58:74:54: 61:0f:ec:b2:ed:72:32:93:b2:21:c9:8a:e4:3a:9c:40:1c:65: a0:d2:9b:f0:d3:a3:3f:24:2f:81:10:29:9f:d6:98:bb:b9:5d: 38:98:d7:12:25:85:3e:48:3c:25:f8:39:e2:ea:20:26:2d:35: 17:dc:53:ad:8d:77:3e:1d:38:06:d6:75:9f:0d:97:ca:a3:e4: d3:db:ed:a3:9b:64:d0:10:03:3a:d0:fd:49:6d:4c:90:02:1d: 04:48:14:5c:ba:ec:64:81:3a:92:02:ba:65:83:36:19:f8:6a: 64:cd:55:be:8e:45:c7:64:21:6d:d0:cf:18:00:04:07:69:28: ad:69:4c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUwODIyMjA1OTMyWhcNMjUwODI5MjA1OTMyWjAYMRYwFAYD VQQDEw02OGE4ZGEzNS1lYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KrZL8SkGF6pR5ECoMsMaQbn2f60bDbbd7Ky+tmppUaDo9DF74Mh4pcY7uH3 Zqu3IisqkVh492Bzf5QSRMwEUxa2tITp0NZCvxWo9mYyOdj/kaO5HkJMLTp2U7jZ OSIVeXQ37H9AvRb8qfqZ4X6cuAOYoGkPWHR72mFukFSTt4C3hFm2pgC3/vzKnqnZ 45aCZq9fyasgTg24RVj3U5E3SRPUaZpa2/PGYMxXSgKsX4KZysP2KgAMa6XWlmFD o6qB7wMaHdf9q+74J/oZWymf3oqQIO56RYEScuYP9sc75Au9+IBGewaOy0EXV6Pe YffMF1ryYd7mLIuF122ABALHqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE94Ddx7 2AgNeyke/WnecFsKxDkiMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK+uE6nezIHllEQq5zJnwM2pAp6rvVLuzyTWQZgjGHm1dX6HrYDzx/ S53Wr+hU3danmrlY7yYLPO8EOjlp62mNtoOKhLcUD5VngTdumHivh+9A1UcRZxW0 k0LCP1HjnuWWsEcyPTxB0h2FtU2J+DDh6QB9lSmm4xk+5tlYdFRhD+yy7XIyk7Ih yYrkOpxAHGWg0pvw06M/JC+BECmf1pi7uV04mNcSJYU+SDwl+Dni6iAmLTUX3FOt jXc+HTgG1nWfDZfKo+TT2+2jm2TQEAM60P1JbUyQAh0ESBRcuuxkgTqSArplgzYZ +GpkzVW+jkXHZCFt0M8YAAQHaSitaUwM -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:25 2025 by rpki-client