$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: SmkiTisMH2eswtNamhh5r0EbOFX1XY/aWjA0U/+mjeg= Subject key identifier: B9:AE:AA:C7:90:FF:B7:EB:E5:F2:DF:6C:79:9F:70:C9:26:3F:11:EE Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 06:02:33 +0000 Manifest this update: Sat 23 Aug 2025 06:02:32 +0000 Manifest next update: Sat 30 Aug 2025 06:02:32 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: FPVQk+ZmYQUYY28LaJv9PZPeiEkGt6DgGHQkgLoZk1k=) 2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ScK5Mkjc4CtGpC9rnxIJeiwAah1HeyqfBAVqLucgBa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Aug 23 06:02:32 2025 GMT Not After : Aug 30 06:02:32 2025 GMT Subject: CN=68a95978-de4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:9b:60:05:de:84:a0:2f:6e:1f:bf:38:9c: 5b:39:ad:2d:13:70:dc:e7:86:53:c0:df:c2:d2:6a: 90:9e:bf:2b:67:73:bf:a8:df:5f:8e:c7:24:f4:52: db:c1:2d:08:bd:66:63:f2:62:2b:dc:e9:46:71:68: 6e:51:6f:f7:73:f2:0f:da:f5:6e:76:f8:b5:7c:50: ad:5a:bd:3c:14:52:15:00:22:b9:9d:f8:92:e7:a1: 20:a0:92:c4:12:ba:6e:06:b5:9d:df:2d:20:04:50: c1:61:08:28:4a:35:eb:30:aa:92:ba:f1:df:aa:77: c1:79:80:cb:b1:74:58:14:75:f8:56:41:b6:13:e5: 1c:b0:99:22:88:3f:9c:ba:10:77:65:83:4f:cb:6d: 14:79:e5:cd:ef:1c:6c:2c:6c:4e:fe:1d:2e:a7:ef: 3c:8d:35:23:38:0c:f3:88:b9:13:86:ae:7e:21:0e: bf:44:04:44:0f:b7:29:83:cf:cf:10:8f:e4:37:cc: 66:a3:4c:bc:cd:a8:25:b2:a2:bb:a1:ab:84:a5:28: 53:0a:f7:ad:aa:39:4c:0e:97:fb:f2:1f:0c:d3:90: d6:b4:73:fe:d3:24:4e:2a:5d:cc:7a:9f:fa:c2:44: 74:f4:88:10:ad:d7:93:6c:5f:13:4e:8e:74:c6:ec: 50:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:AA:C7:90:FF:B7:EB:E5:F2:DF:6C:79:9F:70:C9:26:3F:11:EE X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b3:d8:25:8e:00:61:b2:f2:cb:a7:61:73:e4:23:24:1a:50: 3a:c9:89:6d:8b:ba:bc:33:85:a2:73:42:7d:52:b8:a8:27:ff: 2e:90:17:c7:a9:fa:20:2d:b4:de:92:a8:dc:b3:f3:06:fc:aa: b7:5b:b4:62:77:01:57:24:05:ab:cf:26:50:aa:cf:27:e4:2a: 67:11:88:48:e3:30:01:67:ac:88:26:7c:a3:05:c1:26:c2:fd: 68:e9:cb:2c:11:ac:24:6e:2c:ce:f9:b5:2b:04:6f:17:a0:b6: 0c:c4:53:34:57:9e:02:f0:e3:7e:80:42:60:39:a4:0f:d2:b4: a8:ea:8a:a1:fc:71:a1:bd:1f:28:94:8e:18:3e:0c:e0:09:21: 2e:b3:75:b7:30:ee:3f:b0:69:bc:c7:94:af:af:ae:3b:49:2a: 0b:b3:08:d6:6f:42:c5:2f:5f:a8:5e:2e:ff:4a:9f:7f:5d:5f: 2e:1d:79:af:4a:ba:6d:89:ce:cc:d5:36:39:14:de:f2:33:43: d1:51:ae:9c:e8:aa:08:24:5a:b4:b2:c2:67:c3:7f:02:c8:d3: f4:90:ce:da:6a:0e:9a:ba:12:1b:60:2f:5f:47:95:7c:42:54: 2f:04:db:00:22:bf:fe:eb:e5:bc:5b:e8:e7:3d:e5:28:a1:84: 88:82:46:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjUwODIzMDYwMjMyWhcNMjUwODMwMDYwMjMyWjAYMRYwFAYD VQQDEw02OGE5NTk3OC1kZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsGbYAXehKAvbh+/OJxbOa0tE3Dc54ZTwN/C0mqQnr8rZ3O/qN9fjsck9FLb wS0IvWZj8mIr3OlGcWhuUW/3c/IP2vVudvi1fFCtWr08FFIVACK5nfiS56EgoJLE ErpuBrWd3y0gBFDBYQgoSjXrMKqSuvHfqnfBeYDLsXRYFHX4VkG2E+UcsJkiiD+c uhB3ZYNPy20UeeXN7xxsLGxO/h0up+88jTUjOAzziLkThq5+IQ6/RARED7cpg8/P EI/kN8xmo0y8zaglsqK7oauEpShTCvetqjlMDpf78h8M05DWtHP+0yROKl3Mep/6 wkR09IgQrdeTbF8TTo50xuxQjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmuqseQ /7fr5fLfbHmfcMkmPxHuMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/s9gljgBhsvLLp2Fz5CMkGlA6yYlti7q8M4Wic0J9UrioJ/8ukBfH qfogLbTekqjcs/MG/Kq3W7RidwFXJAWrzyZQqs8n5CpnEYhI4zABZ6yIJnyjBcEm wv1o6cssEawkbizO+bUrBG8XoLYMxFM0V54C8ON+gEJgOaQP0rSo6oqh/HGhvR8o lI4YPgzgCSEus3W3MO4/sGm8x5Svr647SSoLswjWb0LFL1+oXi7/Sp9/XV8uHXmv Srptic7M1TY5FN7yM0PRUa6c6KoIJFq0ssJnw38CyNP0kM7aag6auhIbYC9fR5V8 QlQvBNsAIr/+6+W8W+jnPeUooYSIgkYX -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:11 2025 by rpki-client