$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: aOuwzzOn1psIrSzeAx57bmW1vDBHS5vfi8+T1Yy9jfs= Subject key identifier: 39:3E:5F:D8:6A:1E:6A:58:D0:D8:89:65:18:9A:CE:5B:28:A2:97:FA Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0E65 Signing time: Fri 22 Aug 2025 18:11:59 +0000 Manifest this update: Fri 22 Aug 2025 18:11:58 +0000 Manifest next update: Fri 29 Aug 2025 18:11:58 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: HcpwBsPmZWGIGkeEEafJ883cZ4yfgrIE2nxQoW4y+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Aug 22 18:11:58 2025 GMT Not After : Aug 29 18:11:58 2025 GMT Subject: CN=68a8b2ef-d8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:fa:fc:4d:e8:98:37:a9:d3:62:25:66:79: 03:7f:14:9f:41:0e:a2:15:d9:62:ef:df:c7:70:91: 36:16:3b:72:8f:ee:bf:99:08:54:68:9a:17:ac:fb: 28:03:62:2d:4b:9c:13:86:49:d4:39:99:80:20:98: 2c:dd:77:20:3c:9d:39:83:1f:4d:22:ed:ce:34:46: 42:96:eb:89:3c:7f:1a:07:71:e3:6d:0a:96:8d:1f: 38:a7:b5:7e:04:92:68:b2:86:ed:3a:68:48:f6:79: 99:20:a9:2b:e5:83:53:d9:d5:6b:4e:f2:b4:17:1b: aa:70:14:b0:62:97:b7:94:e2:37:ce:0a:9b:a6:6c: e4:9c:e7:9b:98:30:8d:76:f6:07:15:24:cb:08:99: f8:59:71:a1:ab:3a:df:5d:f5:14:8b:61:ff:1d:89: ca:05:6d:fd:7f:f7:b6:ac:6c:3d:f0:eb:20:6d:52: 16:2d:d5:e3:1b:ef:91:12:86:55:a3:bd:2c:52:a2: 44:d8:bf:9e:08:48:89:d3:5d:79:02:1a:b1:26:24: 6c:9c:11:e5:ed:bf:57:bb:a3:d5:e7:e3:f0:a5:5a: 53:e9:b3:a8:75:5a:a9:77:9f:bb:c8:8b:82:5c:e4: 14:86:e0:7d:60:92:6b:7c:1b:dd:15:2d:2e:4b:8b: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3E:5F:D8:6A:1E:6A:58:D0:D8:89:65:18:9A:CE:5B:28:A2:97:FA X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ae:ea:2c:c6:7f:26:e8:ed:10:67:c4:a9:9d:ae:14:d5:33: 4c:d5:9a:3d:df:87:d9:4d:24:10:ae:dd:55:9a:d5:f7:4d:dd: 60:b9:32:21:c9:16:5f:1b:19:d2:b6:1b:9d:c5:b5:ff:bb:8e: bd:09:ea:b5:5d:15:9c:a0:60:9d:23:b4:e7:76:70:78:b8:9f: 51:51:35:a4:74:dc:23:40:fc:74:59:43:e0:6d:35:67:49:9c: c1:0d:61:7a:17:49:0b:cb:2a:3d:35:0c:9b:ec:3f:4d:fd:f0: b4:24:d2:aa:8b:40:b8:f5:d9:bf:80:81:a2:a5:06:46:3f:0e: fe:a9:2c:8b:f8:2f:c7:8f:99:45:80:62:c1:d4:fd:f6:a2:1e: af:78:c7:58:70:c9:e2:1f:0e:a9:80:69:ab:c2:81:e1:dc:1d: 14:78:26:f8:e6:17:8a:bb:3e:dd:36:8f:d2:0e:f6:94:d6:41: 3a:11:72:21:d6:c1:22:8c:57:8e:dd:6f:41:9b:90:fa:43:cf: 5e:e5:5b:96:e0:7e:36:1b:f0:5e:30:05:50:5a:53:65:53:17: 05:ca:73:bc:60:db:bc:b9:8a:12:de:3e:23:71:93:63:72:0a: 5d:47:2d:49:4e:b4:02:0e:5f:51:88:01:9a:6e:0e:6d:34:58: 20:32:70:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjUwODIyMTgxMTU4WhcNMjUwODI5MTgxMTU4WjAYMRYwFAYD VQQDEw02OGE4YjJlZi1kOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0r6/E3omDep02IlZnkDfxSfQQ6iFdli79/HcJE2Fjtyj+6/mQhUaJoXrPso A2ItS5wThknUOZmAIJgs3XcgPJ05gx9NIu3ONEZCluuJPH8aB3HjbQqWjR84p7V+ BJJosobtOmhI9nmZIKkr5YNT2dVrTvK0FxuqcBSwYpe3lOI3zgqbpmzknOebmDCN dvYHFSTLCJn4WXGhqzrfXfUUi2H/HYnKBW39f/e2rGw98OsgbVIWLdXjG++REoZV o70sUqJE2L+eCEiJ0115AhqxJiRsnBHl7b9Xu6PV5+PwpVpT6bOodVqpd5+7yIuC XOQUhuB9YJJrfBvdFS0uS4u8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDk+X9hq HmpY0NiJZRiazlsoopf6MB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuruosxn8m6O0QZ8Spna4U1TNM1Zo934fZTSQQrt1VmtX3Td1guTIh yRZfGxnSthudxbX/u469Ceq1XRWcoGCdI7TndnB4uJ9RUTWkdNwjQPx0WUPgbTVn SZzBDWF6F0kLyyo9NQyb7D9N/fC0JNKqi0C49dm/gIGipQZGPw7+qSyL+C/Hj5lF gGLB1P32oh6veMdYcMniHw6pgGmrwoHh3B0UeCb45heKuz7dNo/SDvaU1kE6EXIh 1sEijFeO3W9Bm5D6Q89e5VuW4H42G/BeMAVQWlNlUxcFynO8YNu8uYoS3j4jcZNj cgpdRy1JTrQCDl9RiAGabg5tNFggMnAx -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:09 2025 by rpki-client