$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: L6KhIagetdhswWVd7dLVnZwVJDHhsCc3qnS+BeiGgcw= Subject key identifier: FE:7A:C8:A3:6D:A7:E4:49:4C:7B:AC:CA:21:C9:4D:6F:9B:BA:FD:77 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 06:35:19 +0000 Manifest this update: Sat 23 Aug 2025 06:35:19 +0000 Manifest next update: Sat 30 Aug 2025 06:35:19 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: bBMSlvFnZ1iKug7ZtBvlw+Nzb99nBfDqteXam0yLoAg=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: YrfoAaRH0TwvCd3/fpeLdhWkCOhZ1iXJCt8nCYQZbVA=) 3: 85FA1A5E7DD311F0899BD374C4F9AE02.roa (hash: AA2xR6cGNVlGSnswJ6aC79DL3JyEzYjSOlj3OJaD+Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Aug 23 06:35:19 2025 GMT Not After : Aug 30 06:35:19 2025 GMT Subject: CN=68a96127-0e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:0a:01:77:18:58:3a:f5:cf:cc:15:1e:33: 63:70:69:c0:b2:96:b4:32:ca:ce:2a:80:2a:9b:b3: e8:9e:bb:f9:e3:c7:30:af:86:44:0e:54:53:37:80: 01:68:62:ad:de:b3:0b:e1:87:7f:7f:a0:8c:11:b7: 52:7d:37:b7:97:46:17:8d:52:71:d2:07:4a:03:83: 2e:50:f6:2f:89:1e:e3:8b:b1:88:08:35:5b:ab:72: 78:e7:bb:19:19:02:ba:be:f2:91:68:d6:fc:96:e8: bd:86:3f:d3:b2:2e:74:8a:7a:a3:43:d2:7d:54:53: 1f:33:6d:d1:69:3a:c6:d2:76:4d:4e:ce:82:6c:26: 5d:4e:a5:8e:28:e4:5b:cd:aa:a6:0b:33:bd:83:d1: c5:5b:d8:57:b5:09:99:75:10:0c:97:0d:da:01:15: f0:65:b9:bb:d2:e1:06:17:78:0b:ba:ff:d0:63:a8: ab:70:3a:6c:85:37:fd:4a:bb:0e:95:22:ac:3a:cc: bd:c9:32:c1:d3:59:e8:94:4d:3f:63:da:e2:fe:c2: 95:2c:1b:a5:25:5c:d9:a9:1b:88:33:ba:a5:20:39: f6:78:e1:3f:11:ac:17:7c:32:e6:02:b9:0a:e2:7d: 5a:ca:25:c9:a7:e6:e7:bb:d1:2b:5d:ed:09:41:ee: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:C8:A3:6D:A7:E4:49:4C:7B:AC:CA:21:C9:4D:6F:9B:BA:FD:77 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f1:48:dc:80:81:04:84:c6:70:96:3d:c3:80:f0:d4:ad:8d: c4:00:e5:60:b6:dd:98:fe:e1:9a:76:a5:8b:05:2a:70:9c:be: c5:6f:a8:7b:45:a5:ca:a3:ac:b9:78:82:e6:4e:6a:9f:50:d9: 2c:42:b3:82:73:1b:1c:21:23:22:d3:2d:98:9a:ff:8c:c4:d1: 9b:b1:82:d4:5c:12:69:4a:66:ba:f2:45:08:03:c2:5f:cc:89: 12:9f:0f:74:1f:e9:df:d3:91:4f:33:44:ef:05:5d:ce:2f:6d: ab:83:d3:b9:e4:f1:45:94:ec:cd:a0:98:90:25:2f:50:62:14: 1c:22:fe:17:51:71:ab:09:95:48:d3:fb:5c:d7:c8:b8:6e:61: 33:d0:23:b5:73:06:95:69:69:d4:58:64:48:39:8f:90:c1:f3: e0:08:7d:01:17:e2:02:db:b3:b5:e5:6c:81:9a:9d:c9:30:57: 72:44:bd:cb:04:77:49:d4:ab:b9:04:ca:e2:9a:c5:66:7a:e9: bf:10:91:0f:2b:b3:de:d0:1b:98:53:78:f6:00:11:07:20:d5: b8:42:2d:1c:19:de:49:a1:a5:bb:75:df:3a:84:73:a6:ee:54: 22:6d:07:b1:98:e6:4d:85:73:b0:51:f9:e7:c6:64:b4:09:c2: 06:a7:be:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUwODIzMDYzNTE5WhcNMjUwODMwMDYzNTE5WjAYMRYwFAYD VQQDEw02OGE5NjEyNy0wZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0AKAXcYWDr1z8wVHjNjcGnAspa0MsrOKoAqm7Ponrv548cwr4ZEDlRTN4AB aGKt3rML4Yd/f6CMEbdSfTe3l0YXjVJx0gdKA4MuUPYviR7ji7GICDVbq3J457sZ GQK6vvKRaNb8lui9hj/Tsi50inqjQ9J9VFMfM23RaTrG0nZNTs6CbCZdTqWOKORb zaqmCzO9g9HFW9hXtQmZdRAMlw3aARXwZbm70uEGF3gLuv/QY6ircDpshTf9SrsO lSKsOsy9yTLB01nolE0/Y9ri/sKVLBulJVzZqRuIM7qlIDn2eOE/EawXfDLmArkK 4n1ayiXJp+bnu9ErXe0JQe7UdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP56yKNt p+RJTHusyiHJTW+buv13MB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl8UjcgIEEhMZwlj3DgPDUrY3EAOVgtt2Y/uGadqWLBSpwnL7Fb6h7 RaXKo6y5eILmTmqfUNksQrOCcxscISMi0y2Ymv+MxNGbsYLUXBJpSma68kUIA8Jf zIkSnw90H+nf05FPM0TvBV3OL22rg9O55PFFlOzNoJiQJS9QYhQcIv4XUXGrCZVI 0/tc18i4bmEz0CO1cwaVaWnUWGRIOY+QwfPgCH0BF+IC27O15WyBmp3JMFdyRL3L BHdJ1Ku5BMrimsVmeum/EJEPK7Pe0BuYU3j2ABEHINW4Qi0cGd5JoaW7dd86hHOm 7lQibQexmOZNhXOwUfnnxmS0CcIGp77h -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:36 2025 by rpki-client