$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: x6gC5ZMTi2v28/KN+9sp+8k/17MZnDbohS2p1uUc2Dw= Subject key identifier: 47:C3:3E:4F:E6:9F:05:28:0A:D4:82:31:A5:F9:86:3B:0E:6F:98:AA Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1174 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1155 Signing time: Fri 22 Aug 2025 17:22:12 +0000 Manifest this update: Fri 22 Aug 2025 17:22:12 +0000 Manifest next update: Fri 29 Aug 2025 17:22:12 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: OjFHkh40rnIKAnTyWAofsZwYxIgTYzQqtRCH7VOxAHs=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: LI5814/1mo8RhGHDIyDmTnyAaT8jPK8eiZW8nnVoECM=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: KE984DbFRTO0XDJnJvkUh9nTQI9OdADddfHh/b8sXns=) 4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: tG0xAoHX5Jrg4VXIV0PMgN27hGtGNiwPzNpPEMcc5ZU=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4468 (0x1174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Aug 22 17:22:12 2025 GMT Not After : Aug 29 17:22:12 2025 GMT Subject: CN=68a8a744-76da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:9f:3f:4a:c8:c6:68:c3:75:77:1a:f7:94: 2f:7c:0f:dd:99:95:cb:4c:d7:07:b4:1c:c6:1d:f0: ca:5a:ef:cd:a4:a8:ec:51:90:d5:bb:71:2f:a6:0c: 11:5a:73:d1:0c:cb:2a:86:fe:2c:65:39:38:bf:43: d8:76:4a:ee:86:ce:99:58:93:8d:5b:32:7a:c2:15: 89:5d:36:6f:16:dc:40:aa:4b:a3:1b:90:d0:14:e0: c6:1d:51:11:83:39:33:c0:5a:f3:80:34:68:a5:4d: 00:28:db:3a:ca:10:4a:6f:ed:1e:78:b2:c5:10:1e: a3:21:90:35:69:fd:c7:54:7f:cc:93:a9:cb:03:6a: 2f:73:18:4b:1c:e1:61:f6:ca:24:ab:9f:21:f0:3b: 58:e0:12:54:e4:dc:3c:e9:2b:b1:40:2e:fc:4b:37: c2:c7:25:31:ca:5d:b7:5a:5a:62:fa:9c:12:cc:af: c9:3b:f9:4b:fd:25:9d:f1:f0:a1:12:52:59:2b:63: 2b:f3:63:21:a2:62:bf:8f:58:e1:20:bc:cb:89:77: 30:c6:0f:40:62:5a:b6:e8:16:d3:a1:4e:a6:e9:e1: 62:8f:6a:d6:53:10:7f:3b:15:ca:86:65:cf:75:dd: d8:ee:82:a6:9a:ac:44:3a:2c:e9:df:d7:cd:c0:22: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C3:3E:4F:E6:9F:05:28:0A:D4:82:31:A5:F9:86:3B:0E:6F:98:AA X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:09:2c:47:93:f0:b0:12:62:95:af:af:ca:b2:19:9f:ca:5a: 6d:6b:5a:be:4f:37:e7:82:62:a3:97:8d:38:b8:eb:3e:97:47: de:40:d3:a8:8f:fc:df:bc:d8:54:19:4c:2f:56:c5:dd:59:ff: 47:cf:56:49:e7:cb:a5:71:58:31:9d:a5:5e:c8:64:9e:a7:43: 25:f8:94:49:4c:92:c2:f9:44:2c:b8:51:35:6a:d7:8f:f9:bc: 26:c7:f5:0a:7a:7e:f2:aa:0d:ed:16:3b:86:f2:8e:e0:2f:ce: 17:fe:6a:99:dd:c4:8a:c0:d7:61:35:81:ff:d5:ac:c1:1e:ca: 0a:6c:6b:43:90:6a:a2:78:2a:fd:94:58:fd:ba:d9:ab:35:a2: 22:28:07:9d:63:69:1d:68:8d:68:2a:f7:08:25:cd:2d:72:7b: a9:fe:dd:58:cf:c5:f3:f4:ac:c4:a2:1d:12:70:e9:2b:4d:50: e9:2b:50:04:cc:72:df:cc:61:cb:12:ec:0f:ec:b7:81:2e:2e: 86:ea:7b:4b:81:12:36:7c:b9:bf:1b:9b:29:02:5f:32:51:39: cc:d8:52:1b:1e:6b:8f:b0:af:51:94:0b:68:2d:50:cd:ab:13: 27:1c:21:8d:88:23:a7:4a:ef:d3:cb:9d:37:de:62:4f:83:f7: e9:7b:1f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUwODIyMTcyMjEyWhcNMjUwODI5MTcyMjEyWjAYMRYwFAYD VQQDEw02OGE4YTc0NC03NmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC2fP0rIxmjDdXca95QvfA/dmZXLTNcHtBzGHfDKWu/NpKjsUZDVu3EvpgwR WnPRDMsqhv4sZTk4v0PYdkruhs6ZWJONWzJ6whWJXTZvFtxAqkujG5DQFODGHVER gzkzwFrzgDRopU0AKNs6yhBKb+0eeLLFEB6jIZA1af3HVH/Mk6nLA2ovcxhLHOFh 9sokq58h8DtY4BJU5Nw86SuxQC78SzfCxyUxyl23Wlpi+pwSzK/JO/lL/SWd8fCh ElJZK2Mr82MhomK/j1jhILzLiXcwxg9AYlq26BbToU6m6eFij2rWUxB/OxXKhmXP dd3Y7oKmmqxEOizp39fNwCK3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfDPk/m nwUoCtSCMaX5hjsOb5iqMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBCSxHk/CwEmKVr6/Kshmfylpta1q+TzfngmKjl404uOs+l0feQNOo j/zfvNhUGUwvVsXdWf9Hz1ZJ58ulcVgxnaVeyGSep0Ml+JRJTJLC+UQsuFE1ateP +bwmx/UKen7yqg3tFjuG8o7gL84X/mqZ3cSKwNdhNYH/1azBHsoKbGtDkGqieCr9 lFj9utmrNaIiKAedY2kdaI1oKvcIJc0tcnup/t1Yz8Xz9KzEoh0ScOkrTVDpK1AE zHLfzGHLEuwP7LeBLi6G6ntLgRI2fLm/G5spAl8yUTnM2FIbHmuPsK9RlAtoLVDN qxMnHCGNiCOnSu/Ty5033mJPg/fpex9p -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:11 2025 by rpki-client