$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: iqhh+FtVTwu+m3Ll1vwWUqiKzkaH67HDzkYuFyDXu80= Subject key identifier: 24:56:A4:9B:D4:84:CC:1A:FE:43:B0:FA:ED:6A:6B:8E:90:9C:B0:4F Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: 011F Signing time: Sat 23 Aug 2025 04:53:12 +0000 Manifest this update: Sat 23 Aug 2025 04:53:12 +0000 Manifest next update: Sat 30 Aug 2025 04:53:12 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: ZTFo7hk4TAcCORo3t9OG9a6C1p13DGkN51C3bpMksT0=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Aug 23 04:53:12 2025 GMT Not After : Aug 30 04:53:12 2025 GMT Subject: CN=68a94938-e70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:46:6f:2c:34:dd:89:4c:46:3c:18:49:32: b9:a7:1f:18:90:c7:57:ee:f4:5e:53:cf:9a:5e:ec: 36:0f:f3:9f:87:09:0f:a6:3a:18:f1:d0:2e:35:f6: 18:cc:ce:e5:03:f1:ab:2f:f9:b0:a8:ff:8e:35:45: f5:ea:51:01:1f:8a:71:9c:e6:53:70:80:0c:71:b1: 07:6e:67:59:d6:3e:c6:0e:ed:50:b2:8f:d6:dc:cf: ae:73:c9:eb:cb:20:3c:76:35:d0:33:f7:8f:c2:bc: e0:6e:58:51:41:65:ae:65:9f:e4:33:1f:9c:24:b1: aa:73:03:21:92:f3:18:a3:d5:44:3f:a7:cf:eb:71: 0d:72:86:0b:76:b8:14:ac:e6:b9:ad:73:57:cb:2f: 60:06:c8:ef:77:e3:b1:a6:b5:69:25:8a:e4:27:86: c5:a0:43:1b:06:6e:85:97:8d:e7:fa:e4:8a:c4:01: 9f:c8:43:97:30:90:46:c5:c9:f8:e2:f8:0d:65:3c: 62:29:4e:e4:dc:42:b0:ad:fa:17:3d:6b:be:4a:fe: 56:d8:82:d8:fa:b4:a7:81:56:e5:09:35:b4:9b:1e: 0e:2c:2e:41:86:e8:6e:ab:ad:81:fc:43:99:89:3f: e1:7e:06:20:57:3d:ab:b8:7c:c1:7b:e4:0a:0a:58: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:56:A4:9B:D4:84:CC:1A:FE:43:B0:FA:ED:6A:6B:8E:90:9C:B0:4F X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8f:05:08:d8:85:46:c7:0e:eb:08:00:5d:68:dc:7e:12:e4: c8:c3:27:d4:ff:57:ab:bb:44:1d:93:b7:cb:98:c0:9d:b1:ed: 22:8b:a4:a7:5f:e5:63:ad:66:2d:d9:a6:ad:d2:a0:db:e6:17: 2c:bd:92:17:1e:ce:67:43:ed:6c:13:d0:0c:0b:e8:21:12:85: e2:20:6f:60:06:04:21:b6:4e:78:28:eb:7b:38:95:04:07:5c: 22:77:cf:26:0a:53:c7:8d:21:a7:75:4e:5c:83:a6:2f:30:f0: d8:4d:f2:27:4e:e3:de:59:a6:c2:b1:e1:da:69:33:0e:9d:07: 40:91:4d:84:58:f1:f6:6b:94:12:49:6d:fc:31:46:cd:28:b6: c7:5d:ba:d5:d7:aa:eb:ba:db:2f:c2:33:84:b9:93:00:cd:be: d3:d4:74:7d:00:e2:66:50:7a:6f:40:6c:bf:d9:46:3a:46:fe: 35:da:48:fc:a9:3b:69:d3:52:f2:10:ed:41:33:f9:6c:20:16: 76:0f:41:d3:4d:28:28:9b:05:d1:ed:67:d6:dd:65:7d:88:54: 01:c9:e7:cd:b6:7c:9f:94:f3:04:b6:27:bb:59:99:75:db:f8: 7f:06:e4:46:e4:38:df:a5:46:f8:c4:0a:ba:fa:76:92:fc:1a: 78:67:27:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUwODIzMDQ1MzEyWhcNMjUwODMwMDQ1MzEyWjAYMRYwFAYD VQQDEw02OGE5NDkzOC1lNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvntGbyw03YlMRjwYSTK5px8YkMdX7vReU8+aXuw2D/OfhwkPpjoY8dAuNfYY zM7lA/GrL/mwqP+ONUX16lEBH4pxnOZTcIAMcbEHbmdZ1j7GDu1Qso/W3M+uc8nr yyA8djXQM/ePwrzgblhRQWWuZZ/kMx+cJLGqcwMhkvMYo9VEP6fP63ENcoYLdrgU rOa5rXNXyy9gBsjvd+OxprVpJYrkJ4bFoEMbBm6Fl43n+uSKxAGfyEOXMJBGxcn4 4vgNZTxiKU7k3EKwrfoXPWu+Sv5W2ILY+rSngVblCTW0mx4OLC5Bhuhuq62B/EOZ iT/hfgYgVz2ruHzBe+QKCliq/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRWpJvU hMwa/kOw+u1qa46QnLBPMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8jwUI2IVGxw7rCABdaNx+EuTIwyfU/1eru0Qdk7fLmMCdse0ii6Sn X+VjrWYt2aat0qDb5hcsvZIXHs5nQ+1sE9AMC+ghEoXiIG9gBgQhtk54KOt7OJUE B1wid88mClPHjSGndU5cg6YvMPDYTfInTuPeWabCseHaaTMOnQdAkU2EWPH2a5QS SW38MUbNKLbHXbrV16rrutsvwjOEuZMAzb7T1HR9AOJmUHpvQGy/2UY6Rv412kj8 qTtp01LyEO1BM/lsIBZ2D0HTTSgomwXR7WfW3WV9iFQByefNtnyflPMEtie7WZl1 2/h/BuRG5DjfpUb4xAq6+naS/Bp4Zycz -----END CERTIFICATE-----Generated at Sun Aug 24 00:54:30 2025 by rpki-client