$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: riWQlNPCIdJHPZq4obzh2P7iOgyEdN0Qm6hVSr5J13I= Subject key identifier: B9:51:3F:15:AC:0F:F3:9B:AB:0E:01:6C:3F:D7:3A:9E:FE:1B:E0:EE Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0CAD Signing time: Fri 22 Aug 2025 18:21:21 +0000 Manifest this update: Fri 22 Aug 2025 18:21:20 +0000 Manifest next update: Fri 29 Aug 2025 18:21:20 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: pK2Reqk3PPyfHmuW4/L7YUH23RIA2t0M8WlDmzJzD0k=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Aug 22 18:21:20 2025 GMT Not After : Aug 29 18:21:20 2025 GMT Subject: CN=68a8b521-3ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:97:45:d5:d6:ca:05:b6:da:10:03:0e:1d: e7:fc:d8:24:4c:f4:96:dd:65:86:7a:38:81:a4:d7: 01:5e:37:bd:e9:d1:64:ea:2b:2d:9f:fc:48:14:4f: 31:9e:30:8c:a6:bd:8b:fe:9a:f5:1a:49:46:e8:c9: c0:21:dc:85:96:9e:23:01:2b:e4:16:dd:c7:ba:9b: 0b:8e:38:a3:7e:bb:42:de:2c:b9:27:f3:58:e9:ed: b1:29:d4:66:5b:1d:de:d6:dd:ca:75:60:f6:8c:c2: be:7d:10:72:2b:15:d3:69:5b:dd:25:b0:5b:45:14: 0d:c3:f8:09:9d:34:1e:e8:65:42:ac:c6:7c:ee:bb: 07:90:48:57:4a:f9:6c:3b:36:de:e6:71:61:cc:9e: ee:19:70:a2:28:dd:7d:0a:8d:76:3b:40:50:8d:fb: ef:02:89:ac:cc:42:2e:8d:67:1e:0c:25:d4:0f:be: c7:65:d6:d7:26:54:2f:1b:0f:71:ef:88:cb:34:e1: fa:09:0f:26:dc:4d:31:b6:f9:bd:0c:20:56:d9:97: 46:a1:1e:54:c6:ef:99:ab:b7:96:d3:fa:2e:d1:90: e1:0f:47:85:a1:84:e5:73:80:e7:ce:7b:7d:f1:00: 5c:5c:77:38:4f:ec:2d:bb:42:42:b4:a0:71:a6:18: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:3F:15:AC:0F:F3:9B:AB:0E:01:6C:3F:D7:3A:9E:FE:1B:E0:EE X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ae:28:ce:35:72:e0:d8:f9:8d:12:39:3c:03:59:49:3c:8f: 8c:14:75:0d:2c:86:ac:99:50:69:aa:cb:e0:aa:ac:d9:3e:62: 60:e1:4e:22:da:69:d8:7a:01:ba:ed:ae:c0:2a:0b:02:e6:57: fe:b6:7b:c9:9b:0d:0c:a6:44:4a:7a:38:5e:e7:75:bb:33:96: d3:9d:fe:c7:3a:a3:4b:e4:5f:7e:0d:77:24:18:21:ad:ed:20: f5:c7:fd:de:eb:dd:b8:71:cc:66:d6:78:d2:9f:ef:f5:95:9e: 70:41:78:d0:e5:4a:61:96:c4:bf:31:a2:db:5f:7c:5f:06:64: 86:22:69:04:91:4b:a0:90:60:d7:e1:43:f5:0c:f0:3e:9d:cd: 55:f9:63:f6:3b:60:d4:62:b8:92:3f:2f:b2:0a:80:ac:f0:e1: 72:3a:f1:19:33:9b:62:fb:fa:f2:54:c6:9b:85:29:f1:55:2f: ef:f2:fb:f9:6e:6d:cb:e4:e5:b4:7c:62:26:77:70:94:d2:f7: 1a:2e:ee:e7:45:e2:61:18:01:93:15:97:53:c3:d3:1e:ba:7c: db:dc:53:eb:56:18:52:d5:75:aa:03:0d:be:1c:d7:2e:2b:89: af:ec:2d:dc:e0:ef:fc:59:52:2c:d6:69:e9:e0:ea:83:64:c4: c1:35:42:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUwODIyMTgyMTIwWhcNMjUwODI5MTgyMTIwWjAYMRYwFAYD VQQDEw02OGE4YjUyMS0zYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUmXRdXWygW22hADDh3n/NgkTPSW3WWGejiBpNcBXje96dFk6istn/xIFE8x njCMpr2L/pr1GklG6MnAIdyFlp4jASvkFt3HupsLjjijfrtC3iy5J/NY6e2xKdRm Wx3e1t3KdWD2jMK+fRByKxXTaVvdJbBbRRQNw/gJnTQe6GVCrMZ87rsHkEhXSvls Ozbe5nFhzJ7uGXCiKN19Co12O0BQjfvvAomszEIujWceDCXUD77HZdbXJlQvGw9x 74jLNOH6CQ8m3E0xtvm9DCBW2ZdGoR5Uxu+Zq7eW0/ou0ZDhD0eFoYTlc4Dnznt9 8QBcXHc4T+wtu0JCtKBxphh13wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlRPxWs D/Obqw4BbD/XOp7+G+DuMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGrijONXLg2PmNEjk8A1lJPI+MFHUNLIasmVBpqsvgqqzZPmJg4U4i 2mnYegG67a7AKgsC5lf+tnvJmw0MpkRKejhe53W7M5bTnf7HOqNL5F9+DXckGCGt 7SD1x/3e6924ccxm1njSn+/1lZ5wQXjQ5UphlsS/MaLbX3xfBmSGImkEkUugkGDX 4UP1DPA+nc1V+WP2O2DUYriSPy+yCoCs8OFyOvEZM5ti+/ryVMabhSnxVS/v8vv5 bm3L5OW0fGImd3CU0vcaLu7nReJhGAGTFZdTw9Meunzb3FPrVhhS1XWqAw2+HNcu K4mv7C3c4O/8WVIs1mnp4OqDZMTBNUKB -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:20 2025 by rpki-client