$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: BI04rKPqKlI17E88uC1UmPh0bjsyX0F7XZU3P4D8t80= Subject key identifier: 81:B7:AD:49:E9:F8:07:22:8B:A5:B6:01:44:26:46:8B:FB:87:9C:3D Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 13A6 Signing time: Fri 22 Aug 2025 17:06:58 +0000 Manifest this update: Fri 22 Aug 2025 17:06:57 +0000 Manifest next update: Fri 29 Aug 2025 17:06:57 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: ynRaR4MxNnDYuNJdqXPCyanuSoF4MSM7FtzoK4VhZ8I=) 2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=) 3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=) 4: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5081 (0x13d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Aug 22 17:06:57 2025 GMT Not After : Aug 29 17:06:57 2025 GMT Subject: CN=68a8a3b1-b06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:c1:7f:b3:be:11:94:aa:23:06:4b:3c:18: 0f:4c:49:a5:88:5b:49:34:11:4e:36:cc:d5:9f:7b: ca:63:3e:e6:4e:1a:40:a5:e5:2d:af:fa:d4:51:27: bd:1d:60:a8:d2:17:c9:2b:24:03:96:e5:de:e0:c8: 4d:15:4e:fd:b7:8c:f6:01:43:a8:c5:bc:fa:72:b4: 89:16:a2:a1:4c:d8:ec:23:a7:1c:3c:5c:84:19:f9: 78:6d:e0:c0:3d:e7:c3:16:49:18:31:ae:ee:de:60: f2:17:fe:71:4f:2d:b8:ea:04:1f:7c:5c:45:96:23: ff:87:b4:9f:49:c4:77:c9:3b:2f:63:d1:ad:a1:26: 63:3e:62:e1:ee:bf:45:82:54:ca:a1:6d:30:23:5e: 56:41:d6:85:e7:96:76:0c:d8:a8:33:35:31:cf:51: 66:8f:44:2d:a8:ee:9d:4f:56:d3:cb:51:7a:b7:c1: f4:52:e0:9e:e6:23:26:db:77:cc:3a:bb:d1:68:5b: 49:69:92:fe:9c:cf:bd:7b:93:8c:c4:d2:d5:0e:db: f1:32:be:4f:b6:ae:28:f7:a0:c5:a8:4f:fd:9d:b4: 85:a9:6a:28:62:18:59:d9:c2:ea:7e:39:a3:c9:5e: c9:14:b5:7d:e8:82:48:35:64:78:fc:7d:85:87:6f: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B7:AD:49:E9:F8:07:22:8B:A5:B6:01:44:26:46:8B:FB:87:9C:3D X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:40:bf:45:6e:00:2a:41:6d:99:72:99:43:ab:f7:46:11:80: 4b:fb:8b:55:a6:0d:f7:da:f2:f3:f5:c9:19:8a:22:23:92:36: fb:2b:be:3c:e1:69:5d:92:d5:62:a6:23:be:37:25:30:20:95: da:0a:ad:66:7a:d5:a3:af:62:96:97:8f:db:d9:b3:4a:7d:54: f3:7c:fc:9e:c9:58:95:19:d0:17:a6:68:5d:2e:94:7b:96:bf: 96:b2:33:e2:a8:b7:ad:cb:a1:e5:9b:1a:c9:4b:b7:53:f4:d2: ee:e9:43:90:c9:60:8c:4e:7f:d5:9e:32:bb:be:47:3b:38:20: 35:15:50:97:6a:a6:17:e1:fe:9b:87:44:cc:4d:eb:b8:81:cb: 7a:63:2b:a3:3d:22:c8:cf:19:e1:10:18:14:df:0c:ae:a8:20: eb:a5:f4:af:e7:25:a0:51:ea:e1:c7:c2:f8:ae:af:54:b1:85: 09:fe:23:b8:a9:a5:23:6f:67:28:68:15:21:33:ba:13:fa:98: 51:d9:20:dc:47:8d:0f:e1:1a:94:cd:54:f0:49:54:38:34:d3: d7:89:04:09:ab:d4:ba:56:39:4f:3d:5c:ae:67:22:c2:ef:2b: 1a:6d:06:a5:4a:11:01:ed:8b:f7:b2:06:c0:48:ce:a4:09:ea: 5c:87:cb:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwODIyMTcwNjU3WhcNMjUwODI5MTcwNjU3WjAYMRYwFAYD VQQDEw02OGE4YTNiMS1iMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U7Bf7O+EZSqIwZLPBgPTEmliFtJNBFONszVn3vKYz7mThpApeUtr/rUUSe9 HWCo0hfJKyQDluXe4MhNFU79t4z2AUOoxbz6crSJFqKhTNjsI6ccPFyEGfl4beDA PefDFkkYMa7u3mDyF/5xTy246gQffFxFliP/h7SfScR3yTsvY9GtoSZjPmLh7r9F glTKoW0wI15WQdaF55Z2DNioMzUxz1Fmj0QtqO6dT1bTy1F6t8H0UuCe5iMm23fM OrvRaFtJaZL+nM+9e5OMxNLVDtvxMr5Ptq4o96DFqE/9nbSFqWooYhhZ2cLqfjmj yV7JFLV96IJINWR4/H2Fh29utQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG3rUnp +Acii6W2AUQmRov7h5w9MB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEQL9FbgAqQW2ZcplDq/dGEYBL+4tVpg332vLz9ckZiiIjkjb7K748 4WldktVipiO+NyUwIJXaCq1metWjr2KWl4/b2bNKfVTzfPyeyViVGdAXpmhdLpR7 lr+WsjPiqLety6HlmxrJS7dT9NLu6UOQyWCMTn/VnjK7vkc7OCA1FVCXaqYX4f6b h0TMTeu4gct6YyujPSLIzxnhEBgU3wyuqCDrpfSv5yWgUerhx8L4rq9UsYUJ/iO4 qaUjb2coaBUhM7oT+phR2SDcR40P4RqUzVTwSVQ4NNPXiQQJq9S6VjlPPVyuZyLC 7ysabQalShEB7Yv3sgbASM6kCepch8v9 -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:11 2025 by rpki-client