$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: WDHIuW78318QsetbT8q5wwptnJr5E+SbYDJ2TUTtjOE= Subject key identifier: 0E:CC:0A:C1:53:2D:65:0C:B8:16:B5:AB:0A:A9:BA:95:57:83:1A:BA Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 13 Signing time: Sat 23 Aug 2025 08:17:13 +0000 Manifest this update: Sat 23 Aug 2025 08:17:13 +0000 Manifest next update: Sat 30 Aug 2025 08:17:13 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: F3/teD2nrDMe3awiPozIRhvpQZcq1vTmadwoLWG4oaY=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: 2Z7ZXOjsrVXv6QpvLW3sNTYWE2LGQXJRgdUTVxtlGsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Aug 23 08:17:13 2025 GMT Not After : Aug 30 08:17:13 2025 GMT Subject: CN=68a97909-4efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:c1:1b:6a:13:60:4b:47:7b:93:b9:dd:07: e5:20:e0:78:ef:32:8b:b8:18:4c:05:f0:51:c5:a9: 28:b9:74:40:88:df:58:c7:30:52:2c:ec:89:9e:b5: 9b:ba:35:f4:af:a8:51:84:12:a4:d0:f2:e4:b4:52: 48:76:11:8c:5e:22:52:28:0c:02:aa:c7:b5:61:78: 4c:9d:36:6c:ba:c4:c7:77:9a:ec:b0:ed:bc:c1:6f: a7:5b:ce:84:be:90:4a:61:43:d9:31:28:bd:19:91: 74:60:e3:59:42:89:d2:82:3f:1d:14:ac:e7:b5:49: 9e:1e:25:ad:38:34:55:41:44:b4:47:b9:6a:eb:0e: 75:fb:d9:2a:93:17:a8:fd:a1:18:4f:6d:ad:25:34: b9:ab:d9:49:f3:34:95:c7:e7:59:c9:f5:b8:37:3b: 16:9e:22:2d:7e:e0:af:0b:d3:5b:63:2a:d2:f1:c8: 1a:91:6e:c3:bc:3f:8a:39:9a:1c:33:73:58:9d:f3: 5d:5c:18:86:88:05:3a:b3:a0:64:cb:9e:3f:63:67: 7c:01:c9:44:7f:a4:89:bd:36:f9:1d:6a:ff:6b:b9: 1a:8e:9e:9f:99:2a:c2:e8:ac:58:27:07:b1:82:d8: 1c:a7:fb:d7:3e:dc:70:98:fa:3f:30:3f:a2:91:28: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:0A:C1:53:2D:65:0C:B8:16:B5:AB:0A:A9:BA:95:57:83:1A:BA X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:2c:b4:7b:46:87:57:33:c2:df:06:2e:c2:cd:94:79:a5:1c: d6:64:b3:1a:e1:5c:3b:81:0f:0a:6c:cc:23:ba:9d:8e:fb:04: c8:53:a3:97:9a:6e:f5:a2:fb:40:77:4c:ef:22:90:48:c4:15: 08:7a:16:26:6c:d4:50:dc:c9:99:8a:1d:29:80:04:07:f5:3a: c8:c6:ed:88:0e:f2:0b:c3:ba:e2:f3:36:3b:fe:ba:bf:fd:5e: f3:b1:0f:ed:1a:2e:82:17:28:ea:fb:59:10:1e:4e:ac:a6:11: fe:c0:dc:27:15:c0:35:f4:3a:b2:a9:8f:6c:f9:a5:46:a7:03: 68:45:ee:45:4e:d1:b9:ef:9a:f8:88:a4:7a:50:14:ab:5c:81: 3d:44:c7:b7:85:6b:f1:60:f3:85:a2:3b:13:e7:bc:32:ae:ea: 38:59:fb:d8:a0:cc:9a:28:b7:45:00:4a:1c:1b:7f:9c:c6:1c: 95:62:13:a1:d1:2a:67:13:59:27:78:a0:f2:40:54:a0:60:c3: 6f:94:ce:be:40:69:55:44:24:d9:0b:be:02:2a:24:76:43:9c: 83:b7:d0:51:5f:34:50:ed:3b:5a:8a:04:e1:a3:58:dc:20:7f: aa:55:cc:d5:d5:1e:ce:a5:9b:ac:14:71:e0:b9:86:f5:94:5d: 51:ef:0c:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUVENTExMC8GA1UEBRMoNjY3ODE3OUE1REE4RTVFOTFFN0Q5RERGQzlGRjVCMzU0 M0VENEQ3NDAeFw0yNTA4MjMwODE3MTNaFw0yNTA4MzAwODE3MTNaMBgxFjAUBgNV BAMTDTY4YTk3OTA5LTRlZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLQ8EbahNgS0d7k7ndB+Ug4HjvMou4GEwF8FHFqSi5dECI31jHMFIs7ImetZu6 NfSvqFGEEqTQ8uS0Ukh2EYxeIlIoDAKqx7VheEydNmy6xMd3muyw7bzBb6dbzoS+ kEphQ9kxKL0ZkXRg41lCidKCPx0UrOe1SZ4eJa04NFVBRLRHuWrrDnX72SqTF6j9 oRhPba0lNLmr2UnzNJXH51nJ9bg3OxaeIi1+4K8L01tjKtLxyBqRbsO8P4o5mhwz c1id811cGIaIBTqzoGTLnj9jZ3wByUR/pIm9Nvkdav9ruRqOnp+ZKsLorFgnB7GC 2Byn+9c+3HCY+j8wP6KRKA/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDswKwVMt ZQy4FrWrCqm6lVeDGrowHwYDVR0jBBgwFoAUZngXml2o5ekefZ3fyf9bNUPtTXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRUQ1L0FGQTQ2NDY0Njcy RjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5nWG1sMm81ZWtlZlozZnlmOWJOVVB0VFhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RUQ1L0FGQTQ2NDY0NjcyRjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVr ZWZaM2Z5ZjliTlVQdFRYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMcstHtGh1czwt8GLsLNlHmlHNZksxrhXDuBDwpszCO6nY77BMhTo5ea bvWi+0B3TO8ikEjEFQh6FiZs1FDcyZmKHSmABAf1OsjG7YgO8gvDuuLzNjv+ur/9 XvOxD+0aLoIXKOr7WRAeTqymEf7A3CcVwDX0OrKpj2z5pUanA2hF7kVO0bnvmviI pHpQFKtcgT1Ex7eFa/Fg84WiOxPnvDKu6jhZ+9igzJoot0UAShwbf5zGHJViE6HR KmcTWSd4oPJAVKBgw2+Uzr5AaVVEJNkLvgIqJHZDnIO30FFfNFDtO1qKBOGjWNwg f6pVzNXVHs6lm6wUceC5hvWUXVHvDEU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:23 2025 by rpki-client