$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft File: sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json) Hash identifier: 0hVyKyTXZqW2HZRaVSiY24nfzSDA5z8FVJ3g3XzDaYk= Subject key identifier: 76:49:8D:AA:24:2A:43:AC:A0:DC:DF:54:E1:1B:BB:2D:18:AF:8F:F0 Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC Certificate issuer: /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft Manifest number: 018A Signing time: Sat 23 Aug 2025 03:40:23 +0000 Manifest this update: Sat 23 Aug 2025 03:40:23 +0000 Manifest next update: Sat 30 Aug 2025 03:40:23 +0000 Files and hashes: 1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: 0qSqkfd+N6BDakNKc17Qrcz9GG4Wv57jvYQ82B9xSn8=) 2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: nABejWMWIKR8qcS8KhtXdqBPw2NE9lHrgwgK6ncqFFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC Validity Not Before: Aug 23 03:40:23 2025 GMT Not After : Aug 30 03:40:23 2025 GMT Subject: CN=68a93827-aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:9d:b6:73:aa:63:44:f8:af:5d:5e:d7:24: 04:50:56:fb:c6:db:be:5f:85:eb:1f:de:c0:ce:27: d3:02:83:ea:fc:1d:ce:2e:57:78:26:93:f0:39:0a: 67:cb:81:00:54:38:77:10:6a:10:b9:83:4f:e8:1b: ef:4c:e8:18:fd:a5:a8:e8:f2:8e:fa:7d:b5:3b:4b: 5a:74:7c:ac:8f:e6:cd:48:91:ba:84:c6:f6:32:f2: 75:4a:c4:ce:03:33:4d:b9:28:d3:56:d6:6f:48:8f: 9d:10:37:70:63:b8:dc:21:cc:d7:80:ed:5b:8f:6c: cb:2d:9b:cc:48:a4:d0:ca:87:a4:a7:d1:44:e3:2e: 56:89:80:e1:20:2c:01:19:af:57:9a:b9:da:40:df: fc:34:30:2f:7f:87:39:c2:75:28:c0:23:a2:ba:a9: d0:4d:28:33:b3:86:08:9e:34:0a:75:6c:5c:65:fe: cd:49:76:d8:35:4e:36:02:75:5d:45:15:ad:81:da: 97:53:48:09:f6:1f:61:9d:16:99:9c:b5:11:d3:83: ab:21:39:93:b8:5c:40:77:93:fd:04:13:5b:a1:d7: 44:24:cb:2d:bd:97:d3:5c:45:73:17:ad:c0:5a:9d: 58:10:0a:42:97:97:b3:01:24:1c:6d:46:ee:79:1d: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:49:8D:AA:24:2A:43:AC:A0:DC:DF:54:E1:1B:BB:2D:18:AF:8F:F0 X509v3 Authority Key Identifier: keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:36:4b:cd:7d:75:6e:92:98:8a:56:06:ca:06:da:d7:f1:2a: 5a:d5:78:a4:c0:fc:28:ab:63:ed:55:2d:0b:a8:8a:30:dd:eb: fb:9f:cd:e1:81:fa:5a:fe:c7:84:5d:2c:6d:1e:6b:a9:5f:e7: f6:3e:3b:13:1a:32:20:a9:ef:b2:b1:cc:ec:f9:b5:f9:26:b4: ea:2a:07:ba:ac:e0:03:f7:6c:41:e6:4b:11:96:66:cb:b0:a2: 20:24:b5:a0:2e:01:52:e1:72:da:5f:99:10:2b:97:94:59:3c: 63:68:b7:ec:12:28:44:aa:8e:6e:34:38:87:2a:5d:cd:b8:ac: 22:0d:05:74:45:ce:f4:fa:9c:23:9e:9e:7d:8e:b2:86:a6:7f: cc:10:ca:79:fc:4c:a6:31:1b:75:25:3c:59:e3:65:21:57:98: 30:2d:2b:a0:c1:53:c7:ed:0d:36:54:64:19:fb:99:a1:69:80: 52:b3:64:b7:2c:01:45:82:54:78:d6:bf:30:19:05:4f:fa:de: 96:22:60:bd:18:57:b4:2f:89:30:10:49:7e:44:c8:8d:d5:e2: 36:4d:05:94:9a:a3:4f:a2:8a:5b:77:59:d2:e4:f7:98:71:2f: ee:9e:4a:21:96:b7:d6:15:65:33:98:df:98:aa:9e:a5:76:eb: 23:a9:2e:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFREYxMTAvBgNVBAUTKEIxOTJBRDQ0NERFMUYyREU3NUJFQkExRUVGRDEyMkVF Q0Y3RDc3Q0MwHhcNMjUwODIzMDM0MDIzWhcNMjUwODMwMDM0MDIzWjAYMRYwFAYD VQQDEw02OGE5MzgyNy1hYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXydtnOqY0T4r11e1yQEUFb7xtu+X4XrH97AzifTAoPq/B3OLld4JpPwOQpn y4EAVDh3EGoQuYNP6BvvTOgY/aWo6PKO+n21O0tadHysj+bNSJG6hMb2MvJ1SsTO AzNNuSjTVtZvSI+dEDdwY7jcIczXgO1bj2zLLZvMSKTQyoekp9FE4y5WiYDhICwB Ga9XmrnaQN/8NDAvf4c5wnUowCOiuqnQTSgzs4YInjQKdWxcZf7NSXbYNU42AnVd RRWtgdqXU0gJ9h9hnRaZnLUR04OrITmTuFxAd5P9BBNboddEJMstvZfTXEVzF63A Wp1YEApCl5ezASQcbUbueR2kewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZJjaok KkOsoNzfVOEbuy0Yr4/wMB8GA1UdIwQYMBaAFLGSrURN4fLedb66Hu/RIu7PfXfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREVERi9CMkQ2MDk5RTJC MjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0NTF2cm9lNzlFaTdzOTlk OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaS3RSRTNoOHQ1MXZyb2U3OUVpN3M5OWQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REVERi9CMkQ2MDk5RTJCMjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0 NTF2cm9lNzlFaTdzOTlkOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHNkvNfXVukpiKVgbKBtrX8Spa1XikwPwoq2PtVS0LqIow3ev7n83h gfpa/seEXSxtHmupX+f2PjsTGjIgqe+ysczs+bX5JrTqKge6rOAD92xB5ksRlmbL sKIgJLWgLgFS4XLaX5kQK5eUWTxjaLfsEihEqo5uNDiHKl3NuKwiDQV0Rc70+pwj np59jrKGpn/MEMp5/EymMRt1JTxZ42UhV5gwLSugwVPH7Q02VGQZ+5mhaYBSs2S3 LAFFglR41r8wGQVP+t6WImC9GFe0L4kwEEl+RMiN1eI2TQWUmqNPoopbd1nS5PeY cS/unkohlrfWFWUzmN+Yqp6ldusjqS5a -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:50 2025 by rpki-client