$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: zXYvJ74lNKS6VckLxAi0E9HTzZccmV51W/yBW5+nf+4= Subject key identifier: AE:76:17:05:48:49:8E:E9:44:13:D0:84:3C:65:BC:1B:EE:09:7E:21 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C64 Signing time: Fri 22 Aug 2025 18:34:38 +0000 Manifest this update: Fri 22 Aug 2025 18:34:38 +0000 Manifest next update: Fri 29 Aug 2025 18:34:38 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: xRQuG2xAvLOhTOdZgNHQLSBw4LTNRub5ds0mftxuLOg=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Aug 22 18:34:38 2025 GMT Not After : Aug 29 18:34:38 2025 GMT Subject: CN=68a8b83e-4540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:04:17:d1:99:61:ee:bf:ca:e3:c2:72:20: c9:52:99:fb:16:8b:d9:5f:8e:d4:30:a9:82:0a:d7: 17:7e:09:e2:e2:0a:f7:f3:ff:6c:50:9f:27:d8:a8: d1:bc:71:03:a8:02:7e:18:08:93:02:f4:6c:95:f9: 8f:17:65:6f:cd:9e:c1:07:c4:ca:b1:2b:d0:64:dd: a9:e4:7e:dc:07:84:6c:28:27:57:26:69:09:40:f9: fb:d0:18:e0:b3:95:d7:6d:70:6e:9b:30:3b:51:0e: 2e:43:94:75:a5:f1:43:4d:8b:ca:26:90:46:a9:f4: a5:2e:13:21:3b:21:99:9c:a7:65:af:17:d9:52:d3: 5b:2d:7b:11:fe:7e:81:96:bc:d7:28:96:19:b0:92: 86:e0:81:bb:1a:62:cd:e4:27:ad:27:de:79:64:d0: b2:ff:ce:62:3f:01:e1:fc:79:03:85:16:76:2a:89: ad:78:3a:c5:83:cc:a3:8b:a1:b4:d9:b7:4c:bc:fa: 47:be:76:0d:94:ad:d4:21:d1:42:9a:7c:02:22:89: d5:4b:1f:76:08:5c:69:3d:91:f6:4e:de:9e:a7:a6: aa:c9:71:56:06:85:aa:a5:2e:c2:83:08:fd:5f:ee: a3:9d:61:80:dc:d0:a1:39:05:77:67:39:c6:74:03: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:17:05:48:49:8E:E9:44:13:D0:84:3C:65:BC:1B:EE:09:7E:21 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3b:b2:af:3b:46:5b:3f:8d:f3:7b:9f:3d:c0:d7:43:ec:91: 0b:e9:a8:21:7b:f8:17:75:a5:fe:85:89:d3:3f:a9:11:41:57: a1:ac:4d:51:4e:69:0c:0b:60:67:15:eb:3d:03:8c:91:5b:7c: 6e:a4:3d:35:1d:8e:61:64:d4:17:f6:23:9a:7c:89:8d:a7:76: 00:3b:1d:13:28:2d:8d:8f:4a:4d:a0:44:8d:ae:a9:a8:e6:74: c6:1b:ae:79:a4:93:45:fe:1d:40:7a:41:78:5e:83:28:5b:a9: 07:d1:65:f1:46:f5:42:73:cf:be:11:cb:f6:91:0a:aa:55:f9: b2:ca:d8:ad:c0:fa:8d:c1:f5:d6:cd:22:87:02:99:b3:68:1e: 57:bc:ef:ff:b0:dd:b2:44:8d:0a:70:8f:d4:9c:11:d7:83:4d: 57:90:66:f0:23:3c:68:31:a7:ef:2d:58:ea:57:b1:aa:3f:0e: 4c:e1:18:cc:06:97:bc:98:96:40:f8:42:c8:d1:0a:95:63:da: dc:c2:c8:aa:27:f1:f1:72:54:cf:be:37:43:48:69:87:31:8e: ea:28:02:c1:47:dd:9a:f7:c4:dd:8c:a5:07:5a:33:94:4f:a1: fe:fe:9e:df:70:c2:2b:26:fc:73:f1:46:6a:8f:a4:1d:13:5e: 67:05:a0:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUwODIyMTgzNDM4WhcNMjUwODI5MTgzNDM4WjAYMRYwFAYD VQQDEw02OGE4YjgzZS00NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIMEF9GZYe6/yuPCciDJUpn7FovZX47UMKmCCtcXfgni4gr38/9sUJ8n2KjR vHEDqAJ+GAiTAvRslfmPF2VvzZ7BB8TKsSvQZN2p5H7cB4RsKCdXJmkJQPn70Bjg s5XXbXBumzA7UQ4uQ5R1pfFDTYvKJpBGqfSlLhMhOyGZnKdlrxfZUtNbLXsR/n6B lrzXKJYZsJKG4IG7GmLN5CetJ955ZNCy/85iPwHh/HkDhRZ2KomteDrFg8yji6G0 2bdMvPpHvnYNlK3UIdFCmnwCIonVSx92CFxpPZH2Tt6ep6aqyXFWBoWqpS7Cgwj9 X+6jnWGA3NChOQV3ZznGdAMYkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK52FwVI SY7pRBPQhDxlvBvuCX4hMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPO7KvO0ZbP43ze589wNdD7JEL6aghe/gXdaX+hYnTP6kRQVehrE1R TmkMC2BnFes9A4yRW3xupD01HY5hZNQX9iOafImNp3YAOx0TKC2Nj0pNoESNrqmo 5nTGG655pJNF/h1AekF4XoMoW6kH0WXxRvVCc8++Ecv2kQqqVfmyytitwPqNwfXW zSKHApmzaB5XvO//sN2yRI0KcI/UnBHXg01XkGbwIzxoMafvLVjqV7GqPw5M4RjM Bpe8mJZA+ELI0QqVY9rcwsiqJ/HxclTPvjdDSGmHMY7qKALBR92a98TdjKUHWjOU T6H+/p7fcMIrJvxz8UZqj6QdE15nBaAL -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:30 2025 by rpki-client