$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: AeyKhVuACyFdzMcH5Ww8sWZlBO1pbN48O5rY6yLB/oI= Subject key identifier: 06:DE:3F:F7:02:0C:05:C9:A8:17:12:4A:8D:FE:A7:49:79:72:1D:9C Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 246E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 244F Signing time: Fri 22 Aug 2025 15:50:54 +0000 Manifest this update: Fri 22 Aug 2025 15:50:53 +0000 Manifest next update: Fri 29 Aug 2025 15:50:53 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: g85ufBNkyWKHVwTDrWjOEfWZt9Ins/Vfo1J4xdEDHts=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: FG0kBNgcXB2ccIKTcUxFDt6fNDa7To3h1nclZ9D+gJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9326 (0x246e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Aug 22 15:50:53 2025 GMT Not After : Aug 29 15:50:53 2025 GMT Subject: CN=68a891de-bafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:21:ee:cb:97:ed:97:86:47:a5:97:e1:a8: 0d:4a:26:dc:85:8e:c2:80:6d:41:70:84:b6:39:73: 9a:04:87:b7:6f:f1:cd:0e:a7:9b:8f:e8:71:10:f9: c9:2f:a4:46:40:a5:22:c4:65:4e:17:c5:d3:d3:50: 64:64:94:43:11:e0:b0:aa:9f:2a:8c:30:83:01:17: 25:43:80:c0:5b:eb:17:21:51:ff:b3:d5:9f:8c:96: 1d:1c:f8:63:94:03:74:10:73:b3:cb:8d:40:58:7b: f9:fa:c5:8a:26:c9:28:8c:9d:98:c8:34:be:cd:87: d5:bf:65:f8:8e:7d:0d:c3:09:44:bd:a6:c8:b1:0f: 41:cb:88:d1:6c:48:9c:44:7b:12:f5:ba:29:cf:7b: 85:c9:2d:af:07:cb:5e:84:92:2a:51:37:81:34:10: 74:67:05:24:bb:24:72:46:69:f1:90:60:dc:90:4c: ea:3c:12:71:27:38:0f:45:1c:b8:46:a9:bd:c4:d6: da:f3:2f:d1:38:7a:7a:4d:f0:a9:17:ef:00:2c:26: 5f:60:1a:63:79:a3:0a:e6:03:71:1b:8c:c6:c4:9b: 0e:a5:8a:5c:24:6e:c4:51:9f:54:ba:eb:aa:7c:ab: 29:7f:59:8e:8c:97:ae:a3:7c:bd:d0:2b:0f:b1:e7: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DE:3F:F7:02:0C:05:C9:A8:17:12:4A:8D:FE:A7:49:79:72:1D:9C X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b3:06:62:ab:06:7e:80:f6:05:4a:22:95:ba:e7:70:22:8a: 2e:59:2e:46:ba:41:de:d8:b5:1e:bc:63:9e:83:27:95:62:85: d3:90:51:3a:0b:38:e6:b2:de:de:0c:8b:13:08:a7:57:92:b7: 89:10:03:ba:aa:7f:4c:64:94:7d:63:8e:60:a8:04:f0:77:16: 88:15:52:07:e4:ca:d6:f9:1d:2d:04:c9:6a:a5:91:f6:16:4f: a1:07:52:75:fa:ae:4d:02:80:d3:18:81:ca:34:69:63:de:10: 63:09:f7:7c:4c:08:0e:37:e4:19:25:5e:9f:d2:4b:7e:af:3b: d5:22:39:70:7f:46:42:7a:71:4c:b6:08:7c:14:b8:d4:06:10: 4a:47:f4:7b:54:b0:23:c6:76:ee:ef:2d:f9:75:e4:73:e6:78: 50:39:e5:88:9e:f9:15:47:e4:f5:87:97:44:7d:c2:df:5f:34: d0:5a:a8:a0:b7:9e:ce:0f:f1:19:27:95:ec:d4:61:02:eb:7f: 13:e7:16:7d:49:ab:51:9c:97:d7:98:79:e8:06:3f:52:ca:b4: f5:e6:28:40:5c:2d:46:d4:bc:11:8a:4b:e8:b8:42:26:40:6e: 6c:b0:c4:d4:5d:52:ac:e0:02:30:77:2f:85:e2:05:94:9a:57: 3e:97:f6:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwODIyMTU1MDUzWhcNMjUwODI5MTU1MDUzWjAYMRYwFAYD VQQDEw02OGE4OTFkZS1iYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnekh7suX7ZeGR6WX4agNSibchY7CgG1BcIS2OXOaBIe3b/HNDqebj+hxEPnJ L6RGQKUixGVOF8XT01BkZJRDEeCwqp8qjDCDARclQ4DAW+sXIVH/s9WfjJYdHPhj lAN0EHOzy41AWHv5+sWKJskojJ2YyDS+zYfVv2X4jn0NwwlEvabIsQ9By4jRbEic RHsS9bopz3uFyS2vB8tehJIqUTeBNBB0ZwUkuyRyRmnxkGDckEzqPBJxJzgPRRy4 Rqm9xNba8y/ROHp6TfCpF+8ALCZfYBpjeaMK5gNxG4zGxJsOpYpcJG7EUZ9Uuuuq fKspf1mOjJeuo3y90CsPseeRbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbeP/cC DAXJqBcSSo3+p0l5ch2cMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEswZiqwZ+gPYFSiKVuudwIoouWS5GukHe2LUevGOegyeVYoXTkFE6 Czjmst7eDIsTCKdXkreJEAO6qn9MZJR9Y45gqATwdxaIFVIH5MrW+R0tBMlqpZH2 Fk+hB1J1+q5NAoDTGIHKNGlj3hBjCfd8TAgON+QZJV6f0kt+rzvVIjlwf0ZCenFM tgh8FLjUBhBKR/R7VLAjxnbu7y35deRz5nhQOeWInvkVR+T1h5dEfcLfXzTQWqig t57OD/EZJ5Xs1GEC638T5xZ9SatRnJfXmHnoBj9SyrT15ihAXC1G1LwRikvouEIm QG5ssMTUXVKs4AIwdy+F4gWUmlc+l/bN -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:40 2025 by rpki-client