$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: qudN4FdzIW35PXQbh34/bTxeoj2iWPuA6NI7wuDlefg= Subject key identifier: 5D:53:BD:0F:2E:A4:F9:15:6D:DE:73:81:67:1B:23:FF:9C:28:1C:A7 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 05C9 Signing time: Fri 22 Aug 2025 23:14:56 +0000 Manifest this update: Fri 22 Aug 2025 23:14:56 +0000 Manifest next update: Fri 29 Aug 2025 23:14:56 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: R6awaP2w/3qkOl4EFocRVRvHcu3C4p2QdjyM+a8rztY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: Aug 22 23:14:56 2025 GMT Not After : Aug 29 23:14:56 2025 GMT Subject: CN=68a8f9f0-7653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:99:a6:e9:5a:06:1e:3e:46:97:35:09:65: a1:9b:c4:2d:18:36:85:14:e4:0b:b1:80:4a:0f:0f: 81:cc:82:dc:69:3d:44:1c:e5:a1:f8:e8:22:9a:25: 0f:01:a2:52:00:16:7f:d8:25:e7:ea:d9:65:88:32: 3e:1c:1f:8b:72:03:17:55:c0:76:ce:10:ec:0e:cf: 5e:c9:33:b9:35:61:03:80:2a:c0:59:be:0e:ab:71: ab:a3:75:3c:53:34:58:5c:97:bc:62:f5:61:f9:3e: a7:8d:0b:0b:8e:98:54:6f:0a:47:5b:c9:e8:3d:97: 8c:61:13:ab:8b:03:19:16:ee:8d:44:25:fa:e0:10: 07:c2:e8:d4:1a:f3:bc:f5:95:e2:58:96:26:a7:ff: 00:aa:fd:e2:fc:9d:8d:9b:51:a1:24:3c:5b:67:77: 72:c2:48:74:c8:0b:c6:16:74:70:84:b2:e0:03:a2: c3:e0:c8:b7:41:37:ec:5a:51:d6:8c:f3:4a:2a:b4: 14:2f:30:79:96:31:c4:01:44:1b:de:d4:4f:a4:40: e4:31:74:8a:9a:79:9e:ee:f4:b1:ac:57:02:7e:6d: a7:d4:bb:0d:a4:95:c7:05:dc:27:b4:6e:55:2f:86: 61:d3:3c:d5:9d:e1:2f:79:e3:1f:91:e5:0f:51:eb: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:BD:0F:2E:A4:F9:15:6D:DE:73:81:67:1B:23:FF:9C:28:1C:A7 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bf:e3:1b:95:3e:59:d1:03:3b:c0:6e:e7:9f:50:70:21:f2: 7f:78:2e:26:81:be:85:cb:85:c8:d4:92:00:00:58:f8:3d:d0: d7:b4:c6:df:51:5b:18:82:1d:9a:d7:8b:b1:b4:49:d9:bb:66: e5:b0:9f:bb:62:fd:7d:b8:1d:72:31:6d:91:71:52:63:ea:69: 22:42:21:12:0c:c4:47:7a:3e:5f:4a:44:a6:a2:b8:fc:b3:f0: 22:a4:96:72:3d:69:f9:85:88:b3:e6:be:58:1f:93:4e:e3:27: b2:a4:51:8a:d0:2c:9a:67:57:02:f3:ae:f7:34:29:e2:b0:ae: 28:b8:02:3c:d7:d2:b2:d5:8a:c0:6f:e4:35:5d:5d:c4:09:e3: c5:67:3f:96:2d:6a:59:bc:48:08:8e:d8:1f:be:8b:85:0a:10: 89:4b:ef:10:87:06:2e:6f:00:d1:eb:85:ce:41:32:b9:8a:53: f0:0f:c9:86:6e:54:87:f2:d6:59:f7:b0:d4:17:20:1f:af:56: b9:f5:c2:7a:b9:fd:6c:72:32:2d:77:2c:08:3a:b5:44:6b:20: 0a:14:9d:30:fb:6b:61:b1:98:73:cf:90:5d:96:8d:8c:93:1a: ff:4c:1e:84:bd:a8:a7:8e:3f:59:02:0b:99:7f:2d:84:d9:8f: 63:d5:b5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjUwODIyMjMxNDU2WhcNMjUwODI5MjMxNDU2WjAYMRYwFAYD VQQDEw02OGE4ZjlmMC03NjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSqZpulaBh4+Rpc1CWWhm8QtGDaFFOQLsYBKDw+BzILcaT1EHOWh+OgimiUP AaJSABZ/2CXn6tlliDI+HB+LcgMXVcB2zhDsDs9eyTO5NWEDgCrAWb4Oq3Gro3U8 UzRYXJe8YvVh+T6njQsLjphUbwpHW8noPZeMYROriwMZFu6NRCX64BAHwujUGvO8 9ZXiWJYmp/8Aqv3i/J2Nm1GhJDxbZ3dywkh0yAvGFnRwhLLgA6LD4Mi3QTfsWlHW jPNKKrQULzB5ljHEAUQb3tRPpEDkMXSKmnme7vSxrFcCfm2n1LsNpJXHBdwntG5V L4Zh0zzVneEveeMfkeUPUet90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1TvQ8u pPkVbd5zgWcbI/+cKBynMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANv+MblT5Z0QM7wG7nn1BwIfJ/eC4mgb6Fy4XI1JIAAFj4PdDXtMbf UVsYgh2a14uxtEnZu2blsJ+7Yv19uB1yMW2RcVJj6mkiQiESDMRHej5fSkSmorj8 s/AipJZyPWn5hYiz5r5YH5NO4yeypFGK0CyaZ1cC8673NCnisK4ouAI819Ky1YrA b+Q1XV3ECePFZz+WLWpZvEgIjtgfvouFChCJS+8QhwYubwDR64XOQTK5ilPwD8mG blSH8tZZ97DUFyAfr1a59cJ6uf1scjItdywIOrVEayAKFJ0w+2thsZhzz5Bdlo2M kxr/TB6Evainjj9ZAguZfy2E2Y9j1bU3 -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:19 2025 by rpki-client