$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: ivYM8o9wHwI5kVneirVslE34Fw9QR6AsLrKAVZBryqg= Subject key identifier: 26:B8:4D:F7:09:BC:57:68:02:B1:47:3D:F2:49:C8:5A:1F:A9:40:82 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: E6 Signing time: Sat 23 Aug 2025 05:34:18 +0000 Manifest this update: Sat 23 Aug 2025 05:34:18 +0000 Manifest next update: Sat 30 Aug 2025 05:34:18 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: EU6AnYhhehg79KEZJyZFC9LWrZOhzVRpp0r3eNfewV0=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Aug 23 05:34:18 2025 GMT Not After : Aug 30 05:34:18 2025 GMT Subject: CN=68a952da-f7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:60:49:c0:19:0a:2d:66:9c:ef:b2:8e:ab: 56:c2:cc:fb:bc:78:c5:24:68:26:27:fc:9f:2e:8a: 5e:35:49:41:68:0b:c7:11:90:f6:62:e2:7e:da:ec: 5d:2a:9c:25:98:09:e1:b4:96:c6:e6:e2:0b:a9:0c: 99:c0:92:a5:48:51:ef:c1:6e:61:ae:35:e1:08:7b: 21:65:82:65:d3:16:91:11:83:9d:1b:57:53:1b:f4: 70:fd:34:f9:b1:49:fd:54:af:95:e8:24:a6:00:36: 00:0d:9c:5f:83:56:57:04:d1:ec:57:ad:0c:01:76: b7:da:14:e0:b9:d8:fc:80:9e:8e:56:91:07:4a:49: aa:98:dc:5e:89:a0:33:ed:f4:4a:7d:3e:f9:cf:85: d6:81:f6:cb:d8:10:d3:4b:25:98:26:a7:5f:14:56: 6f:b9:ad:a9:bd:50:2c:d5:1c:a2:5c:96:c3:5c:f8: ae:dd:f6:bf:c5:19:1d:cd:00:5b:1c:6f:50:04:ad: 80:5d:36:a2:5e:78:bf:d7:c4:bb:26:7d:30:56:89: 2e:fd:6d:25:3e:0a:44:4c:55:2f:a9:5f:d4:4f:af: 4f:aa:dc:83:03:a8:02:3d:ea:26:47:65:47:1f:d1: c6:f8:9b:92:9e:45:f6:0c:ce:d9:eb:8c:92:28:35: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B8:4D:F7:09:BC:57:68:02:B1:47:3D:F2:49:C8:5A:1F:A9:40:82 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fa:16:df:1d:c6:ab:cb:9e:d8:94:87:b0:80:9c:f6:f4:05: 97:af:0f:8d:d5:a6:f6:34:c4:37:bb:f5:59:f4:18:b3:a1:12: da:dd:7d:02:da:a8:c6:7e:1b:bf:d8:8e:86:a5:3b:a9:00:71: bc:d9:93:51:f8:44:15:c1:28:bf:84:b1:63:49:bd:15:8c:1f: db:f7:cd:28:31:a5:17:70:8d:c4:18:53:cf:83:c3:f1:71:83: 8f:31:46:72:80:5e:1d:1c:fa:49:c6:ce:cf:6b:8b:3f:2f:31: e3:f7:08:00:ae:ea:0a:55:5f:0f:cd:ae:9c:cb:5b:96:0a:20: 69:98:38:fb:96:e5:63:2b:1c:cb:ef:a7:af:b1:b8:f9:17:cc: a1:5e:42:93:60:77:95:07:a4:b6:93:07:db:4b:3a:58:0d:9a: 4d:89:cc:f4:67:a8:6a:82:64:f7:bc:88:f0:b6:e6:97:33:38: 45:9b:0a:0b:fa:8a:d2:37:c5:39:82:5c:86:63:ad:45:4c:4d: 20:b2:a3:a9:a4:39:1f:a7:83:5c:5b:2e:b5:a9:89:06:d0:8a: 3e:5a:c9:a2:a3:fc:0e:51:b6:33:e1:2f:60:f1:f7:b1:c7:e2: 35:2c:c4:da:15:ab:5f:d5:3a:2f:7d:99:11:fc:7c:d9:7c:3c: 15:b6:38:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwODIzMDUzNDE4WhcNMjUwODMwMDUzNDE4WjAYMRYwFAYD VQQDEw02OGE5NTJkYS1mN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5txgScAZCi1mnO+yjqtWwsz7vHjFJGgmJ/yfLopeNUlBaAvHEZD2YuJ+2uxd KpwlmAnhtJbG5uILqQyZwJKlSFHvwW5hrjXhCHshZYJl0xaREYOdG1dTG/Rw/TT5 sUn9VK+V6CSmADYADZxfg1ZXBNHsV60MAXa32hTgudj8gJ6OVpEHSkmqmNxeiaAz 7fRKfT75z4XWgfbL2BDTSyWYJqdfFFZvua2pvVAs1RyiXJbDXPiu3fa/xRkdzQBb HG9QBK2AXTaiXni/18S7Jn0wVoku/W0lPgpETFUvqV/UT69PqtyDA6gCPeomR2VH H9HG+JuSnkX2DM7Z64ySKDXZtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa4TfcJ vFdoArFHPfJJyFofqUCCMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5+hbfHcary57YlIewgJz29AWXrw+N1ab2NMQ3u/VZ9BizoRLa3X0C 2qjGfhu/2I6GpTupAHG82ZNR+EQVwSi/hLFjSb0VjB/b980oMaUXcI3EGFPPg8Px cYOPMUZygF4dHPpJxs7Pa4s/LzHj9wgAruoKVV8Pza6cy1uWCiBpmDj7luVjKxzL 76evsbj5F8yhXkKTYHeVB6S2kwfbSzpYDZpNicz0Z6hqgmT3vIjwtuaXMzhFmwoL +orSN8U5glyGY61FTE0gsqOppDkfp4NcWy61qYkG0Io+Wsmio/wOUbYz4S9g8fex x+I1LMTaFatf1TovfZkR/HzZfDwVtjjg -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:18 2025 by rpki-client