$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: MpDShH3C2RmdAgeyNOn33cm7HyyTaPS5iUPteDYU71o= Subject key identifier: 89:78:8A:D9:A3:F1:27:E8:47:8D:48:5B:86:67:AD:FD:1D:B2:F6:C5 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0246 Signing time: Sat 23 Aug 2025 02:04:55 +0000 Manifest this update: Sat 23 Aug 2025 02:04:55 +0000 Manifest next update: Sat 30 Aug 2025 02:04:55 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: i9MIW3HzBSNxPv6i/rVapJDi+JxlQICw+35bEzCy/+4=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Aug 23 02:04:55 2025 GMT Not After : Aug 30 02:04:55 2025 GMT Subject: CN=68a921c7-0d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:45:12:eb:a2:40:e6:f1:f1:20:1f:b5:2d:0d: 4f:c2:61:1a:73:d1:0f:51:84:a7:c9:c6:79:30:77: 3b:4f:65:7a:cf:bc:0c:81:3a:31:87:42:9e:21:7c: a9:74:0d:59:7d:cb:77:29:7e:6a:b4:bc:20:39:3f: 05:ab:fc:ec:52:b4:8e:e8:ef:0a:a4:a3:c4:30:3e: c7:f4:9e:5a:f0:0c:22:81:cd:e9:52:c7:c4:45:a7: d2:82:b3:45:7c:65:dc:dc:2f:74:55:3f:37:31:35: 9e:72:42:b1:eb:a1:e2:f6:56:88:69:54:2d:50:33: e0:5b:2c:5b:82:e4:39:1f:9e:75:86:23:04:15:cc: 7b:01:9a:0b:22:0a:7d:5d:07:21:d4:95:84:02:c5: 83:70:b6:3c:03:c2:58:5e:f3:a3:5d:9d:ea:fa:67: a9:9c:4d:47:db:5d:b6:13:3f:34:04:63:98:07:c5: 66:a0:bb:42:5e:53:3f:8a:f2:0d:66:0b:56:9a:da: 12:ca:fd:1c:00:d8:d9:c7:b2:cb:5c:2d:fa:dd:b6: e7:74:45:97:ce:56:f2:17:02:4d:06:05:f2:86:87: 7a:49:69:c0:48:8a:11:38:7b:d1:74:bb:dd:01:61: c6:cf:31:9d:d6:1d:e9:d0:d6:41:a6:04:23:94:27: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:8A:D9:A3:F1:27:E8:47:8D:48:5B:86:67:AD:FD:1D:B2:F6:C5 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b8:71:95:a1:70:6e:d5:07:8c:4b:d7:01:95:00:e9:ff:aa: db:91:53:96:ea:5b:24:9c:25:be:2e:99:f6:d9:dd:ab:75:e2: e8:de:8d:c9:64:16:cb:77:30:4c:b4:b4:2d:ca:94:a1:4a:8f: 4f:f7:2b:5c:75:43:58:8c:e4:36:80:fa:85:82:07:25:13:1f: e3:6f:6e:ac:57:96:d9:6f:52:98:4a:a8:02:8f:01:5c:36:d7: 7a:08:7c:9a:1c:84:ec:ef:e1:a5:52:4f:e0:71:3e:c5:b4:f9: f2:36:07:3e:17:c5:ed:6a:42:27:63:f9:2b:27:2d:71:19:e4: 27:bc:7c:9d:d1:be:7b:d6:f9:8a:8d:3c:a5:c1:93:b8:a4:e2: b4:6c:37:e4:dc:5c:3a:e3:24:ca:f8:7e:4e:df:6e:41:84:ca: 50:d7:1c:59:c5:3f:97:f5:5b:fb:48:d4:5c:a8:ca:62:24:fe: 90:c6:bc:01:5d:bd:25:7d:70:4f:2c:ce:f0:6c:ec:ef:d4:40: af:96:60:f4:40:8d:e0:05:d3:bc:41:57:e8:52:9d:3f:d2:81: 25:d2:07:a5:c2:53:fb:58:41:8f:c1:07:89:92:06:b0:cd:ec: 2e:1b:c9:fb:06:bf:2c:da:ed:2c:ec:dd:4e:e6:4a:49:e8:16: 40:ca:84:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUwODIzMDIwNDU1WhcNMjUwODMwMDIwNDU1WjAYMRYwFAYD VQQDEw02OGE5MjFjNy0wZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEUS66JA5vHxIB+1LQ1PwmEac9EPUYSnycZ5MHc7T2V6z7wMgToxh0KeIXyp dA1Zfct3KX5qtLwgOT8Fq/zsUrSO6O8KpKPEMD7H9J5a8Awigc3pUsfERafSgrNF fGXc3C90VT83MTWeckKx66Hi9laIaVQtUDPgWyxbguQ5H551hiMEFcx7AZoLIgp9 XQch1JWEAsWDcLY8A8JYXvOjXZ3q+mepnE1H2122Ez80BGOYB8VmoLtCXlM/ivIN ZgtWmtoSyv0cANjZx7LLXC363bbndEWXzlbyFwJNBgXyhod6SWnASIoROHvRdLvd AWHGzzGd1h3p0NZBpgQjlCeFqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl4itmj 8SfoR41IW4Znrf0dsvbFMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4uHGVoXBu1QeMS9cBlQDp/6rbkVOW6lsknCW+Lpn22d2rdeLo3o3J ZBbLdzBMtLQtypShSo9P9ytcdUNYjOQ2gPqFggclEx/jb26sV5bZb1KYSqgCjwFc Ntd6CHyaHITs7+GlUk/gcT7FtPnyNgc+F8XtakInY/krJy1xGeQnvHyd0b571vmK jTylwZO4pOK0bDfk3Fw64yTK+H5O325BhMpQ1xxZxT+X9Vv7SNRcqMpiJP6QxrwB Xb0lfXBPLM7wbOzv1ECvlmD0QI3gBdO8QVfoUp0/0oEl0gelwlP7WEGPwQeJkgaw zewuG8n7Br8s2u0s7N1O5kpJ6BZAyoTT -----END CERTIFICATE-----Generated at Sun Aug 24 04:36:24 2025 by rpki-client