$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: CatgkEtg2Q1IqgV9H7ARFYbp+cjA6U8r/Hdtp/bnyK8= Subject key identifier: AF:36:A1:65:91:64:63:1D:40:AC:06:55:3C:44:58:FA:08:28:C3:FD Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 0725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 071E Signing time: Fri 22 Aug 2025 21:59:06 +0000 Manifest this update: Fri 22 Aug 2025 21:59:06 +0000 Manifest next update: Fri 29 Aug 2025 21:59:06 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: 87pfVDjYkIiTLFOtZ3GLCQc4XaxsGP+wOyDaanfFAk0=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Aug 22 21:59:06 2025 GMT Not After : Aug 29 21:59:06 2025 GMT Subject: CN=68a8e82a-41b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:85:d1:b6:71:e0:ab:d0:d1:14:1b:97:cc:0d: 82:3e:87:15:e3:6a:0a:11:00:41:eb:bc:66:7c:21: b8:51:8a:53:cd:ef:41:7d:7c:9f:f1:21:f3:a7:ee: 6b:c5:3c:62:d2:aa:7d:7f:7f:e8:cf:88:67:4a:ed: 83:f7:2b:fa:90:20:11:63:f2:e2:16:8a:a7:0f:20: a6:6d:8b:52:8f:62:0a:45:4b:db:a3:5c:54:bb:fc: 1f:83:81:1e:10:cc:66:cc:70:6e:f2:a1:82:7e:a9: ba:d4:6b:39:9d:0b:eb:e1:0c:cd:68:1b:29:31:42: f4:9e:1f:9d:5d:51:9e:62:2f:4a:3d:6d:6c:a2:f4: 71:bb:ee:76:22:d0:c5:f5:10:50:52:b0:1e:d5:4d: b5:15:89:f6:fb:9c:8d:7d:21:7e:5c:9d:b6:83:a8: a3:d0:c6:03:fe:f4:66:e1:72:14:7f:66:34:1e:8d: 6e:d8:f0:02:8a:be:c2:41:09:c5:dc:6b:5d:28:d3: bc:92:ea:e5:58:06:ae:91:03:88:5c:94:85:6e:78: 2e:07:29:21:1a:fd:ed:43:4b:50:eb:a1:db:1d:05: 94:12:18:89:a4:0b:7c:d1:7a:4a:38:8f:04:ea:87: e2:fe:39:95:41:66:b0:8b:e7:8e:bc:55:a4:c0:65: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:36:A1:65:91:64:63:1D:40:AC:06:55:3C:44:58:FA:08:28:C3:FD X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:75:75:ca:a6:99:93:7f:48:00:ba:c4:57:38:3d:de:e9:cd: 6d:cb:e9:41:06:4f:00:0a:f4:48:a6:43:00:68:d5:ca:ac:96: 9d:57:1f:8d:eb:74:b2:7c:7c:cc:5a:88:69:66:ad:c1:c1:2f: 37:d7:62:09:f4:1f:a9:ea:53:46:92:36:6f:bd:c0:78:92:15: b4:79:b7:86:85:7f:92:a4:7a:85:cc:72:d6:df:fe:c2:7f:cf: 5c:b0:ff:3f:eb:b5:31:3c:00:9a:1c:0e:c1:25:6b:1f:6d:b6: 06:21:cd:4a:bf:b2:09:9d:5f:89:2a:e8:ef:99:ff:0b:a9:dc: 7b:63:c4:d8:c8:f6:de:ef:61:be:8a:16:c4:2a:e7:5a:d4:53: 30:cc:14:76:18:36:3d:2d:d4:aa:f7:9d:a6:6d:8b:de:9e:30: 01:f9:6a:4b:92:46:7f:20:bf:6d:d4:95:aa:b5:e5:82:cd:60: 69:4c:b3:28:36:30:4d:c1:db:73:ca:77:8e:98:7f:ac:3f:56: 38:14:1e:3f:bf:13:e8:01:de:a6:dc:35:eb:f0:a0:a6:1e:3e: 6e:89:0a:ab:67:6d:d1:34:6e:8f:4e:20:5d:e2:ba:aa:96:2a: ff:3c:5d:a0:d8:00:20:bf:03:40:7f:44:0d:f0:2c:49:7f:53: 4e:83:a6:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwODIyMjE1OTA2WhcNMjUwODI5MjE1OTA2WjAYMRYwFAYD VQQDEw02OGE4ZTgyYS00MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oXRtnHgq9DRFBuXzA2CPocV42oKEQBB67xmfCG4UYpTze9BfXyf8SHzp+5r xTxi0qp9f3/oz4hnSu2D9yv6kCARY/LiFoqnDyCmbYtSj2IKRUvbo1xUu/wfg4Ee EMxmzHBu8qGCfqm61Gs5nQvr4QzNaBspMUL0nh+dXVGeYi9KPW1sovRxu+52ItDF 9RBQUrAe1U21FYn2+5yNfSF+XJ22g6ij0MYD/vRm4XIUf2Y0Ho1u2PACir7CQQnF 3GtdKNO8kurlWAaukQOIXJSFbnguBykhGv3tQ0tQ66HbHQWUEhiJpAt80XpKOI8E 6ofi/jmVQWawi+eOvFWkwGVhlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK82oWWR ZGMdQKwGVTxEWPoIKMP9MB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRdXXKppmTf0gAusRXOD3e6c1ty+lBBk8ACvRIpkMAaNXKrJadVx+N 63SyfHzMWohpZq3BwS8312IJ9B+p6lNGkjZvvcB4khW0ebeGhX+SpHqFzHLW3/7C f89csP8/67UxPACaHA7BJWsfbbYGIc1Kv7IJnV+JKujvmf8Lqdx7Y8TYyPbe72G+ ihbEKuda1FMwzBR2GDY9LdSq952mbYvenjAB+WpLkkZ/IL9t1JWqteWCzWBpTLMo NjBNwdtzyneOmH+sP1Y4FB4/vxPoAd6m3DXr8KCmHj5uiQqrZ23RNG6PTiBd4rqq lir/PF2g2AAgvwNAf0QN8CxJf1NOg6bI -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:17 2025 by rpki-client