$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: fpC2kSkxuM6TTpF0aJWYF7XUQzeGUUp5uVE8G3mo0dM= Subject key identifier: DF:01:6C:B3:21:03:FE:E8:F6:82:4B:CB:63:87:0E:3E:A0:D8:05:5F Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 86 Signing time: Sat 23 Aug 2025 06:51:20 +0000 Manifest this update: Sat 23 Aug 2025 06:51:19 +0000 Manifest next update: Sat 30 Aug 2025 06:51:19 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: wXIGrtYIN4h4CbG/aTZU6r1sTJVdkXSaWfFERW0l4nU=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Aug 23 06:51:19 2025 GMT Not After : Aug 30 06:51:19 2025 GMT Subject: CN=68a964e7-f0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:88:c7:1a:d1:48:09:21:e9:0d:6d:05:43: 1f:cc:65:6a:ec:5c:8f:42:ec:44:65:ad:de:19:38: 68:d5:47:62:7c:84:cf:5d:c4:62:4e:21:17:98:2c: 3e:fc:6c:ad:27:11:8a:ac:14:d1:34:44:7c:68:72: bb:f2:9e:3d:fe:7c:69:9f:55:8f:46:0c:08:e0:03: 6a:a2:3b:6a:85:eb:92:13:0f:c3:d4:df:b7:be:d1: d9:c4:d5:0e:6a:b6:fe:a3:a2:ae:5c:d5:5c:1c:96: 39:16:df:2d:33:a0:c8:0f:f5:31:ee:1d:59:6d:83: e5:88:7e:fe:c3:03:58:6c:cc:63:ff:82:76:d4:d6: 6e:43:0b:93:21:20:0e:cf:2a:d5:d5:95:40:98:66: ed:ac:7e:34:58:f1:e7:50:d7:39:a0:59:18:36:33: 0d:d3:3a:12:09:5b:f4:67:c5:7c:40:e3:80:a1:b9: ca:55:fd:bf:95:91:09:5e:d0:75:b4:33:5b:8b:6a: a9:d9:b5:1c:30:d6:4e:32:ee:ed:64:c2:0c:4d:eb: 1a:c4:09:b6:30:ad:be:c7:db:3c:bb:f6:d0:b3:16: ba:0b:e3:02:85:f6:73:bf:1e:f5:36:64:76:49:25: 55:ac:40:c1:01:e5:42:7e:71:e9:ed:3c:41:80:4a: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:01:6C:B3:21:03:FE:E8:F6:82:4B:CB:63:87:0E:3E:A0:D8:05:5F X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8d:21:77:a6:e3:21:c7:94:7c:c9:10:1e:05:14:6f:20:81: ab:3a:69:75:50:13:31:93:71:08:64:d9:18:b4:37:2b:c5:a3: a6:37:b8:14:e2:68:0f:7a:d0:7b:5b:b0:46:13:a7:49:e9:5a: 1c:7c:69:e3:1c:b3:e7:7c:74:df:95:e9:10:e7:da:66:f8:81: aa:e8:80:ac:9a:6b:a8:3f:36:ee:0a:db:3f:18:a9:49:d9:42: 48:f8:7b:1c:4c:43:2d:b9:23:82:c1:9b:7a:2a:e2:7d:60:42: 9e:98:b9:af:32:c4:2b:bc:f0:20:43:e9:0d:f3:e9:e3:a3:da: 21:dc:cc:c2:d2:16:ff:26:10:1a:aa:71:0e:9c:5f:5e:37:27: ae:a7:a0:c7:06:b4:32:dc:07:01:bc:3c:c3:a3:18:09:80:a0: 57:b3:91:57:62:f2:33:53:41:b4:8a:5f:c4:e8:ab:b0:83:75: a5:53:f8:43:76:60:70:d0:6a:1f:2b:3c:62:b2:f7:dd:c8:1e: 59:26:7c:35:57:07:b4:b1:a0:e1:ee:e6:c2:6c:fa:b6:ff:8b: fa:90:1c:58:74:05:3b:64:b0:65:c0:ee:bd:e3:ad:5d:90:7b: 52:6a:46:62:6d:c5:4d:92:3c:6a:e4:ae:0c:4b:5e:e7:65:2c: b2:2e:fc:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx N0QwMjExQjUwHhcNMjUwODIzMDY1MTE5WhcNMjUwODMwMDY1MTE5WjAYMRYwFAYD VQQDEw02OGE5NjRlNy1mMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN+IxxrRSAkh6Q1tBUMfzGVq7FyPQuxEZa3eGTho1UdifITPXcRiTiEXmCw+ /GytJxGKrBTRNER8aHK78p49/nxpn1WPRgwI4ANqojtqheuSEw/D1N+3vtHZxNUO arb+o6KuXNVcHJY5Ft8tM6DID/Ux7h1ZbYPliH7+wwNYbMxj/4J21NZuQwuTISAO zyrV1ZVAmGbtrH40WPHnUNc5oFkYNjMN0zoSCVv0Z8V8QOOAobnKVf2/lZEJXtB1 tDNbi2qp2bUcMNZOMu7tZMIMTesaxAm2MK2+x9s8u/bQsxa6C+MChfZzvx71NmR2 SSVVrEDBAeVCfnHp7TxBgEoDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8BbLMh A/7o9oJLy2OHDj6g2AVfMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq ZFFockxQams0R2tYMENFYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNjSF3puMhx5R8yRAeBRRvIIGrOml1UBMxk3EIZNkYtDcrxaOmN7gU 4mgPetB7W7BGE6dJ6VocfGnjHLPnfHTflekQ59pm+IGq6ICsmmuoPzbuCts/GKlJ 2UJI+HscTEMtuSOCwZt6KuJ9YEKemLmvMsQrvPAgQ+kN8+njo9oh3MzC0hb/JhAa qnEOnF9eNyeup6DHBrQy3AcBvDzDoxgJgKBXs5FXYvIzU0G0il/E6Kuwg3WlU/hD dmBw0GofKzxisvfdyB5ZJnw1Vwe0saDh7ubCbPq2/4v6kBxYdAU7ZLBlwO69461d kHtSakZibcVNkjxq5K4MS17nZSyyLvwo -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:21 2025 by rpki-client