$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json) Hash identifier: CUjHYa2Wtg3iWa+rXW6D3elDAVoVY9A8JQcjlTP4va0= Subject key identifier: A0:2C:5C:C0:30:18:34:54:4C:44:C7:2A:F0:E7:03:BF:4F:0B:46:B6 Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft Manifest number: 0389 Signing time: Fri 22 Aug 2025 21:00:12 +0000 Manifest this update: Fri 22 Aug 2025 21:00:12 +0000 Manifest next update: Fri 29 Aug 2025 21:00:11 +0000 Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: oMvBAYxTZt5ClJh6E9fR6lvLhmrnAFDKoDNj0sNEMT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Validity Not Before: Aug 22 21:00:12 2025 GMT Not After : Aug 29 21:00:11 2025 GMT Subject: CN=68a8da5c-933d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:6e:9b:71:c5:42:1b:a2:21:a7:fe:0f:88: 05:88:fa:a5:8a:bc:27:75:a7:f7:d0:7d:71:39:a3: 05:c7:e4:1a:c0:28:8a:63:59:3b:0b:3f:75:1a:32: 1e:2d:6e:42:0f:37:96:c1:ca:60:0e:e5:92:3e:a1: 74:39:65:bd:37:71:bf:aa:67:cb:35:1d:42:9e:ef: da:5c:33:c2:b5:b7:47:52:cd:ed:a9:fd:75:8d:e9: 44:86:1c:f2:64:1f:0b:f8:ee:d4:24:28:8a:04:9b: d2:05:81:0c:0b:bc:3c:63:8a:47:c0:d1:c2:ac:fd: 6b:46:fc:e5:43:99:7f:0a:33:c0:28:20:a4:07:ce: bf:b5:f9:48:40:5a:b1:92:95:5c:0d:9d:73:06:6e: 96:02:41:33:61:a3:ac:9c:19:4a:e6:8e:97:87:e6: 72:f8:57:c5:ac:d0:a8:21:fe:61:dc:5a:b6:ae:4d: 0d:6c:05:13:6e:eb:7e:85:46:28:af:16:0c:18:2c: 03:cd:10:86:77:f5:89:fa:35:6f:33:9f:c1:ed:cd: 47:27:ad:0c:5c:0e:3b:a4:5d:66:48:b8:a4:e3:5e: 7b:f1:72:ad:81:68:fa:fa:dd:99:6d:da:52:ce:29: fc:41:99:14:9b:8a:eb:27:54:b6:8b:37:88:f3:56: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:5C:C0:30:18:34:54:4C:44:C7:2A:F0:E7:03:BF:4F:0B:46:B6 X509v3 Authority Key Identifier: keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:71:41:30:f5:7a:66:6b:d6:97:0c:b6:a9:d0:4c:ac:08:3b: 7a:36:ec:5c:8f:d2:41:82:60:ce:83:9c:cc:b1:83:92:2e:bf: bb:43:a7:08:3e:ca:9f:97:39:50:9b:4d:d1:c4:91:f2:25:81: 77:d8:80:cd:28:87:dc:79:6f:d7:a7:34:6f:a7:36:4f:c7:6f: 4f:96:6c:ae:3e:1b:a9:dd:1e:fe:c9:6a:ab:bb:a7:9c:b0:69: 1c:4f:89:e1:62:26:3f:86:31:bb:79:92:55:c6:fc:96:0b:a8: b1:a6:6f:7d:46:bd:df:b1:49:ad:fb:1c:1c:c2:29:2f:c4:03: dc:eb:2b:60:af:b9:d4:5e:46:67:e3:4a:99:98:ae:2e:96:df: ae:85:52:85:a0:3f:22:d9:c2:04:80:90:ed:34:19:de:27:df: 50:ec:82:f2:02:26:ed:90:cb:48:a8:7a:56:f1:21:4d:d5:05: 8b:09:57:5f:c1:d6:c7:25:c2:88:98:6e:54:95:44:ad:17:ed: 07:9f:6b:c6:4b:b9:52:7b:76:c3:38:39:15:37:3a:39:82:16: b2:ae:ad:c9:f5:5d:a8:37:d7:3f:27:9b:8b:a3:ee:3a:93:24: 16:00:79:9b:55:52:c3:55:cf:a5:e4:d4:92:b1:60:1e:41:0e: 06:a2:df:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1 OUZCQkQ1NzQwHhcNMjUwODIyMjEwMDEyWhcNMjUwODI5MjEwMDExWjAYMRYwFAYD VQQDEw02OGE4ZGE1Yy05MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhJum3HFQhuiIaf+D4gFiPqlirwndaf30H1xOaMFx+QawCiKY1k7Cz91GjIe LW5CDzeWwcpgDuWSPqF0OWW9N3G/qmfLNR1Cnu/aXDPCtbdHUs3tqf11jelEhhzy ZB8L+O7UJCiKBJvSBYEMC7w8Y4pHwNHCrP1rRvzlQ5l/CjPAKCCkB86/tflIQFqx kpVcDZ1zBm6WAkEzYaOsnBlK5o6Xh+Zy+FfFrNCoIf5h3Fq2rk0NbAUTbut+hUYo rxYMGCwDzRCGd/WJ+jVvM5/B7c1HJ60MXA47pF1mSLik41578XKtgWj6+t2ZbdpS zin8QZkUm4rrJ1S2izeI81ZKrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAsXMAw GDRUTETHKvDnA79PC0a2MB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhcUEw9Xpma9aXDLap0EysCDt6Nuxcj9JBgmDOg5zMsYOSLr+7Q6cI PsqflzlQm03RxJHyJYF32IDNKIfceW/XpzRvpzZPx29PlmyuPhup3R7+yWqru6ec sGkcT4nhYiY/hjG7eZJVxvyWC6ixpm99Rr3fsUmt+xwcwikvxAPc6ytgr7nUXkZn 40qZmK4ult+uhVKFoD8i2cIEgJDtNBneJ99Q7ILyAibtkMtIqHpW8SFN1QWLCVdf wdbHJcKImG5UlUStF+0Hn2vGS7lSe3bDODkVNzo5ghayrq3J9V2oN9c/J5uLo+46 kyQWAHmbVVLDVc+l5NSSsWAeQQ4Got/f -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:58 2025 by rpki-client