$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: VaOoqzhffhsqTxekTjlNMrETwxt6Vd6xSuhGR1QJhA8= Subject key identifier: 1C:81:CF:42:13:B4:58:B9:07:E1:9F:A7:36:64:08:0D:AD:1D:03:6D Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 2470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 2460 Signing time: Fri 22 Aug 2025 15:50:18 +0000 Manifest this update: Fri 22 Aug 2025 15:50:18 +0000 Manifest next update: Fri 29 Aug 2025 15:50:18 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: K7Ht/eW6EW/c4nLLHjVWVjKjpjTaQIL/kcUbkqKJFUc=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9328 (0x2470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Aug 22 15:50:18 2025 GMT Not After : Aug 29 15:50:18 2025 GMT Subject: CN=68a891ba-472d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8e:77:3f:28:4f:2c:9b:eb:aa:ac:46:6e:91: 79:d5:8e:1a:db:f0:52:21:fa:bf:71:cd:fc:78:62: cb:70:94:81:0e:8e:ea:36:f1:81:9a:4f:c3:04:ee: 14:ea:87:d2:a3:b2:b7:98:ee:75:ec:1e:5c:f1:f7: b3:c5:0d:0e:41:60:0a:0b:82:53:15:21:41:9b:c6: 7b:b3:28:04:fe:59:ba:c6:04:e4:a8:ec:3a:71:0a: b1:ee:85:77:1e:08:af:8c:72:dc:e3:e9:19:86:d1: 51:68:17:54:12:a9:16:7c:86:85:ad:04:75:96:6f: 90:c2:ce:88:01:cc:7b:73:12:f8:cb:10:34:74:20: 97:39:11:f3:c0:7a:26:84:e0:e9:8c:27:69:78:fd: 43:34:ed:91:f5:c1:d5:03:8f:aa:85:e9:d3:ce:90: 44:a9:aa:31:e2:52:f0:dc:9f:73:01:be:53:da:a2: bd:1c:16:7e:b9:15:3e:0d:88:bb:8d:05:02:5b:6e: 28:18:4c:a3:db:08:46:70:c0:c2:52:c4:07:e3:4b: 87:bb:68:12:d1:81:6f:5d:8d:ee:38:31:34:65:ec: 32:16:66:59:f7:0e:40:53:86:31:b3:4d:88:1f:5b: 6f:4f:65:4a:d4:09:71:b7:cc:39:b2:47:b8:e0:06: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:81:CF:42:13:B4:58:B9:07:E1:9F:A7:36:64:08:0D:AD:1D:03:6D X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:67:35:4e:8c:d3:62:71:fc:d1:43:8f:8c:51:02:ce:33:c8: 8a:61:d2:dc:91:b2:1d:f7:8f:41:e8:d0:df:7d:0f:3b:69:94: 40:18:d1:73:df:d2:3c:20:4b:80:2e:3e:60:24:08:41:08:15: 46:ae:4b:0f:16:d1:c5:16:f1:ae:32:be:79:d4:6a:63:f0:92: ce:e8:65:3d:82:22:3b:a8:a0:a0:50:7f:42:36:51:18:30:8c: 22:b5:b7:7f:75:fe:17:cf:2a:a1:63:0a:40:23:32:4a:54:6a: 61:98:31:2f:22:75:e2:c3:65:de:b1:1b:56:19:4c:a5:df:4a: da:a7:b9:e4:44:5f:75:27:91:af:ee:98:11:4e:c3:07:08:6a: 64:d3:29:93:b2:96:de:c0:9e:c3:05:0d:d4:eb:43:a7:fc:fa: 5b:81:8e:cc:9c:9a:4c:d4:ca:cd:14:48:94:11:30:71:69:bb: de:39:1f:8b:4e:84:1b:34:4e:31:e3:e1:e1:6d:fe:df:a5:23: e8:5e:8c:c3:3e:d1:08:20:b2:37:e3:21:79:08:58:e9:69:fc: dd:32:1f:0c:26:79:86:c3:96:cb:4c:ff:8a:3c:76:61:03:c5: bd:7f:22:ec:c9:81:69:43:c1:99:eb:e9:53:5a:99:2c:2b:41: c2:02:02:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUwODIyMTU1MDE4WhcNMjUwODI5MTU1MDE4WjAYMRYwFAYD VQQDEw02OGE4OTFiYS00NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y53PyhPLJvrqqxGbpF51Y4a2/BSIfq/cc38eGLLcJSBDo7qNvGBmk/DBO4U 6ofSo7K3mO517B5c8fezxQ0OQWAKC4JTFSFBm8Z7sygE/lm6xgTkqOw6cQqx7oV3 HgivjHLc4+kZhtFRaBdUEqkWfIaFrQR1lm+Qws6IAcx7cxL4yxA0dCCXORHzwHom hODpjCdpeP1DNO2R9cHVA4+qhenTzpBEqaox4lLw3J9zAb5T2qK9HBZ+uRU+DYi7 jQUCW24oGEyj2whGcMDCUsQH40uHu2gS0YFvXY3uODE0ZewyFmZZ9w5AU4Yxs02I H1tvT2VK1Alxt8w5ske44Ab/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByBz0IT tFi5B+GfpzZkCA2tHQNtMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClZzVOjNNicfzRQ4+MUQLOM8iKYdLckbId949B6NDffQ87aZRAGNFz 39I8IEuALj5gJAhBCBVGrksPFtHFFvGuMr551Gpj8JLO6GU9giI7qKCgUH9CNlEY MIwitbd/df4XzyqhYwpAIzJKVGphmDEvInXiw2XesRtWGUyl30rap7nkRF91J5Gv 7pgRTsMHCGpk0ymTspbewJ7DBQ3U60On/PpbgY7MnJpM1MrNFEiUETBxabveOR+L ToQbNE4x4+Hhbf7fpSPoXozDPtEIILI34yF5CFjpafzdMh8MJnmGw5bLTP+KPHZh A8W9fyLsyYFpQ8GZ6+lTWpksK0HCAgK9 -----END CERTIFICATE-----Generated at Sat Aug 23 09:17:47 2025 by rpki-client