$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: I9FR1hMCkWL2yUFx1aZtj4kitOqi4FauzlU2eKAxqrM= Subject key identifier: 0A:78:8B:47:D5:B9:D0:CD:C1:E0:3A:41:B0:0B:FD:73:D1:44:39:05 Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 07D0 Signing time: Fri 22 Aug 2025 21:18:33 +0000 Manifest this update: Fri 22 Aug 2025 21:18:32 +0000 Manifest next update: Fri 29 Aug 2025 21:18:32 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: WOCOMjdZW9nevZpybGeWlHogpuGBZtUXiTlqYfo+Jx4=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Aug 22 21:18:32 2025 GMT Not After : Aug 29 21:18:32 2025 GMT Subject: CN=68a8dea8-59cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9b:4c:bc:4e:29:2c:53:8e:80:39:2c:8d:37: 77:48:5c:76:e3:b6:5d:ea:56:82:1a:23:c3:59:c0: da:1b:d4:7e:f2:69:f7:98:67:e5:48:c6:b0:17:26: 4e:7f:b0:3d:74:28:13:ac:66:90:ed:29:21:b0:65: 93:6c:e8:b4:b6:f8:e8:71:c0:ee:ac:59:c3:38:77: 2d:91:61:bf:37:03:5b:b0:b4:40:95:4f:a8:ba:55: 43:18:1d:a3:98:18:cc:40:07:87:18:2a:c3:76:b9: 89:dc:2c:f5:e9:6f:1b:c7:aa:58:8b:ef:86:f1:79: 31:84:7a:f2:43:c0:c4:18:36:dc:bd:ef:dd:63:f7: 0a:f8:c9:c9:22:7e:c8:42:f8:72:5b:02:94:9c:de: be:5b:49:96:b7:85:a8:39:43:e2:3b:6e:30:89:a1: e3:8d:f6:73:bd:d4:c6:67:26:a6:bf:c2:97:d6:01: 6c:6a:59:cf:40:d5:50:2c:c5:f4:f2:9d:63:58:ae: ed:68:57:e7:25:ae:a9:34:02:7b:0b:97:15:92:0e: 4a:0a:e2:5b:8a:57:d1:50:29:cd:13:45:df:66:8c: 87:d9:79:8a:0f:e2:42:c6:bd:76:fa:13:8a:5c:ca: 19:a7:ed:98:70:e8:5a:1a:6a:2d:4c:37:77:d4:ab: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:78:8B:47:D5:B9:D0:CD:C1:E0:3A:41:B0:0B:FD:73:D1:44:39:05 X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:dd:77:e5:95:0a:25:b8:db:33:13:5f:b4:25:4b:13:45:59: 93:46:41:ea:3d:f0:66:bf:c5:f7:72:a2:01:fd:4b:92:f4:85: 58:bc:e2:4d:56:8a:6a:e1:89:fb:10:ee:e9:09:ed:85:7d:a0: b7:2b:d8:8c:9c:b8:55:67:b0:71:d9:43:ec:02:ef:67:e5:66: 11:64:2b:1c:30:ec:c1:e4:57:28:04:ae:dc:34:9e:4a:07:dd: 74:6e:22:72:4a:6e:d4:4a:43:2b:ae:d2:4e:d1:cf:df:01:df: ef:1b:d0:8e:a9:94:e9:37:fe:9b:c5:1e:37:69:13:33:5c:f7: 99:ce:01:2b:81:25:93:9d:2a:f5:f0:85:c2:3e:d3:bb:75:96: 8a:ac:d7:0f:c0:a8:39:45:2f:da:82:98:f7:0c:94:45:0b:f9: 66:22:a7:f0:f7:92:3e:9b:6a:23:c1:00:d4:ed:7b:73:13:3e: 29:8c:00:26:e9:ba:f2:57:53:ff:41:2c:c7:48:4a:a7:01:6e: 35:c8:be:98:2f:1e:ee:1b:d0:14:78:48:f4:47:85:e7:9a:92: e9:05:9c:ee:c5:12:48:e1:65:8a:8b:52:de:74:6d:e9:5b:39: d0:8b:65:35:5b:75:d3:b7:71:ea:e8:ae:0a:1f:d0:0b:ec:ef: fe:99:73:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjUwODIyMjExODMyWhcNMjUwODI5MjExODMyWjAYMRYwFAYD VQQDEw02OGE4ZGVhOC01OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ptMvE4pLFOOgDksjTd3SFx247Zd6laCGiPDWcDaG9R+8mn3mGflSMawFyZO f7A9dCgTrGaQ7SkhsGWTbOi0tvjoccDurFnDOHctkWG/NwNbsLRAlU+oulVDGB2j mBjMQAeHGCrDdrmJ3Cz16W8bx6pYi++G8XkxhHryQ8DEGDbcve/dY/cK+MnJIn7I QvhyWwKUnN6+W0mWt4WoOUPiO24wiaHjjfZzvdTGZyamv8KX1gFsalnPQNVQLMX0 8p1jWK7taFfnJa6pNAJ7C5cVkg5KCuJbilfRUCnNE0XfZoyH2XmKD+JCxr12+hOK XMoZp+2YcOhaGmotTDd31Kt2VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp4i0fV udDNweA6QbAL/XPRRDkFMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH3XfllQoluNszE1+0JUsTRVmTRkHqPfBmv8X3cqIB/UuS9IVYvOJN Vopq4Yn7EO7pCe2FfaC3K9iMnLhVZ7Bx2UPsAu9n5WYRZCscMOzB5FcoBK7cNJ5K B910biJySm7USkMrrtJO0c/fAd/vG9COqZTpN/6bxR43aRMzXPeZzgErgSWTnSr1 8IXCPtO7dZaKrNcPwKg5RS/agpj3DJRFC/lmIqfw95I+m2ojwQDU7XtzEz4pjAAm 6bryV1P/QSzHSEqnAW41yL6YLx7uG9AUeEj0R4XnmpLpBZzuxRJI4WWKi1LedG3p WznQi2U1W3XTt3Hq6K4KH9AL7O/+mXPd -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:01 2025 by rpki-client