$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: uzN4YfW3OURo1AOLT7Z7HujJElfDTxJygz4KpLQrwaY= Subject key identifier: 3E:86:7F:34:9C:38:4B:A9:A6:70:79:1C:3D:50:2C:63:88:7C:9C:B4 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 06:57:56 +0000 Manifest this update: Sat 23 Aug 2025 06:57:56 +0000 Manifest next update: Sat 30 Aug 2025 06:57:56 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: Obh2ldjhUZr+rgJrXsNIAwxSnGAiwN55OVATBP5ubtE=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Aug 23 06:57:56 2025 GMT Not After : Aug 30 06:57:56 2025 GMT Subject: CN=68a96674-f2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:e9:ee:13:76:50:98:87:8e:ba:86:78:79: 93:20:6d:b1:b0:e0:40:58:5e:1c:84:4e:72:88:36: 26:7a:78:55:28:e3:f4:13:c6:33:a9:b5:68:ce:61: 2e:62:92:27:a6:31:dd:02:c2:13:c8:7b:1e:35:a5: 24:02:30:20:7e:77:51:c4:96:57:46:28:86:30:85: 36:1d:f9:81:90:7e:e6:7c:71:1f:6a:43:7f:d3:ff: be:27:12:55:4e:0c:62:95:8c:4c:9a:a0:e5:f0:b8: 29:02:c6:23:db:c4:94:ce:79:07:a4:47:bb:cc:61: fe:3d:a4:75:91:53:ab:1b:95:c5:25:69:2c:e8:57: 48:ce:92:28:6c:97:57:91:33:00:f8:7c:8e:7f:e2: 28:52:09:f8:19:4b:53:33:3b:20:23:c2:b1:96:07: 95:fb:3f:b7:be:62:a8:dd:a7:82:41:16:8b:16:5e: 42:59:95:e2:7e:b8:46:a9:a3:bd:a9:60:44:44:06: 62:4c:5c:87:13:98:df:53:4b:86:3f:05:f4:a0:a6: 01:bb:34:12:66:f8:c7:da:53:78:7c:c7:ba:37:ee: da:46:5a:ed:25:86:27:69:51:54:bf:e7:5a:62:aa: b5:ff:1f:78:14:1e:6d:c5:ab:5d:07:14:6e:87:16: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:86:7F:34:9C:38:4B:A9:A6:70:79:1C:3D:50:2C:63:88:7C:9C:B4 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:22:b9:b7:fa:09:87:83:ee:34:c5:17:37:2b:e6:3a:00:95: 5a:d4:d6:8d:e8:35:f5:81:30:d6:4c:93:df:91:a3:f6:b1:e7: c4:16:cb:96:f5:f6:ac:6a:e8:04:45:51:e3:a2:d6:45:52:17: 05:b3:a5:ef:e5:a8:99:b1:6c:ed:04:f5:cc:a4:a5:0c:41:fc: 82:67:61:ff:8e:29:6a:43:77:0f:06:6a:7f:a6:7e:45:2e:94: b7:a0:a0:0f:a8:01:87:e3:9a:62:88:a4:44:f7:85:75:d8:ed: ec:42:c8:88:74:32:ab:eb:81:9f:85:b0:9a:d6:fa:1f:3f:2e: 61:57:51:08:70:0e:8d:5e:6b:0d:4b:e7:18:54:84:c8:d0:78: 86:9c:0c:6a:2f:ce:70:85:9d:64:e9:01:02:50:0e:ce:5c:bd: 1f:fd:d0:80:23:42:09:ac:ee:bb:1f:7e:78:6d:98:7a:bd:5f: 40:ce:1b:d3:a2:bd:ad:c8:25:61:44:4d:f3:43:07:ee:e4:be: d6:55:87:f0:ea:59:32:c0:21:c9:dc:f0:53:55:e8:5f:35:ef: 0b:c2:c3:a8:47:36:7b:be:28:47:dd:31:fb:e3:13:0f:a9:f8: e5:61:e3:4f:6a:cf:ca:88:75:da:b4:1c:e4:e8:78:d5:62:38: 83:69:77:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoNjVBOEQwOEIyRUM4RjQyRDQzQjlBQTdBNDIzNTE3MkJC N0VEMTY2NTAeFw0yNTA4MjMwNjU3NTZaFw0yNTA4MzAwNjU3NTZaMBgxFjAUBgNV BAMTDTY4YTk2Njc0LWYyZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBu+nuE3ZQmIeOuoZ4eZMgbbGw4EBYXhyETnKINiZ6eFUo4/QTxjOptWjOYS5i kiemMd0CwhPIex41pSQCMCB+d1HElldGKIYwhTYd+YGQfuZ8cR9qQ3/T/74nElVO DGKVjEyaoOXwuCkCxiPbxJTOeQekR7vMYf49pHWRU6sblcUlaSzoV0jOkihsl1eR MwD4fI5/4ihSCfgZS1MzOyAjwrGWB5X7P7e+Yqjdp4JBFosWXkJZleJ+uEapo72p YEREBmJMXIcTmN9TS4Y/BfSgpgG7NBJm+MfaU3h8x7o37tpGWu0lhidpUVS/51pi qrX/H3gUHm3Fq10HFG6HFsjtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPoZ/NJw4 S6mmcHkcPVAsY4h8nLQwHwYDVR0jBBgwFoAUZajQiy7I9C1Duap6QjUXK7ftFmUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzY0QkE0QkE4QzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFqUWl5N0k5QzFEdWFwNlFqVVhLN2Z0Rm1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzY0QkE0QkE4QzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMx RHVhcDZRalVYSzdmdEZtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABgiubf6CYeD7jTFFzcr5joAlVrU1o3oNfWBMNZMk9+Ro/ax58QWy5b1 9qxq6ARFUeOi1kVSFwWzpe/lqJmxbO0E9cykpQxB/IJnYf+OKWpDdw8Gan+mfkUu lLegoA+oAYfjmmKIpET3hXXY7exCyIh0MqvrgZ+FsJrW+h8/LmFXUQhwDo1eaw1L 5xhUhMjQeIacDGovznCFnWTpAQJQDs5cvR/90IAjQgms7rsffnhtmHq9X0DOG9Oi va3IJWFETfNDB+7kvtZVh/DqWTLAIcnc8FNV6F817wvCw6hHNnu+KEfdMfvjEw+p +OVh409qz8qIddq0HOToeNViOINpdys= -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:27 2025 by rpki-client