$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: EFprN20eGaB/TR8l+LhNQoJSBfXwKIZv8Qx53wLNyyw= Subject key identifier: 12:6A:A6:E3:6D:C6:37:8C:5F:CF:3D:03:52:F7:34:24:BF:04:23:B9 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 15CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 15CC Signing time: Fri 22 Aug 2025 16:52:42 +0000 Manifest this update: Fri 22 Aug 2025 16:52:42 +0000 Manifest next update: Fri 29 Aug 2025 16:52:42 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: ywteYcMyBU5yb35nfq3ic7WTc+5UvxOoAmMoCZU01eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5580 (0x15cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Aug 22 16:52:42 2025 GMT Not After : Aug 29 16:52:42 2025 GMT Subject: CN=68a8a05a-3201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:78:21:f5:41:6a:28:72:71:1b:65:e6:b8: f1:f5:26:a4:d8:18:51:fe:ed:bc:e5:2a:b6:62:3f: a8:c8:64:17:67:77:19:d9:e9:68:8a:2a:7a:ce:0c: bd:71:5c:37:ea:f3:54:0f:e0:d1:48:87:74:df:48: 5f:6d:a6:4d:18:53:65:3d:9a:46:e5:85:ec:d8:f7: ee:8b:fd:08:ff:ec:25:29:54:fd:a7:16:b2:e6:38: 9c:91:8f:35:03:39:ad:1d:e0:13:d1:7b:fd:9f:87: 8c:ed:9a:df:40:34:e2:78:ef:6e:35:38:2f:1a:eb: 04:b4:73:74:78:2d:8e:a1:5f:59:9d:0e:74:aa:38: 5d:e9:42:2b:16:49:7a:7b:cb:3c:a0:b4:87:32:f9: 19:db:fe:44:18:ad:8a:4f:be:00:89:33:52:3e:44: da:ca:c7:d6:41:e8:30:9a:15:74:db:5b:75:fc:8a: 22:d5:db:0a:86:30:71:32:cb:e2:6c:a5:f6:21:b3: 7d:8e:c6:a7:a5:45:10:20:f5:84:c1:82:ce:77:66: ee:c5:6e:04:73:32:06:72:de:1d:1c:8b:2c:8c:fa: ee:44:42:1a:49:6a:4a:1c:8c:87:32:d6:77:bf:55: 77:81:fa:90:5d:80:19:a7:ea:5c:3f:e1:d2:36:bd: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6A:A6:E3:6D:C6:37:8C:5F:CF:3D:03:52:F7:34:24:BF:04:23:B9 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:dd:9c:cc:5f:c3:87:12:7d:b5:11:e0:65:69:df:1d:e0:5e: 98:a5:2f:95:42:58:dd:29:74:d5:38:60:42:e5:38:06:65:de: ee:72:df:67:54:6f:12:69:7f:ce:55:6c:a4:88:dd:55:51:df: 6d:b9:d4:e1:bf:b6:9c:7c:b1:c7:6b:71:83:ae:10:72:4d:70: 61:b4:91:85:4e:65:d2:d4:1b:e4:5b:42:15:e0:01:8f:16:9e: 17:54:6d:88:ae:78:79:5a:f0:a9:a7:7f:f3:e6:1a:75:4e:47: 9b:82:2f:f6:3b:43:4e:1f:89:3f:12:6f:2d:22:41:e8:c4:40: 1e:08:3b:08:ff:b8:2b:33:e6:f8:fc:c8:f4:a8:45:9e:98:35: cd:78:2a:df:dc:e8:93:20:9e:74:41:13:6e:1d:74:72:d8:31: 96:9c:03:77:78:92:54:e2:02:c5:a5:c2:b6:bf:6b:0c:8f:c7: bc:98:db:f5:d5:e4:e0:63:11:61:26:d3:d0:ff:5d:ff:2d:f8: 3d:a5:47:3c:90:62:da:1f:43:69:b0:0c:d3:4f:4d:62:6c:31: 16:88:7a:d6:99:6b:96:1a:23:e7:a9:52:b5:e4:f5:81:f1:70: 46:29:34:34:ee:e7:ae:70:62:cd:18:ff:b4:12:42:41:ac:a8: 64:04:e2:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUwODIyMTY1MjQyWhcNMjUwODI5MTY1MjQyWjAYMRYwFAYD VQQDEw02OGE4YTA1YS0zMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOt4IfVBaihycRtl5rjx9Sak2BhR/u285Sq2Yj+oyGQXZ3cZ2eloiip6zgy9 cVw36vNUD+DRSId030hfbaZNGFNlPZpG5YXs2Pfui/0I/+wlKVT9pxay5jickY81 AzmtHeAT0Xv9n4eM7ZrfQDTieO9uNTgvGusEtHN0eC2OoV9ZnQ50qjhd6UIrFkl6 e8s8oLSHMvkZ2/5EGK2KT74AiTNSPkTaysfWQegwmhV021t1/Ioi1dsKhjBxMsvi bKX2IbN9jsanpUUQIPWEwYLOd2buxW4EczIGct4dHIssjPruREIaSWpKHIyHMtZ3 v1V3gfqQXYAZp+pcP+HSNr34CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJqpuNt xjeMX889A1L3NCS/BCO5MB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn3ZzMX8OHEn21EeBlad8d4F6YpS+VQljdKXTVOGBC5TgGZd7uct9n VG8SaX/OVWykiN1VUd9tudThv7acfLHHa3GDrhByTXBhtJGFTmXS1BvkW0IV4AGP Fp4XVG2Irnh5WvCpp3/z5hp1Tkebgi/2O0NOH4k/Em8tIkHoxEAeCDsI/7grM+b4 /Mj0qEWemDXNeCrf3OiTIJ50QRNuHXRy2DGWnAN3eJJU4gLFpcK2v2sMj8e8mNv1 1eTgYxFhJtPQ/13/Lfg9pUc8kGLaH0NpsAzTT01ibDEWiHrWmWuWGiPnqVK15PWB 8XBGKTQ07ueucGLNGP+0EkJBrKhkBOK5 -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:58 2025 by rpki-client