$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: tYgyh72GMF0xDDN4CyoqDBb/u/IloTQfBtq46TuKTUY= Subject key identifier: 0B:BF:70:45:37:F2:5A:F0:72:E5:8F:48:2F:8D:4D:0D:33:4E:6F:98 Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 0926 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 091D Signing time: Fri 22 Aug 2025 20:25:22 +0000 Manifest this update: Fri 22 Aug 2025 20:25:22 +0000 Manifest next update: Fri 29 Aug 2025 20:25:22 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: E2esl3EiooSz5ZhjO9eQl+WZgFmRba1OoypqN6yaGMY=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Aug 22 20:25:22 2025 GMT Not After : Aug 29 20:25:22 2025 GMT Subject: CN=68a8d232-200e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:ef:c5:47:1f:3a:75:cd:7b:4a:cf:80:03: 91:0f:53:17:7f:6e:97:96:3c:9f:58:6e:42:af:30: 00:0c:f2:f9:90:32:69:cc:10:5c:4a:34:ef:19:0c: 8d:7a:e2:1a:50:60:c0:b9:93:38:35:b3:dd:97:97: a7:43:9e:59:bb:bb:f7:fd:b1:45:7f:d9:c4:f4:be: 9c:ed:cb:61:1e:32:5f:a7:64:f7:24:3c:7a:0b:32: ce:1d:59:e1:1a:53:e4:7d:62:83:14:3f:01:89:9d: a3:f3:bc:c8:c6:94:a8:c2:fb:a1:07:77:85:13:40: ee:c7:e9:1e:93:32:07:88:fa:0e:0d:d5:52:0e:e9: 74:cc:f7:6f:81:96:fd:7d:00:79:8e:46:cd:5e:b7: dc:0e:40:0d:6b:ad:35:69:9c:1e:0f:bd:04:d5:85: ac:e4:62:67:0c:90:fc:d0:3f:32:6c:32:91:0b:e2: f5:8d:3d:ff:83:43:c5:27:8e:13:69:d7:4b:d8:54: a9:67:7b:5e:02:54:15:24:ec:34:94:c3:55:2c:a8: 55:71:6c:85:f7:c1:d6:a3:ba:bb:db:d9:8f:3b:72: 75:ca:e5:11:23:e8:57:1d:c2:ee:af:a1:d2:eb:46: 8d:d7:83:cc:41:b0:b5:62:12:f4:03:52:6b:49:50: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BF:70:45:37:F2:5A:F0:72:E5:8F:48:2F:8D:4D:0D:33:4E:6F:98 X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:bb:c0:9a:a1:ae:9a:64:1d:35:fa:1f:59:2c:10:30:84:09: fb:51:9b:ac:c3:27:1f:f5:ce:12:99:cd:77:89:c6:ad:86:62: 21:06:5f:c9:f3:01:3c:5e:fc:04:6b:1d:52:91:87:2b:19:06: 2b:b7:3c:51:a5:5c:30:01:ae:1e:5c:e1:17:dd:93:dd:d4:f0: e2:fe:41:7b:0c:3d:9a:dc:ef:41:97:d6:d9:71:73:d0:80:20: db:f2:37:d0:b8:f1:b3:2a:bb:5c:51:0e:eb:c3:2d:2f:be:c0: 45:db:e6:5e:7a:8f:d4:72:da:84:07:c7:9d:a7:4c:58:dc:c9: fb:55:72:1a:db:4f:71:c8:a2:a0:6c:f7:7d:1c:4f:c4:ff:fc: ba:a9:27:bc:f6:fc:22:fe:7f:56:cd:f4:e1:91:1e:9d:e0:cd: 58:8c:eb:e7:6e:00:9d:93:3f:52:91:0f:3d:34:c7:5e:56:0b: 95:e8:ee:23:c7:fd:a2:ad:5e:b1:07:00:d0:1f:fd:66:2a:e6: 4a:95:76:aa:62:ed:15:74:e6:a7:88:c9:d2:e8:17:ef:a5:50: 3f:64:d1:87:00:d1:a8:d3:39:a3:1b:ac:b3:6e:6f:cb:f4:11: 34:ba:e1:89:26:84:78:d3:a3:2f:9b:6b:26:68:d6:1d:33:59: bc:81:8f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwODIyMjAyNTIyWhcNMjUwODI5MjAyNTIyWjAYMRYwFAYD VQQDEw02OGE4ZDIzMi0yMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVTvxUcfOnXNe0rPgAORD1MXf26XljyfWG5CrzAADPL5kDJpzBBcSjTvGQyN euIaUGDAuZM4NbPdl5enQ55Zu7v3/bFFf9nE9L6c7cthHjJfp2T3JDx6CzLOHVnh GlPkfWKDFD8BiZ2j87zIxpSowvuhB3eFE0Dux+kekzIHiPoODdVSDul0zPdvgZb9 fQB5jkbNXrfcDkANa601aZweD70E1YWs5GJnDJD80D8ybDKRC+L1jT3/g0PFJ44T addL2FSpZ3teAlQVJOw0lMNVLKhVcWyF98HWo7q729mPO3J1yuURI+hXHcLur6HS 60aN14PMQbC1YhL0A1JrSVAD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu/cEU3 8lrwcuWPSC+NTQ0zTm+YMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApu8Caoa6aZB01+h9ZLBAwhAn7UZuswycf9c4Smc13icathmIhBl/J 8wE8XvwEax1SkYcrGQYrtzxRpVwwAa4eXOEX3ZPd1PDi/kF7DD2a3O9Bl9bZcXPQ gCDb8jfQuPGzKrtcUQ7rwy0vvsBF2+Zeeo/UctqEB8edp0xY3Mn7VXIa209xyKKg bPd9HE/E//y6qSe89vwi/n9WzfThkR6d4M1YjOvnbgCdkz9SkQ89NMdeVguV6O4j x/2irV6xBwDQH/1mKuZKlXaqYu0VdOaniMnS6BfvpVA/ZNGHANGo0zmjG6yzbm/L 9BE0uuGJJoR406Mvm2smaNYdM1m8gY+N -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:54 2025 by rpki-client