$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: USHM4iKyqdEHCvslTy0GJEk6JuwZHFJnIG4bv/pgrXs= Subject key identifier: 78:5C:0C:9E:CB:51:DD:35:85:6F:36:6E:CB:64:80:64:59:63:68:14 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0393 Signing time: Sat 23 Aug 2025 01:03:30 +0000 Manifest this update: Sat 23 Aug 2025 01:03:29 +0000 Manifest next update: Sat 30 Aug 2025 01:03:29 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: WtrUN7ixj1HV84nh8skZ6Msv7QJni5ljHJ1UDHIEjKo=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Aug 23 01:03:29 2025 GMT Not After : Aug 30 01:03:29 2025 GMT Subject: CN=68a91362-96f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:67:85:3b:cc:29:db:eb:6b:9b:59:cf:86: 2c:8c:a1:a9:b7:81:08:fd:98:a7:95:82:52:02:73: 41:d6:ac:38:6d:0b:ce:01:e4:1a:6c:84:47:4b:99: a7:45:e4:cf:cc:5a:05:74:23:00:31:41:65:0e:a4: fe:62:fd:b0:20:db:c7:7d:46:a5:67:9c:72:e3:1f: c5:fe:01:ae:b3:2d:10:59:f2:98:d0:06:82:f1:ce: 61:dc:eb:bb:de:ae:39:47:35:c7:f2:8d:2e:3d:e5: c2:42:a2:75:d5:eb:2b:f1:10:79:f4:70:b3:91:bf: 89:98:ed:fc:f4:03:2d:d3:49:e1:2e:62:df:83:83: 5c:7f:37:84:40:52:2c:ba:fa:43:70:86:60:91:f4: 0e:6e:e3:1c:6d:4e:03:98:19:1f:5a:94:c7:e2:25: c3:5d:bd:d4:a9:8a:87:09:c4:96:c6:d0:ec:00:01: 8f:43:ca:49:85:be:15:e5:7a:70:09:9c:2a:4c:1c: d7:91:20:63:2a:67:c7:7f:3d:1c:11:b0:3a:d4:4d: de:2e:b2:ea:0f:91:4e:30:8e:da:62:86:c7:92:09: d8:08:a8:5a:89:d3:c4:3b:5e:ee:15:e7:fb:f4:b2: ea:74:a0:ea:f9:af:29:24:20:c0:15:ea:61:a8:98: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5C:0C:9E:CB:51:DD:35:85:6F:36:6E:CB:64:80:64:59:63:68:14 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:55:10:a9:24:6c:1d:e7:45:fb:de:47:0a:37:37:af:aa:76: c0:9b:3a:bb:5e:a4:15:ba:cc:1c:10:97:f5:6a:bb:33:1f:5f: 5b:f7:91:d2:38:0a:97:e1:4e:d5:9e:e5:d1:cc:c1:78:00:9f: 97:c1:ea:a6:12:6c:36:78:d2:10:7f:ad:5f:f8:c0:56:15:20: a0:7b:92:5f:f2:35:22:65:bf:41:a6:48:72:2c:94:50:2e:f5: 1c:6c:d7:82:49:cc:b0:18:bd:19:d1:86:33:76:f9:0a:07:96: f1:03:2d:87:7e:6b:58:08:ce:c3:c1:38:95:bb:6f:37:c3:21: 69:a0:14:35:4d:c3:63:32:09:16:68:74:f7:07:71:ca:7a:b4: 3b:a5:3d:4e:00:62:1f:6f:6e:31:7f:ed:16:18:08:cd:df:2a: 16:6a:47:eb:7b:5f:c7:84:fd:ae:dd:0e:ac:d2:aa:d0:1a:c4: 5d:f9:40:6f:e9:84:7f:d7:54:31:c5:e9:0d:23:ae:cc:75:17: c4:a0:68:7a:19:92:71:5f:3e:df:41:d4:1c:76:e3:da:b4:92: 20:a0:31:d0:44:87:7b:00:6b:6f:a9:9f:6a:df:76:64:6a:72: 02:c5:dd:54:37:b0:79:59:79:56:cb:d9:5c:10:6c:13:7f:ba: 91:eb:37:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwODIzMDEwMzI5WhcNMjUwODMwMDEwMzI5WjAYMRYwFAYD VQQDEw02OGE5MTM2Mi05NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzFnhTvMKdvra5tZz4YsjKGpt4EI/ZinlYJSAnNB1qw4bQvOAeQabIRHS5mn ReTPzFoFdCMAMUFlDqT+Yv2wINvHfUalZ5xy4x/F/gGusy0QWfKY0AaC8c5h3Ou7 3q45RzXH8o0uPeXCQqJ11esr8RB59HCzkb+JmO389AMt00nhLmLfg4NcfzeEQFIs uvpDcIZgkfQObuMcbU4DmBkfWpTH4iXDXb3UqYqHCcSWxtDsAAGPQ8pJhb4V5Xpw CZwqTBzXkSBjKmfHfz0cEbA61E3eLrLqD5FOMI7aYobHkgnYCKhaidPEO17uFef7 9LLqdKDq+a8pJCDAFephqJgXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhcDJ7L Ud01hW82bstkgGRZY2gUMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1VRCpJGwd50X73kcKNzevqnbAmzq7XqQVuswcEJf1arszH19b95HS OAqX4U7VnuXRzMF4AJ+XweqmEmw2eNIQf61f+MBWFSCge5Jf8jUiZb9BpkhyLJRQ LvUcbNeCScywGL0Z0YYzdvkKB5bxAy2HfmtYCM7DwTiVu283wyFpoBQ1TcNjMgkW aHT3B3HKerQ7pT1OAGIfb24xf+0WGAjN3yoWakfre1/HhP2u3Q6s0qrQGsRd+UBv 6YR/11QxxekNI67MdRfEoGh6GZJxXz7fQdQcduPatJIgoDHQRId7AGtvqZ9q33Zk anICxd1UN7B5WXlWy9lcEGwTf7qR6zcD -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:13 2025 by rpki-client