$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: PYLSk32F1Ym4mDQEoMYlL4IFMErexLkLUjcM9upIBtA= Subject key identifier: 74:AC:25:CD:D3:57:6D:DB:EC:16:BD:8C:29:29:D6:F4:04:07:07:80 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:14:31 +0000 Manifest this update: Sat 23 Aug 2025 08:14:31 +0000 Manifest next update: Sat 30 Aug 2025 08:14:30 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: cvlfHQ6pfOP3zJtCeXw8deENUWYCDEmVLpszlAuQEmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Aug 23 08:14:31 2025 GMT Not After : Aug 30 08:14:30 2025 GMT Subject: CN=68a97867-a178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:17:58:d8:3c:14:f2:34:b8:4d:02:ac:69: 67:be:be:47:94:d2:66:c9:9b:e5:ab:c7:c0:de:1a: a6:89:4d:86:3f:aa:d5:df:58:21:ba:81:59:0c:5f: 7d:e2:23:58:31:1c:0a:98:9b:08:5b:80:b3:ff:6c: 9a:6d:c6:c1:e2:59:f7:ac:a3:57:d0:76:77:e2:3f: c4:90:22:0c:91:b5:ba:45:2c:b9:8e:62:15:29:6f: be:fd:9c:73:cc:72:8a:79:e5:5e:62:6c:79:89:4b: 67:ee:ec:a5:18:c9:9e:ae:f4:30:a6:c8:41:dd:78: 0c:e6:f7:03:49:36:7a:b6:9b:b8:fb:c4:e3:56:37: 0b:8e:56:b2:1d:4b:0a:68:dc:86:22:e6:35:25:ad: 0c:e4:9c:46:c5:32:d8:4d:d8:07:7f:f4:eb:98:24: e6:43:c2:c7:a7:2e:c7:eb:a1:a9:fe:ce:6f:4e:b0: 96:46:e9:f7:6c:02:37:ce:1f:ce:20:a6:f1:9e:de: 27:36:79:30:95:ed:69:e7:62:72:f9:05:d6:6c:01: 3b:5f:43:34:cf:2a:8b:a2:af:bf:d0:48:47:a2:36: 2a:62:8e:f5:82:0a:06:66:ca:c6:cf:08:be:2b:00: 0b:b9:6f:b6:05:04:b2:3e:60:5a:4d:c7:38:6d:c3: df:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:25:CD:D3:57:6D:DB:EC:16:BD:8C:29:29:D6:F4:04:07:07:80 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:81:f7:bd:7f:87:65:db:2a:40:fc:5a:58:3d:ef:2d:95: b1:06:02:cb:1e:52:f8:7a:2e:cc:ca:89:cd:79:a1:0e:37:63: f1:08:c1:ee:2c:d2:0d:55:d7:4b:a4:71:b8:5e:1e:81:6e:46: 8e:e3:99:1c:de:fe:c7:3b:da:69:57:b1:e3:72:a0:6e:62:71: 76:af:3f:53:93:17:89:55:48:52:b3:43:ff:9f:74:7f:b3:3c: 14:f3:5c:99:c7:43:0e:7b:e8:62:3d:74:1d:d9:bc:2a:ac:12: 0d:f4:42:65:87:cf:bd:6d:2f:a0:33:9c:77:6a:7b:a3:08:4c: 34:31:1d:97:53:31:23:84:d5:bf:56:72:01:2f:e3:d0:e1:bc: 03:78:1b:2f:43:d1:51:88:30:b9:e4:67:ad:55:a4:17:95:d7: 41:30:29:58:18:b5:a7:46:34:b6:62:84:1d:8a:ef:79:a6:37: 40:b7:85:ef:2e:e0:9b:09:66:dc:64:e3:fe:c1:2d:d1:57:a7: 82:86:50:1a:e9:6d:d5:5c:d6:6e:56:75:1b:87:b8:8e:c4:ce: 01:6a:7d:d0:dc:92:13:09:1a:e5:1f:57:e6:be:47:3b:a8:b4: d8:b5:97:1d:c5:34:57:05:2f:42:34:11:1c:6e:bb:1d:fc:c5: b6:74:94:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTA4MjMwODE0MzFaFw0yNTA4MzAwODE0MzBaMBgxFjAUBgNV BAMTDTY4YTk3ODY3LWExNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKhhdY2DwU8jS4TQKsaWe+vkeU0mbJm+Wrx8DeGqaJTYY/qtXfWCG6gVkMX33i I1gxHAqYmwhbgLP/bJptxsHiWfeso1fQdnfiP8SQIgyRtbpFLLmOYhUpb779nHPM cop55V5ibHmJS2fu7KUYyZ6u9DCmyEHdeAzm9wNJNnq2m7j7xONWNwuOVrIdSwpo 3IYi5jUlrQzknEbFMthN2Ad/9OuYJOZDwsenLsfroan+zm9OsJZG6fdsAjfOH84g pvGe3ic2eTCV7WnnYnL5BdZsATtfQzTPKouir7/QSEeiNipijvWCCgZmysbPCL4r AAu5b7YFBLI+YFpNxzhtw9/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdKwlzdNX bdvsFr2MKSnW9AQHB4AwHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTWgfe9f4dl2ypA/FpYPe8tlbEGAsseUvh6LszKic15oQ43Y/EIwe4s 0g1V10ukcbheHoFuRo7jmRze/sc72mlXseNyoG5icXavP1OTF4lVSFKzQ/+fdH+z PBTzXJnHQw576GI9dB3ZvCqsEg30QmWHz71tL6AznHdqe6MITDQxHZdTMSOE1b9W cgEv49DhvAN4Gy9D0VGIMLnkZ61VpBeV10EwKVgYtadGNLZihB2K73mmN0C3he8u 4JsJZtxk4/7BLdFXp4KGUBrpbdVc1m5WdRuHuI7EzgFqfdDckhMJGuUfV+a+Rzuo tNi1lx3FNFcFL0I0ERxuux38xbZ0lOs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:58 2025 by rpki-client