$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: 1kOGovO1dxU+SxOH5UJIJ1W7tlih2FVWViYSsP9fA6A= Subject key identifier: 84:61:B9:B7:9D:D7:18:B8:4E:0F:9A:C3:B5:9E:66:00:2B:19:14:9F Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11A8 Signing time: Fri 22 Aug 2025 17:20:17 +0000 Manifest this update: Fri 22 Aug 2025 17:20:17 +0000 Manifest next update: Fri 29 Aug 2025 17:20:17 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: zAM8JTynu4ZzuVMITwCDcYUWzSvHVI01zXKTPYQygGU=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4529 (0x11b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Aug 22 17:20:17 2025 GMT Not After : Aug 29 17:20:17 2025 GMT Subject: CN=68a8a6d1-51a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:92:be:71:8f:96:d4:5d:d8:5e:c5:d8:7b: 48:c2:89:27:ca:66:6d:69:21:ba:bb:47:fe:7e:db: f3:0d:33:ba:86:1c:22:59:5d:36:a3:64:a7:22:f3: 0c:cc:51:05:0e:c3:7e:64:fc:ce:23:1e:3b:41:33: 1c:00:cf:b7:7d:7f:2d:d2:4f:23:28:41:4f:db:0a: fb:76:15:94:2e:36:62:06:ba:c5:4e:b0:ff:62:72: 4d:f4:31:84:aa:1a:44:6c:32:d2:cd:81:a0:73:7f: e3:7f:73:82:dd:51:11:3d:89:55:98:5d:82:55:78: 09:ac:7e:1e:8e:d5:3d:f7:06:2c:0c:38:81:72:c2: 5e:49:0f:7d:22:4f:02:22:41:5b:38:4e:51:28:78: 0e:2e:0a:fe:d6:36:05:82:37:09:db:9f:3a:32:ad: 59:1b:d3:cb:12:73:41:ba:3b:52:c7:68:32:03:7c: de:60:8c:a4:2d:97:33:7c:a2:1f:76:6b:bf:6b:5c: 20:3e:ca:fa:be:5c:eb:a7:99:6d:ad:c4:c4:07:b5: c6:12:27:82:3d:fe:87:ba:7f:44:a6:86:7a:93:e0: 36:4b:fa:ac:99:a7:94:95:89:d8:4e:b7:e0:50:c1: 40:8d:53:a6:d8:4d:ee:06:75:bc:73:9b:8c:9c:4d: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:B9:B7:9D:D7:18:B8:4E:0F:9A:C3:B5:9E:66:00:2B:19:14:9F X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bf:18:75:0d:4a:90:5a:8a:a7:3e:bf:93:84:d5:28:98:9b: 0b:b2:3c:48:1e:6b:62:ed:b8:c0:8e:71:1a:01:45:1d:49:dd: 0f:7e:f9:13:ff:6c:47:29:c1:57:19:68:1a:73:c2:83:a4:15: 88:c9:9b:18:c6:2a:f0:38:fe:39:cc:00:9c:c4:40:06:ae:a6: e8:91:7a:e5:d0:b5:ce:df:98:37:8e:fe:1d:c2:2c:b5:50:7e: e1:4d:ab:fb:af:52:4f:10:5b:ee:e7:5d:4b:ef:d2:59:57:99: 4d:d7:37:46:a0:a8:71:38:b8:b2:ac:61:14:29:59:ef:58:84: b0:16:60:20:0e:ec:b8:83:2c:80:cf:72:16:4b:9f:f4:f4:09: 9f:f7:69:c6:4a:aa:99:f3:07:d4:16:83:2c:40:8f:0c:0b:16: 9f:89:97:a3:26:4a:c2:a5:a9:70:64:ac:28:15:59:02:d1:9b: 77:6f:8a:5b:21:ce:f1:a1:2a:c4:bd:c6:16:b1:29:46:0d:6a: 05:ab:be:b5:67:34:53:f8:de:40:8e:25:f3:df:54:7c:52:34: 4e:3f:07:ec:6a:ad:64:a2:ad:a6:06:8c:a1:64:f9:9d:e2:6b: 4a:46:28:45:e8:0d:a6:cc:d0:67:1c:eb:22:5d:b8:8b:56:f5: b5:4e:00:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUwODIyMTcyMDE3WhcNMjUwODI5MTcyMDE3WjAYMRYwFAYD VQQDEw02OGE4YTZkMS01MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr2SvnGPltRd2F7F2HtIwoknymZtaSG6u0f+ftvzDTO6hhwiWV02o2SnIvMM zFEFDsN+ZPzOIx47QTMcAM+3fX8t0k8jKEFP2wr7dhWULjZiBrrFTrD/YnJN9DGE qhpEbDLSzYGgc3/jf3OC3VERPYlVmF2CVXgJrH4ejtU99wYsDDiBcsJeSQ99Ik8C IkFbOE5RKHgOLgr+1jYFgjcJ2586Mq1ZG9PLEnNBujtSx2gyA3zeYIykLZczfKIf dmu/a1wgPsr6vlzrp5ltrcTEB7XGEieCPf6Hun9EpoZ6k+A2S/qsmaeUlYnYTrfg UMFAjVOm2E3uBnW8c5uMnE1/dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRhubed 1xi4Tg+aw7WeZgArGRSfMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGvxh1DUqQWoqnPr+ThNUomJsLsjxIHmti7bjAjnEaAUUdSd0PfvkT /2xHKcFXGWgac8KDpBWIyZsYxirwOP45zACcxEAGrqbokXrl0LXO35g3jv4dwiy1 UH7hTav7r1JPEFvu511L79JZV5lN1zdGoKhxOLiyrGEUKVnvWISwFmAgDuy4gyyA z3IWS5/09Amf92nGSqqZ8wfUFoMsQI8MCxafiZejJkrCpalwZKwoFVkC0Zt3b4pb Ic7xoSrEvcYWsSlGDWoFq761ZzRT+N5AjiXz31R8UjROPwfsaq1koq2mBoyhZPmd 4mtKRihF6A2mzNBnHOsiXbiLVvW1TgDe -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:22 2025 by rpki-client