$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: urdWn4n0GsgCOxG5YHW0q40IJ/pk0DMGECxdo4VjntA= Subject key identifier: A2:33:59:76:D5:94:D0:FA:38:2F:EC:52:A9:0D:11:36:A6:71:FA:5A Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0926 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 0917 Signing time: Fri 22 Aug 2025 20:26:53 +0000 Manifest this update: Fri 22 Aug 2025 20:26:53 +0000 Manifest next update: Fri 29 Aug 2025 20:26:53 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: IHbUtIBAh9ot2enP49zJdTWO2oLE0Yids1HHCAj4Mfc=) 2: 6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa (hash: u6H4P2TM61hqsziMp+QKQRj8V8OU+PakHeQt/LegiXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Aug 22 20:26:53 2025 GMT Not After : Aug 29 20:26:53 2025 GMT Subject: CN=68a8d28d-25d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:3e:83:a0:07:e5:52:40:8f:92:22:2e:09: 08:2e:33:1a:cf:20:33:bd:69:9d:68:70:5b:60:e8: 2f:00:0b:d2:7e:56:2c:2f:9b:92:bb:80:f0:34:3a: 4f:cd:99:f2:eb:96:81:a5:8a:05:df:3e:9a:a7:31: b9:91:f1:d2:35:ee:a9:bb:46:82:26:c5:59:2e:14: 61:4a:8e:36:5c:fc:0d:be:b9:6c:5f:84:21:ca:d0: b7:fc:a2:65:c6:60:25:25:70:d0:a1:81:46:04:17: 16:7f:88:d9:36:9e:b3:94:0d:2d:f1:1f:32:bf:97: 25:1e:78:e8:1b:6f:2e:b7:d6:d3:a9:61:c3:69:8d: 4b:43:75:a9:b5:ac:c2:9a:2c:d5:19:ce:5c:7c:f5: 03:ac:f8:3e:3b:11:9f:96:c5:0f:28:06:33:3c:21: 5b:7a:2c:b8:c8:85:70:69:4d:e5:93:3c:d5:d4:fd: a9:e5:dc:4c:1f:bb:30:e0:09:b6:f6:30:a0:49:53: af:ff:94:c9:56:1a:d5:0c:91:ea:f0:85:ed:bf:c1: c3:ef:bf:ec:24:f8:c2:1d:c1:d7:d7:4f:38:a5:f2: 91:a4:44:ef:65:0d:de:aa:22:05:85:33:77:40:c5: f9:0e:08:21:b8:c9:c2:85:16:64:52:89:cc:e0:c6: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:59:76:D5:94:D0:FA:38:2F:EC:52:A9:0D:11:36:A6:71:FA:5A X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:1b:fc:35:69:c9:c8:d6:16:b4:f2:87:53:22:27:00:41: 15:c5:7b:e5:7e:ac:0f:e3:29:d5:6c:3a:5e:ba:52:f0:cc:b9: fe:fc:9a:ea:04:f8:03:c4:18:9a:6a:6f:53:83:47:50:ee:ca: a1:37:29:06:96:06:ed:bc:0a:6a:1d:be:5a:62:58:50:bf:f1: ce:fb:09:30:ce:8d:b2:d2:29:74:9c:bd:fc:1e:3f:28:6f:12: 81:db:21:3d:29:7c:10:b3:23:c3:37:82:d8:27:2f:2a:33:21: 8e:94:92:df:da:be:da:77:fc:d1:c8:cf:f0:72:74:67:64:c6: fd:30:75:9c:1a:af:ad:1f:f1:2c:fc:92:20:d5:83:f2:ef:22: 17:31:81:06:0b:7a:2a:a7:21:9a:da:2c:8c:a1:43:2d:76:2f: 98:05:a1:bc:c4:a1:20:82:56:c5:82:5e:fb:7f:05:69:ef:0b: b9:ab:7a:5a:b4:44:7c:d8:89:3c:92:9f:5d:ff:e0:f4:f0:32: 2d:ac:28:21:20:fd:18:2c:fd:31:0c:33:7c:e4:f3:ea:3d:7d: d3:df:53:42:32:20:56:b4:a2:94:ac:32:7e:21:61:93:4c:7c: 36:90:ec:2c:29:5d:9d:73:cd:a0:f6:79:da:47:06:7e:86:32: 6f:74:c1:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUwODIyMjAyNjUzWhcNMjUwODI5MjAyNjUzWjAYMRYwFAYD VQQDEw02OGE4ZDI4ZC0yNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrI+g6AH5VJAj5IiLgkILjMazyAzvWmdaHBbYOgvAAvSflYsL5uSu4DwNDpP zZny65aBpYoF3z6apzG5kfHSNe6pu0aCJsVZLhRhSo42XPwNvrlsX4QhytC3/KJl xmAlJXDQoYFGBBcWf4jZNp6zlA0t8R8yv5clHnjoG28ut9bTqWHDaY1LQ3WptazC mizVGc5cfPUDrPg+OxGflsUPKAYzPCFbeiy4yIVwaU3lkzzV1P2p5dxMH7sw4Am2 9jCgSVOv/5TJVhrVDJHq8IXtv8HD77/sJPjCHcHX1084pfKRpETvZQ3eqiIFhTN3 QMX5DgghuMnChRZkUonM4MaeaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIzWXbV lND6OC/sUqkNETamcfpaMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/shv8NWnJyNYWtPKHUyInAEEVxXvlfqwP4ynVbDpeulLwzLn+/Jrq BPgDxBiaam9Tg0dQ7sqhNykGlgbtvApqHb5aYlhQv/HO+wkwzo2y0il0nL38Hj8o bxKB2yE9KXwQsyPDN4LYJy8qMyGOlJLf2r7ad/zRyM/wcnRnZMb9MHWcGq+tH/Es /JIg1YPy7yIXMYEGC3oqpyGa2iyMoUMtdi+YBaG8xKEgglbFgl77fwVp7wu5q3pa tER82Ik8kp9d/+D08DItrCghIP0YLP0xDDN85PPqPX3T31NCMiBWtKKUrDJ+IWGT THw2kOwsKV2dc82g9nnaRwZ+hjJvdMGL -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:35 2025 by rpki-client