$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: W4D6oUTNE+ZLovLFDjELIyUDmjNEwBQQzEnP6QmSnic= Subject key identifier: 5F:6E:95:5D:3B:BD:EB:D0:F2:6D:86:69:6F:2A:9F:9D:8B:D2:6B:04 Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 0119 Signing time: Sat 23 Aug 2025 04:58:55 +0000 Manifest this update: Sat 23 Aug 2025 04:58:55 +0000 Manifest next update: Sat 30 Aug 2025 04:58:55 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: ANOGUaMeJPyVzGScT9Vo3rQB5ZnWZbMuTWTwoqbJPQ0=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: Aug 23 04:58:55 2025 GMT Not After : Aug 30 04:58:55 2025 GMT Subject: CN=68a94a8f-78a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:da:76:54:91:8b:f3:a4:33:59:99:f5:0e: b7:c6:a3:aa:42:c5:d0:be:53:ec:26:91:b2:73:45: e2:3f:50:d2:39:4f:da:6e:9c:73:3d:34:79:c3:49: d3:d3:70:a8:08:81:3f:f4:59:fa:38:f3:8b:2a:d8: 64:0a:21:54:7c:8c:18:19:79:d9:e8:37:d2:93:e4: fb:78:cc:00:0a:20:83:01:25:88:ea:a2:2f:93:44: db:c0:89:4a:9a:0f:e4:b5:e9:ad:d9:45:83:d5:84: ca:a4:d2:3a:32:9c:75:15:3c:54:25:b4:e3:65:67: 01:2d:a9:f0:5a:d7:2d:fe:ad:60:90:c6:2b:77:68: 40:ad:33:a3:72:2b:cd:a5:cd:11:c3:fc:6f:ec:d3: 39:b0:2f:79:1a:fe:25:2c:a9:e8:ce:58:78:e3:9e: b3:a4:1c:94:a3:0f:d8:22:94:68:65:0b:19:0e:c9: ab:df:d0:b8:f3:24:ba:2c:ef:fe:82:d1:26:97:b8: 91:df:ac:95:c4:d4:54:5e:39:fd:eb:c7:db:91:cd: 85:96:a2:9e:b3:59:39:43:31:74:54:39:0b:e6:52: 2e:d1:70:3c:70:12:16:48:27:92:bb:64:26:9d:f3: 41:20:aa:70:ec:b3:1b:13:d3:01:32:d7:b3:35:51: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6E:95:5D:3B:BD:EB:D0:F2:6D:86:69:6F:2A:9F:9D:8B:D2:6B:04 X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f5:7b:4b:ea:c1:89:57:03:a3:95:68:a2:be:8c:36:8e:c0: e8:9f:72:83:6f:d1:96:0a:50:7e:ba:4f:4a:51:1c:96:3d:69: 1b:b8:ed:05:86:8b:d8:25:79:c3:2d:39:eb:2b:b3:31:0b:b1: 79:aa:72:c2:db:e5:b7:b0:c0:3b:76:d7:40:56:f8:ec:f5:b0: 55:a6:d6:98:df:fc:0e:9c:b3:9b:33:42:bd:a0:bb:97:4c:ae: 5e:f7:58:8c:50:43:37:b7:98:a4:05:9b:7d:3a:57:45:19:f3: 91:01:9d:7e:cf:84:ce:16:3e:8e:12:71:af:fc:a3:c7:25:1e: 8e:a5:98:90:2d:43:8b:76:04:9e:98:79:37:89:db:6c:bb:ab: c4:a6:a7:df:89:96:41:68:ae:0d:0d:d7:90:a5:f3:40:04:13: 05:67:ac:67:16:00:89:45:69:0a:ed:31:ea:3d:df:21:9d:80: bf:f1:13:da:21:da:f5:45:18:c4:b2:9c:c2:35:39:dc:8d:e9: b1:1c:9d:f4:e4:5e:f5:2e:63:ae:21:2e:c9:e3:95:44:22:ad: 30:71:2d:39:e7:d6:94:e9:3f:9f:fb:95:20:1a:1a:71:fc:41: 33:e1:54:8e:58:5a:40:05:d2:99:e1:80:ad:32:16:48:91:b3: ff:80:0f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjUwODIzMDQ1ODU1WhcNMjUwODMwMDQ1ODU1WjAYMRYwFAYD VQQDEw02OGE5NGE4Zi03OGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKTadlSRi/OkM1mZ9Q63xqOqQsXQvlPsJpGyc0XiP1DSOU/abpxzPTR5w0nT 03CoCIE/9Fn6OPOLKthkCiFUfIwYGXnZ6DfSk+T7eMwACiCDASWI6qIvk0TbwIlK mg/ktemt2UWD1YTKpNI6Mpx1FTxUJbTjZWcBLanwWtct/q1gkMYrd2hArTOjcivN pc0Rw/xv7NM5sC95Gv4lLKnozlh4456zpByUow/YIpRoZQsZDsmr39C48yS6LO/+ gtEml7iR36yVxNRUXjn968fbkc2FlqKes1k5QzF0VDkL5lIu0XA8cBIWSCeSu2Qm nfNBIKpw7LMbE9MBMtezNVEqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9ulV07 vevQ8m2GaW8qn52L0msEMB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi9XtL6sGJVwOjlWiivow2jsDon3KDb9GWClB+uk9KURyWPWkbuO0F hovYJXnDLTnrK7MxC7F5qnLC2+W3sMA7dtdAVvjs9bBVptaY3/wOnLObM0K9oLuX TK5e91iMUEM3t5ikBZt9OldFGfORAZ1+z4TOFj6OEnGv/KPHJR6OpZiQLUOLdgSe mHk3idtsu6vEpqffiZZBaK4NDdeQpfNABBMFZ6xnFgCJRWkK7THqPd8hnYC/8RPa Idr1RRjEspzCNTncjemxHJ305F71LmOuIS7J45VEIq0wcS0559aU6T+f+5UgGhpx /EEz4VSOWFpABdKZ4YCtMhZIkbP/gA/G -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:44 2025 by rpki-client