$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: Y+/hk1Glg4hJS/Q1fLpmh3GUQe3cmFU7meS52qV4fN0= Subject key identifier: C1:80:39:1F:65:04:E6:58:DE:A3:89:5D:4F:DF:3F:3B:F0:78:36:B7 Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: EB Signing time: Sat 23 Aug 2025 05:28:06 +0000 Manifest this update: Sat 23 Aug 2025 05:28:06 +0000 Manifest next update: Sat 30 Aug 2025 05:28:06 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: zJPxiqapZooiG+x3pnC3d6Gksu/I6jYoeDwytTYtMiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Aug 23 05:28:06 2025 GMT Not After : Aug 30 05:28:06 2025 GMT Subject: CN=68a95166-3517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:44:3e:26:3c:f5:cf:dd:67:22:de:38:23: 6a:73:08:c8:2f:0a:a3:7a:5f:f4:c9:a7:73:e1:32: c2:c7:d9:c0:49:5b:02:2b:d1:b5:dc:2d:ef:37:e1: a2:fe:ea:48:66:87:0e:cb:ab:1a:eb:e0:18:8f:f0: 37:53:b3:5e:4f:8f:81:f8:ee:89:ad:6c:67:84:f2: ec:a1:13:82:27:de:e0:f9:20:0a:01:87:39:32:8c: 84:92:83:d0:ce:48:48:a2:36:76:ef:4e:a1:26:5b: be:ef:fb:0e:98:e6:5b:96:9f:81:ee:31:56:60:e6: e3:c3:93:aa:c1:43:8f:4e:d7:e1:4d:38:e5:ef:b1: b0:24:fa:c0:23:0c:02:36:12:ec:b4:3f:8a:59:91: d4:0f:66:da:c5:fe:06:5f:19:aa:7b:ed:98:a4:f7: 5e:2e:ee:8a:10:95:60:9d:b3:08:a8:48:4a:1d:c1: d3:ea:05:9a:04:94:74:03:46:e7:dc:03:3a:23:16: d6:f9:7f:a4:dd:fc:46:65:50:16:d8:d9:df:c2:f7: 4c:62:21:06:cc:a1:86:ea:16:ea:eb:71:03:de:85: fb:d3:ed:8b:60:93:85:de:a4:bd:52:0d:12:1d:62: fd:83:a6:77:0e:f8:86:d9:75:46:dc:5d:07:bc:5f: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:80:39:1F:65:04:E6:58:DE:A3:89:5D:4F:DF:3F:3B:F0:78:36:B7 X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ba:26:fc:6b:81:e3:76:cf:6b:f8:d6:7a:af:ad:cc:62:5c: f8:cb:41:5a:8e:65:ba:22:ee:82:21:0b:a7:7a:a1:43:5f:1a: 4d:b1:84:25:24:23:13:18:c9:4d:04:ab:4c:0b:8e:50:5c:a3: 25:a2:2d:fb:c4:1d:88:8f:fe:98:af:6a:76:b7:22:61:df:e1: c3:90:50:70:33:b2:eb:36:6f:d7:82:f0:ae:23:8a:11:f5:c6: 2a:15:50:4e:35:8e:c1:c5:08:02:84:cb:a4:48:87:e3:0f:bc: a3:1f:5b:05:e0:52:47:03:67:3a:be:91:e6:c8:98:00:01:ce: 1d:8e:e6:8d:82:b8:fe:6e:0b:23:a4:ef:cd:06:02:ae:17:6f: cf:90:29:2e:06:c2:db:f1:d5:c7:4a:90:86:5c:94:25:3b:1a: e4:3e:b0:3c:15:af:8a:dd:c8:d3:74:01:59:d2:75:ea:28:64: 61:df:de:56:82:33:2e:da:64:ac:87:1d:be:c5:e5:74:74:05: c0:15:9b:5c:3d:93:a1:0a:78:08:57:98:7b:88:b0:00:57:e9: 4b:ea:87:da:2b:2e:42:ec:6a:21:c4:9d:5b:c9:d9:6d:91:ad: 79:04:88:b3:f8:92:7c:b6:a7:84:53:3e:b1:55:f7:a1:aa:4e: a3:72:ee:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUwODIzMDUyODA2WhcNMjUwODMwMDUyODA2WjAYMRYwFAYD VQQDEw02OGE5NTE2Ni0zNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFdEPiY89c/dZyLeOCNqcwjILwqjel/0yadz4TLCx9nASVsCK9G13C3vN+Gi /upIZocOy6sa6+AYj/A3U7NeT4+B+O6JrWxnhPLsoROCJ97g+SAKAYc5MoyEkoPQ zkhIojZ2706hJlu+7/sOmOZblp+B7jFWYObjw5OqwUOPTtfhTTjl77GwJPrAIwwC NhLstD+KWZHUD2baxf4GXxmqe+2YpPdeLu6KEJVgnbMIqEhKHcHT6gWaBJR0A0bn 3AM6IxbW+X+k3fxGZVAW2NnfwvdMYiEGzKGG6hbq63ED3oX70+2LYJOF3qS9Ug0S HWL9g6Z3DviG2XVG3F0HvF9RlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGAOR9l BOZY3qOJXU/fPzvweDa3MB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjuib8a4Hjds9r+NZ6r63MYlz4y0FajmW6Iu6CIQuneqFDXxpNsYQl JCMTGMlNBKtMC45QXKMloi37xB2Ij/6Yr2p2tyJh3+HDkFBwM7LrNm/XgvCuI4oR 9cYqFVBONY7BxQgChMukSIfjD7yjH1sF4FJHA2c6vpHmyJgAAc4djuaNgrj+bgsj pO/NBgKuF2/PkCkuBsLb8dXHSpCGXJQlOxrkPrA8Fa+K3cjTdAFZ0nXqKGRh395W gjMu2mSshx2+xeV0dAXAFZtcPZOhCngIV5h7iLAAV+lL6ofaKy5C7GohxJ1bydlt ka15BIiz+JJ8tqeEUz6xVfehqk6jcu7a -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:33 2025 by rpki-client