$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: 1ZpPMCV2tHlIDUyUKPxEONdeXISrGAIzXVe1702HVKE= Subject key identifier: 41:B1:EB:3E:D5:68:50:1F:FF:A8:05:C9:94:15:D8:FA:66:89:E5:E2 Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0DEB Signing time: Fri 22 Aug 2025 17:58:51 +0000 Manifest this update: Fri 22 Aug 2025 17:58:51 +0000 Manifest next update: Fri 29 Aug 2025 17:58:51 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: toS6erKar5ffPghdecv39iVBp+IDN7jz93fQ8Vh3iTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: Aug 22 17:58:51 2025 GMT Not After : Aug 29 17:58:51 2025 GMT Subject: CN=68a8afdb-3474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:78:c7:cf:4a:df:57:fc:49:7d:6c:43:91: 4b:e8:42:1c:e0:56:2e:d2:a8:c8:47:ed:bc:80:4c: 31:a2:7b:df:70:8a:32:43:ec:07:6a:ea:ab:72:e8: d5:77:91:7b:1c:67:fa:f1:72:f9:bf:43:22:72:ec: 10:1e:ff:f2:c5:74:3a:2b:7f:a6:3f:34:77:bd:ea: 81:23:19:49:df:23:fb:29:02:96:d5:ca:26:a1:f0: 5c:72:86:2a:4e:51:e0:fb:60:8f:d2:b8:d2:68:6a: 56:6e:33:69:2b:94:19:be:23:65:fe:cd:96:e1:ac: 96:f7:c1:e1:bd:4f:5a:35:a0:af:ba:63:cc:f0:0a: 92:52:4d:1f:b2:e6:4f:80:62:91:d4:fb:40:72:89: 96:4f:7a:e1:fe:49:6c:d8:32:cf:55:1c:cc:00:eb: 30:f0:56:61:88:3a:ac:2a:5e:ed:67:59:b1:78:cb: a0:f8:ab:b7:25:3f:8a:95:60:40:19:7f:e7:a6:86: 27:a4:26:4f:97:b3:b0:99:95:a7:de:48:35:4e:f1: 97:2b:7e:81:5e:0b:dd:87:98:22:83:06:b6:47:82: 94:78:ce:25:d1:79:f7:39:e0:6e:68:88:c8:fc:99: e2:1d:7a:ec:9e:60:2a:f4:41:a7:0b:99:77:c3:9c: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B1:EB:3E:D5:68:50:1F:FF:A8:05:C9:94:15:D8:FA:66:89:E5:E2 X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:eb:ad:eb:b0:18:2b:40:33:4d:3f:1f:b2:00:13:de:61:85: 72:6a:01:cf:85:3e:dd:b6:43:24:2b:c6:53:32:6f:9e:f2:a8: c1:44:e5:6b:98:4a:84:36:2d:f1:22:17:f0:c9:d6:de:62:04: 39:86:72:4d:05:1d:c4:8c:b1:a7:4a:eb:6d:d9:3b:d0:1d:49: 0f:63:36:7a:08:43:5d:60:38:00:98:d3:13:0e:9f:24:17:b5: 26:9b:81:46:66:3c:4d:d1:f5:4c:a2:30:b5:ba:cd:c1:43:37: 44:2d:d0:d1:5e:e7:b1:23:b5:3e:cb:97:8b:f4:16:e5:01:50: 84:d1:b8:18:ce:74:59:da:4d:8a:c3:4b:72:89:cb:46:5d:b8: 1c:36:45:ef:46:40:23:f0:e7:60:95:b5:46:6c:2b:77:a9:78: 4b:8b:6d:27:08:3c:0e:ec:b5:a5:10:36:9c:22:3a:fe:5a:42: 76:5e:40:53:b8:e0:aa:a3:47:80:66:df:44:b9:9d:59:73:96: f7:b7:9e:98:d4:0f:b4:f5:f1:57:d8:b8:cd:2b:12:46:86:a4: 42:8e:87:57:9b:01:b8:81:3f:05:a4:db:31:1c:42:67:60:db: 8c:b8:c9:7a:a2:ec:b4:6b:48:95:db:a4:97:eb:4c:d2:26:6c: 56:a0:37:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjUwODIyMTc1ODUxWhcNMjUwODI5MTc1ODUxWjAYMRYwFAYD VQQDEw02OGE4YWZkYi0zNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AZ4x89K31f8SX1sQ5FL6EIc4FYu0qjIR+28gEwxonvfcIoyQ+wHauqrcujV d5F7HGf68XL5v0MicuwQHv/yxXQ6K3+mPzR3veqBIxlJ3yP7KQKW1comofBccoYq TlHg+2CP0rjSaGpWbjNpK5QZviNl/s2W4ayW98HhvU9aNaCvumPM8AqSUk0fsuZP gGKR1PtAcomWT3rh/kls2DLPVRzMAOsw8FZhiDqsKl7tZ1mxeMug+Ku3JT+KlWBA GX/npoYnpCZPl7OwmZWn3kg1TvGXK36BXgvdh5gigwa2R4KUeM4l0Xn3OeBuaIjI /JniHXrsnmAq9EGnC5l3w5zg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGx6z7V aFAf/6gFyZQV2PpmieXiMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/663rsBgrQDNNPx+yABPeYYVyagHPhT7dtkMkK8ZTMm+e8qjBROVr mEqENi3xIhfwydbeYgQ5hnJNBR3EjLGnSutt2TvQHUkPYzZ6CENdYDgAmNMTDp8k F7Umm4FGZjxN0fVMojC1us3BQzdELdDRXuexI7U+y5eL9BblAVCE0bgYznRZ2k2K w0tyictGXbgcNkXvRkAj8OdglbVGbCt3qXhLi20nCDwO7LWlEDacIjr+WkJ2XkBT uOCqo0eAZt9EuZ1Zc5b3t56Y1A+09fFX2LjNKxJGhqRCjodXmwG4gT8FpNsxHEJn YNuMuMl6ouy0a0iV26SX60zSJmxWoDcQ -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:08 2025 by rpki-client