$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: Dpw0KCuagGSMHQmevfzSu9ArfaSZflAtR4tmpoyQRqo= Subject key identifier: 93:DF:A9:4E:C2:46:B4:DF:2F:01:9A:C3:AD:DD:08:0C:E6:95:3B:AB Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 61 Signing time: Sat 23 Aug 2025 07:19:40 +0000 Manifest this update: Sat 23 Aug 2025 07:19:40 +0000 Manifest next update: Sat 30 Aug 2025 07:19:39 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: 8hwUDEJibjd/fq4Gp7cKcMFFia1kxPazPRHxxtaxF20=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Aug 23 07:19:40 2025 GMT Not After : Aug 30 07:19:39 2025 GMT Subject: CN=68a96b8c-381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:56:5b:ab:86:c9:d8:a1:dc:ac:5d:c6:8a: 9a:87:cc:5a:cc:64:13:65:ed:39:77:83:a5:70:76: 9a:18:07:18:ed:15:05:10:2b:dd:0e:a1:14:d3:f5: 17:c1:88:91:d2:d2:a4:8b:78:cc:8a:e5:ca:a5:5b: 58:1d:9c:a8:e8:fe:66:25:f7:1d:d2:8a:ea:42:b7: d5:38:b9:13:9a:11:00:9f:3f:1a:68:59:32:7f:56: 3b:cf:07:06:67:31:85:a1:57:18:35:b7:d6:6c:5d: 19:22:13:e7:ae:93:a3:4e:3f:ae:62:1e:27:c0:8d: f1:04:f9:db:f8:5d:e5:b3:cb:39:ab:66:55:33:df: fd:f8:8d:57:05:11:1b:20:1a:43:c7:44:1f:af:5a: dc:4e:b1:43:ed:ea:52:59:b5:97:a6:42:02:7c:29: 8c:69:f8:d7:58:23:ed:71:ab:be:07:02:b3:76:dc: 6c:d5:b2:1b:f9:7f:6b:1a:14:47:c7:a3:14:78:e5: 99:7e:57:95:6f:6f:70:1a:6a:91:72:59:8a:07:7f: 44:12:d1:c9:29:0a:be:3e:62:1e:9d:92:43:58:b5: 2f:e6:dd:fa:74:ef:7a:01:ec:cc:42:bb:70:8b:c7: 6f:74:3b:e6:84:7f:06:97:5b:be:f7:8f:51:d2:41: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DF:A9:4E:C2:46:B4:DF:2F:01:9A:C3:AD:DD:08:0C:E6:95:3B:AB X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:63:bf:da:d3:c0:d0:25:f7:9b:97:bf:88:2b:4c:a9:36:1d: a6:6b:27:c0:db:5b:89:9f:12:36:60:c5:24:10:fd:df:3f:d3: 7a:63:e2:59:a1:c4:5c:dd:7c:14:87:90:50:f7:62:a4:c1:a4: ce:49:d3:13:f0:06:9f:d6:ea:b2:d1:14:25:68:22:88:5a:c2: 4f:9f:e8:06:1e:1b:cd:e6:74:7f:c3:67:8c:1d:67:39:53:70: 68:44:f1:2b:6e:87:16:22:0d:d3:4c:a5:5c:cf:68:b2:67:f9: 27:cf:33:cd:09:f6:09:5d:9e:43:0b:cd:0b:8d:85:83:52:4c: b7:72:44:e6:80:36:fb:d2:c7:de:ac:8a:ba:34:ad:4d:4c:9b: 99:cb:f6:5b:71:a5:01:d0:c9:63:f5:8d:a9:f9:77:c4:45:f3: 16:69:55:85:ec:c5:64:4c:ee:84:52:c8:03:c5:fc:54:37:1a: 85:ff:2f:ad:69:d2:b9:02:f5:e0:fc:7c:24:8a:0c:06:08:fe: d6:25:01:06:f0:7f:2d:f1:14:d0:bd:7e:34:6a:40:3b:76:68: c2:79:a7:44:9c:99:8f:c1:78:9f:c4:69:97:6f:4d:3a:b7:50: 46:62:d8:a6:11:8b:26:9c:a6:09:63:25:24:47:e2:18:65:38: f4:9f:90:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA4MjMwNzE5NDBaFw0yNTA4MzAwNzE5MzlaMBgxFjAUBgNV BAMTDTY4YTk2YjhjLTM4MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3DlZbq4bJ2KHcrF3GipqHzFrMZBNl7Tl3g6VwdpoYBxjtFQUQK90OoRTT9RfB iJHS0qSLeMyK5cqlW1gdnKjo/mYl9x3SiupCt9U4uROaEQCfPxpoWTJ/VjvPBwZn MYWhVxg1t9ZsXRkiE+euk6NOP65iHifAjfEE+dv4XeWzyzmrZlUz3/34jVcFERsg GkPHRB+vWtxOsUPt6lJZtZemQgJ8KYxp+NdYI+1xq74HArN23GzVshv5f2saFEfH oxR45Zl+V5Vvb3AaapFyWYoHf0QS0ckpCr4+Yh6dkkNYtS/m3fp073oB7MxCu3CL x290O+aEfwaXW773j1HSQS3PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk9+pTsJG tN8vAZrDrd0IDOaVO6swHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFjv9rTwNAl95uXv4grTKk2HaZrJ8DbW4mfEjZgxSQQ/d8/03pj4lmh xFzdfBSHkFD3YqTBpM5J0xPwBp/W6rLRFCVoIohawk+f6AYeG83mdH/DZ4wdZzlT cGhE8StuhxYiDdNMpVzPaLJn+SfPM80J9gldnkMLzQuNhYNSTLdyROaANvvSx96s iro0rU1Mm5nL9ltxpQHQyWP1jan5d8RF8xZpVYXsxWRM7oRSyAPF/FQ3GoX/L61p 0rkC9eD8fCSKDAYI/tYlAQbwfy3xFNC9fjRqQDt2aMJ5p0ScmY/BeJ/EaZdvTTq3 UEZi2KYRiyacpgljJSRH4hhlOPSfkHQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:37 2025 by rpki-client