$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: XyS1jtD+rpeSFHMjXH6m9sjbF/urbA0hEeMg33MRYEc= Subject key identifier: F8:EB:6A:A3:86:85:98:26:7C:22:33:CF:AB:4A:86:8A:43:D7:62:A0 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 029D Signing time: Sat 23 Aug 2025 01:49:07 +0000 Manifest this update: Sat 23 Aug 2025 01:49:06 +0000 Manifest next update: Sat 30 Aug 2025 01:49:06 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: 0FuSqWnJVhc6mLXRn9V8pDT6kd90Ja36VC5unHCYVBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Aug 23 01:49:06 2025 GMT Not After : Aug 30 01:49:06 2025 GMT Subject: CN=68a91e12-4c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:21:b8:75:03:8f:d9:b9:ea:f7:3d:45:9e: dd:93:20:83:e4:22:88:72:59:79:4e:3f:ef:87:71: 05:12:b1:3a:00:4e:68:b8:c5:c5:96:9b:63:54:c9: 01:3c:d6:9e:2e:d3:c8:7b:1d:4a:96:0f:82:8c:8f: 0c:6c:a3:4b:40:15:a7:fa:67:00:8a:2c:e8:85:b0: a8:41:5a:55:bb:ea:1c:24:7f:44:6c:29:72:6e:80: cd:13:6d:3b:b3:cb:6d:da:67:db:21:cc:a9:d8:fd: 52:8c:b1:46:f6:bb:5e:6b:10:7f:6b:e8:15:ed:52: bd:d4:61:6a:ba:71:03:0a:a6:c5:20:fe:f3:29:a9: b8:0b:7a:1b:d9:23:0a:74:2f:33:b6:78:83:2f:93: 95:1c:c7:a4:4a:c6:56:a3:23:97:3e:34:3a:59:ef: f4:23:08:b8:e5:06:da:81:74:fc:62:cf:e0:88:1a: b7:84:1d:2e:81:ab:04:98:1b:20:a5:e9:f3:03:00: e7:37:b6:1f:bc:09:33:86:2d:78:99:13:18:02:29: 3a:31:bd:4c:a3:6c:b3:09:cd:85:88:6c:43:db:e8: 78:11:79:f8:52:39:54:ef:c9:d8:cb:c3:de:39:06: 75:c8:61:c9:92:f1:61:82:a4:79:5c:eb:12:91:6d: 25:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:6A:A3:86:85:98:26:7C:22:33:CF:AB:4A:86:8A:43:D7:62:A0 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:73:a4:91:32:fb:b4:da:c2:0d:90:c4:a7:ad:76:4d:14:48: 8c:85:e0:06:0c:60:8d:fe:74:7d:a8:2b:58:ae:d9:36:9f:03: 17:87:63:9b:3b:79:10:9c:46:22:57:de:77:f0:b1:21:c6:ed: 1f:44:16:e0:c0:04:82:b9:19:f8:56:48:dc:18:68:e8:fd:51: a0:ff:55:fd:26:d9:fd:d0:ca:8c:74:c0:7e:7e:c1:a1:0c:be: e9:93:c2:46:6d:e4:75:b5:d5:4c:aa:dc:5c:2b:c4:f6:7e:f2: b4:26:98:c0:e7:a8:0b:4e:6a:01:d8:76:19:de:fd:c7:9f:b2: c4:14:cb:0a:d2:22:ef:92:b5:ef:18:b0:6d:57:0d:b7:13:16: 34:37:26:11:c4:79:67:cf:47:dc:21:9a:b6:a8:a6:57:e9:13: 72:00:9d:1f:8f:52:3c:dd:e8:2f:bd:6e:67:94:b6:1b:34:fe: f3:c4:d5:eb:5d:94:fe:8d:99:65:3f:fe:44:b0:41:77:84:2d: dd:a9:62:50:b4:13:60:b2:ff:a5:6e:88:63:c3:90:3a:c4:c5: 7a:c1:75:a3:a7:5f:95:b5:db:c4:da:f4:b8:18:6b:95:de:0a: 08:80:bb:c1:89:90:72:a3:0a:f0:83:be:be:e5:bb:eb:53:57: 32:8e:10:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwODIzMDE0OTA2WhcNMjUwODMwMDE0OTA2WjAYMRYwFAYD VQQDEw02OGE5MWUxMi00YzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZMhuHUDj9m56vc9RZ7dkyCD5CKIcll5Tj/vh3EFErE6AE5ouMXFlptjVMkB PNaeLtPIex1Klg+CjI8MbKNLQBWn+mcAiizohbCoQVpVu+ocJH9EbClyboDNE207 s8tt2mfbIcyp2P1SjLFG9rteaxB/a+gV7VK91GFqunEDCqbFIP7zKam4C3ob2SMK dC8ztniDL5OVHMekSsZWoyOXPjQ6We/0Iwi45QbagXT8Ys/giBq3hB0ugasEmBsg penzAwDnN7YfvAkzhi14mRMYAik6Mb1Mo2yzCc2FiGxD2+h4EXn4UjlU78nYy8Pe OQZ1yGHJkvFhgqR5XOsSkW0lWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjraqOG hZgmfCIzz6tKhopD12KgMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtc6SRMvu02sINkMSnrXZNFEiMheAGDGCN/nR9qCtYrtk2nwMXh2Ob O3kQnEYiV9538LEhxu0fRBbgwASCuRn4VkjcGGjo/VGg/1X9Jtn90MqMdMB+fsGh DL7pk8JGbeR1tdVMqtxcK8T2fvK0JpjA56gLTmoB2HYZ3v3Hn7LEFMsK0iLvkrXv GLBtVw23ExY0NyYRxHlnz0fcIZq2qKZX6RNyAJ0fj1I83egvvW5nlLYbNP7zxNXr XZT+jZllP/5EsEF3hC3dqWJQtBNgsv+lbohjw5A6xMV6wXWjp1+VtdvE2vS4GGuV 3goIgLvBiZByowrwg76+5bvrU1cyjhBE -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:15 2025 by rpki-client