$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: vwgF8HM91XxJJ9XHtJq+0zRvz1Cp7yXSE/IjWj2Ac7Q= Subject key identifier: 05:CB:98:30:B0:6E:BC:15:8F:9D:58:CC:F0:D7:50:85:BB:6E:A1:0E Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 34 Signing time: Sat 23 Aug 2025 07:51:12 +0000 Manifest this update: Sat 23 Aug 2025 07:51:12 +0000 Manifest next update: Sat 30 Aug 2025 07:51:12 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: mAfoNeNKMCZa9TMCDnA3+XY7uzeP5zhzqLb5vum87lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Aug 23 07:51:12 2025 GMT Not After : Aug 30 07:51:12 2025 GMT Subject: CN=68a972f0-f865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:6e:d3:8e:86:6d:43:d4:ed:e6:60:e0:2a: 0e:85:96:1f:9e:fe:2b:3c:0b:11:10:bf:17:dc:15: 87:dd:d6:76:39:7e:53:c1:89:95:0a:c1:1b:7f:80: ed:e0:d2:a3:4e:19:34:bc:99:68:3e:3d:36:fa:e4: 57:e0:53:bf:b6:dc:57:a7:a0:67:f7:3f:61:09:24: 35:29:cf:20:ef:54:46:c0:c1:0d:ed:ea:60:fd:5b: fe:60:18:c9:eb:7b:39:c0:20:a5:e4:0b:f7:04:4b: cf:11:f2:84:f8:84:ae:ad:56:00:e2:d6:d5:3b:1d: 06:51:72:bb:14:af:45:2c:75:d4:c3:cc:ea:e9:96: 49:58:88:b2:87:5d:01:0f:3a:25:2f:c1:2a:01:97: e5:a8:40:ff:5d:ec:3d:78:c8:2e:bd:6c:da:bd:09: 85:1d:a4:71:c3:44:88:f4:8a:e7:91:03:97:88:85: bd:34:54:a5:ab:4b:c1:26:88:3e:d3:47:2f:38:8f: dd:18:4f:61:7c:10:02:19:d5:f6:2f:4a:67:bb:5d: 17:20:32:fa:39:8f:36:49:8b:da:da:97:20:cc:7b: 2e:38:50:e7:d7:ac:c9:7d:bd:63:3d:0c:26:34:aa: eb:d0:cc:41:3a:a0:65:d9:bf:46:18:61:08:7c:d5: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CB:98:30:B0:6E:BC:15:8F:9D:58:CC:F0:D7:50:85:BB:6E:A1:0E X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:46:a4:30:bb:4c:c7:02:72:aa:01:cb:bb:bb:6b:1b:16:c8: ba:c0:e9:ea:aa:ea:03:3a:49:dd:5b:7b:07:11:b2:65:6c:fa: d6:e0:29:b6:29:19:d7:92:8b:ed:af:fb:ed:11:42:de:af:42: 1c:75:1f:28:e8:98:28:60:ed:08:92:be:03:c8:67:62:85:4e: 89:11:f2:0d:c3:a0:f2:d2:32:55:a2:75:51:24:ee:5c:34:f4: 92:74:5a:68:d2:26:bb:ef:bc:a7:ef:89:36:ca:50:32:f2:99: 2a:31:1d:e4:a3:5b:fe:e9:e1:99:ac:32:ef:8a:f5:25:87:c7: 40:f3:17:20:17:aa:0a:43:1b:f4:b2:48:73:97:6e:15:18:82: 63:a3:39:04:33:69:3d:3d:c2:54:a8:6b:4e:26:ba:61:ee:ec: 2a:fb:76:d3:40:5f:c1:95:8e:e7:4e:2e:f3:3a:67:79:c6:ae: 61:74:60:c5:1a:eb:59:34:3d:9a:53:86:9a:4a:ae:14:e7:f7: 12:69:17:d5:c3:d1:fe:4e:c9:18:db:1d:45:85:26:47:b5:cc: ce:45:9f:47:25:bc:61:e2:2d:68:40:4b:ef:c3:e6:1d:a2:19: b6:7b:d8:1b:3f:d5:ac:47:2b:bc:cb:88:7e:2a:31:83:c6:cf: d3:1f:70:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTA4MjMwNzUxMTJaFw0yNTA4MzAwNzUxMTJaMBgxFjAUBgNV BAMTDTY4YTk3MmYwLWY4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKpG7TjoZtQ9Tt5mDgKg6Flh+e/is8CxEQvxfcFYfd1nY5flPBiZUKwRt/gO3g 0qNOGTS8mWg+PTb65FfgU7+23FenoGf3P2EJJDUpzyDvVEbAwQ3t6mD9W/5gGMnr eznAIKXkC/cES88R8oT4hK6tVgDi1tU7HQZRcrsUr0UsddTDzOrplklYiLKHXQEP OiUvwSoBl+WoQP9d7D14yC69bNq9CYUdpHHDRIj0iueRA5eIhb00VKWrS8EmiD7T Ry84j90YT2F8EAIZ1fYvSme7XRcgMvo5jzZJi9ralyDMey44UOfXrMl9vWM9DCY0 quvQzEE6oGXZv0YYYQh81az/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBcuYMLBu vBWPnVjM8NdQhbtuoQ4wHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhGpDC7TMcCcqoBy7u7axsWyLrA6eqq6gM6Sd1bewcRsmVs+tbgKbYp GdeSi+2v++0RQt6vQhx1HyjomChg7QiSvgPIZ2KFTokR8g3DoPLSMlWidVEk7lw0 9JJ0WmjSJrvvvKfviTbKUDLymSoxHeSjW/7p4ZmsMu+K9SWHx0DzFyAXqgpDG/Sy SHOXbhUYgmOjOQQzaT09wlSoa04mumHu7Cr7dtNAX8GVjudOLvM6Z3nGrmF0YMUa 61k0PZpThppKrhTn9xJpF9XD0f5OyRjbHUWFJke1zM5Fn0clvGHiLWhAS+/D5h2i GbZ72Bs/1axHK7zLiH4qMYPGz9MfcFM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:12 2025 by rpki-client