$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: N7OK/6JBAmqnyiXG6pnqThBKb0850s/hpo5+GSS09bE= Subject key identifier: DB:11:A7:50:21:69:FC:59:21:AE:45:37:DA:7D:7B:83:2A:B1:63:F9 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E52 Signing time: Fri 22 Aug 2025 17:52:27 +0000 Manifest this update: Fri 22 Aug 2025 17:52:27 +0000 Manifest next update: Fri 29 Aug 2025 17:52:27 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: JWEIElO/WU2ADpGTR2nmz5G7Ew+0xa68Pf5GqS80TRM=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Aug 22 17:52:27 2025 GMT Not After : Aug 29 17:52:27 2025 GMT Subject: CN=68a8ae5b-34d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:86:d8:1a:72:b7:92:33:85:b0:36:3f:e9: 6d:15:eb:2d:9f:1f:46:5f:20:03:f7:63:2d:55:0c: 84:0e:86:68:bc:bf:9b:bb:1e:a2:7a:29:00:b2:cc: d5:23:3f:9d:bd:e9:9a:d5:f2:4a:8a:b0:31:a4:3a: 10:03:1f:dc:e9:96:29:7c:04:a9:45:6a:19:39:43: 2c:a1:ff:8e:42:3c:2e:d9:65:cb:2d:e0:b5:9e:15: 8d:ae:e3:13:bd:e5:e8:7e:a8:eb:2a:9c:c4:89:d9: 41:e2:0d:a3:86:7d:54:5a:73:ea:40:0e:80:a0:b7: ee:56:72:df:0c:e7:16:25:23:29:8e:13:6b:51:dd: 21:ee:7e:86:7b:de:6b:85:eb:3f:5c:70:1a:d3:14: 8c:a7:f6:70:c9:ec:f1:63:e7:6f:97:4e:54:71:aa: 9f:83:b4:91:f6:a0:53:1a:ea:0f:3c:4c:6a:c3:58: b5:d7:1f:80:0c:f2:6c:8a:64:62:84:32:02:28:79: 39:d8:4a:b0:84:92:a3:78:31:69:8b:01:4c:f9:81: 45:dc:c1:c9:50:fe:f6:c4:3d:3f:ab:18:e2:c9:9e: 25:7a:b9:7c:32:0a:27:58:0b:44:6c:2c:3c:bd:7f: 24:31:19:61:df:51:79:92:5d:32:27:92:d8:38:1b: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:A7:50:21:69:FC:59:21:AE:45:37:DA:7D:7B:83:2A:B1:63:F9 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f5:a7:46:5e:e3:9b:55:a9:18:da:26:ed:57:fe:36:0d:19: dd:59:be:4e:9e:b7:0a:de:0e:da:5b:ac:51:7a:49:c7:98:65: fe:bb:b4:4c:1e:3a:d5:f0:2c:2d:8a:38:78:19:34:b3:6b:98: 8d:70:88:84:83:40:f0:24:5d:3a:d2:51:81:37:bb:c1:d6:0a: ef:37:0b:f5:30:79:4f:f9:cc:1b:ae:b8:db:51:17:2f:d4:16: f6:51:ec:64:b4:1c:b4:1b:76:43:0d:ed:98:e7:25:eb:12:3e: 76:73:61:4e:d9:e5:84:50:d0:f9:90:af:2f:07:95:6f:c7:28: 97:8c:cb:6c:51:cb:d2:e2:2a:ce:17:ae:51:93:ed:ca:e6:de: cd:41:64:da:43:c5:26:17:86:bc:93:39:c1:fc:94:8f:d9:62: 2d:79:af:b2:0f:b7:e6:df:47:67:35:b9:96:a2:28:32:77:05: 4e:dc:0d:45:0a:06:b4:d9:73:ca:81:b1:3f:49:12:2a:08:68: 81:d7:97:8c:2c:4a:aa:9d:0f:2d:7e:f8:ad:2e:60:7c:4b:10: 2d:3d:2c:b6:df:e2:cf:45:ce:99:73:96:d3:61:c1:7a:45:b8: 98:e0:07:05:5c:09:4a:bc:01:f2:af:a0:12:78:6e:a4:08:ef: e9:82:31:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUwODIyMTc1MjI3WhcNMjUwODI5MTc1MjI3WjAYMRYwFAYD VQQDEw02OGE4YWU1Yi0zNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT+G2Bpyt5IzhbA2P+ltFestnx9GXyAD92MtVQyEDoZovL+bux6ieikAsszV Iz+dvema1fJKirAxpDoQAx/c6ZYpfASpRWoZOUMsof+OQjwu2WXLLeC1nhWNruMT veXofqjrKpzEidlB4g2jhn1UWnPqQA6AoLfuVnLfDOcWJSMpjhNrUd0h7n6Ge95r hes/XHAa0xSMp/ZwyezxY+dvl05Ucaqfg7SR9qBTGuoPPExqw1i11x+ADPJsimRi hDICKHk52EqwhJKjeDFpiwFM+YFF3MHJUP72xD0/qxjiyZ4lerl8MgonWAtEbCw8 vX8kMRlh31F5kl0yJ5LYOBuUXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsRp1Ah afxZIa5FN9p9e4MqsWP5MB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs9adGXuObVakY2ibtV/42DRndWb5OnrcK3g7aW6xReknHmGX+u7RM HjrV8Cwtijh4GTSza5iNcIiEg0DwJF060lGBN7vB1grvNwv1MHlP+cwbrrjbURcv 1Bb2UexktBy0G3ZDDe2Y5yXrEj52c2FO2eWEUND5kK8vB5VvxyiXjMtsUcvS4irO F65Rk+3K5t7NQWTaQ8UmF4a8kznB/JSP2WItea+yD7fm30dnNbmWoigydwVO3A1F Cga02XPKgbE/SRIqCGiB15eMLEqqnQ8tfvitLmB8SxAtPSy23+LPRc6Zc5bTYcF6 RbiY4AcFXAlKvAHyr6ASeG6kCO/pgjGB -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:51 2025 by rpki-client