$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: 2dmI8HeHU8MMRBIoyChHD7/06jgUpx6ovdN7IFnozvY= Subject key identifier: EB:12:A9:13:0E:30:69:76:9B:C7:69:ED:13:CA:F0:28:A2:CB:E1:4D Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 1747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 173D Signing time: Fri 22 Aug 2025 16:43:30 +0000 Manifest this update: Fri 22 Aug 2025 16:43:30 +0000 Manifest next update: Fri 29 Aug 2025 16:43:30 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: S8YBS7Fqut43b4W4Vl6+tU2N6fXF5oe1qqkQIBRblqE=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5959 (0x1747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Aug 22 16:43:30 2025 GMT Not After : Aug 29 16:43:30 2025 GMT Subject: CN=68a89e32-dc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:d6:39:14:dc:e3:e8:aa:66:3c:2a:5b:0b: 7a:73:13:7e:5c:d7:40:26:81:8c:8c:4e:df:24:18: a0:3f:0e:f7:85:b2:84:fb:ea:ad:23:b0:2d:07:25: 96:ae:bb:d2:1b:ec:a5:5f:d0:f0:37:63:47:1b:09: 91:6b:e3:ae:e4:74:d3:ef:3e:ef:12:93:3d:b2:d0: 71:e9:99:f3:c8:2e:e2:99:d2:6c:ef:af:cd:31:fc: 3e:bb:86:c7:de:7a:c4:6d:d2:86:31:67:5f:9d:8e: ff:31:32:7c:76:7e:58:95:a4:5c:99:d8:fc:76:45: f8:57:b8:35:12:65:f5:89:db:3b:c1:f7:c3:f5:29: 47:9d:20:15:48:97:2b:17:6d:c7:81:e0:05:64:90: b2:12:4b:70:11:cd:36:dd:36:16:3c:9d:98:d2:c9: 10:00:16:78:4b:d8:78:9b:f5:f9:20:62:d1:cf:8c: 09:83:9a:6f:e2:d3:ce:69:6c:3f:34:3c:4a:b7:b8: 07:ca:c4:ca:f7:49:7d:dc:df:d2:55:be:c1:89:26: d1:5a:c9:b1:13:7c:fa:11:0f:81:ef:2e:40:a5:86: 6c:46:1c:5a:48:e9:dd:3d:2c:5e:ec:fe:4e:ea:db: d1:8c:8a:eb:42:31:91:93:33:bc:7f:c1:d9:be:b1: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:12:A9:13:0E:30:69:76:9B:C7:69:ED:13:CA:F0:28:A2:CB:E1:4D X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:12:87:11:c6:1f:87:aa:95:46:ac:28:08:1b:52:16:3e:58: bc:20:35:07:01:cf:4e:06:11:93:4c:b0:77:e1:27:bb:46:08: 48:2a:cc:8b:59:13:95:ec:09:8d:49:31:66:d4:4b:50:cf:29: cd:04:26:6c:a4:e6:76:7c:88:c2:78:dc:95:a9:b9:64:33:55: c3:b9:ea:b7:a4:b8:41:30:77:2f:11:0d:29:9a:d4:d9:5c:3c: 78:fe:bd:25:ef:91:f2:5d:ce:e8:1d:a0:82:2a:c5:35:4d:fa: 19:4e:b7:2d:02:5b:8c:15:03:67:45:00:66:0f:2d:06:d4:a8: e6:08:5d:6b:0a:1e:ca:70:93:e6:e1:62:6e:f8:3a:9e:96:cd: ad:49:f2:05:c2:c0:ab:02:71:c5:d4:94:e3:66:6b:5d:89:49: 75:92:8a:e7:aa:ca:5c:5f:4c:76:26:59:cf:bd:63:8b:4b:44: e4:3c:e5:15:1b:72:c4:56:80:2c:96:ea:a9:fe:23:86:67:8f: 82:50:f1:ed:f9:e0:76:91:f0:61:3c:ec:3e:cd:da:c0:c6:67: b0:54:a6:1c:92:57:63:d3:3d:00:82:ea:00:9d:cb:0a:e8:e7: 41:a6:a4:91:e6:f8:c4:fd:52:71:d2:62:0c:79:76:8a:bd:b3: e4:ca:41:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjUwODIyMTY0MzMwWhcNMjUwODI5MTY0MzMwWjAYMRYwFAYD VQQDEw02OGE4OWUzMi1kYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLTWORTc4+iqZjwqWwt6cxN+XNdAJoGMjE7fJBigPw73hbKE++qtI7AtByWW rrvSG+ylX9DwN2NHGwmRa+Ou5HTT7z7vEpM9stBx6ZnzyC7imdJs76/NMfw+u4bH 3nrEbdKGMWdfnY7/MTJ8dn5YlaRcmdj8dkX4V7g1EmX1ids7wffD9SlHnSAVSJcr F23HgeAFZJCyEktwEc023TYWPJ2Y0skQABZ4S9h4m/X5IGLRz4wJg5pv4tPOaWw/ NDxKt7gHysTK90l93N/SVb7BiSbRWsmxE3z6EQ+B7y5ApYZsRhxaSOndPSxe7P5O 6tvRjIrrQjGRkzO8f8HZvrGMJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsSqRMO MGl2m8dp7RPK8Ciiy+FNMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZEocRxh+HqpVGrCgIG1IWPli8IDUHAc9OBhGTTLB34Se7RghIKsyL WROV7AmNSTFm1EtQzynNBCZspOZ2fIjCeNyVqblkM1XDueq3pLhBMHcvEQ0pmtTZ XDx4/r0l75HyXc7oHaCCKsU1TfoZTrctAluMFQNnRQBmDy0G1KjmCF1rCh7KcJPm 4WJu+Dqels2tSfIFwsCrAnHF1JTjZmtdiUl1kornqspcX0x2JlnPvWOLS0TkPOUV G3LEVoAsluqp/iOGZ4+CUPHt+eB2kfBhPOw+zdrAxmewVKYckldj0z0AguoAncsK 6OdBpqSR5vjE/VJx0mIMeXaKvbPkykFS -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:33 2025 by rpki-client