$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: ndat7pz1a0h3wVJ6qsheIZJIENQ63wjPxP6UU4ocg+A= Subject key identifier: 16:3D:6E:65:65:13:AD:20:A6:D7:7D:AD:BD:EB:40:86:39:53:88:E2 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0891 Signing time: Fri 22 Aug 2025 20:42:50 +0000 Manifest this update: Fri 22 Aug 2025 20:42:50 +0000 Manifest next update: Fri 29 Aug 2025 20:42:50 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: IxxMthnbylsZfsxKvzkK7i+Qgm3Oi/NyA3/DiCAGJK4=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Aug 22 20:42:50 2025 GMT Not After : Aug 29 20:42:50 2025 GMT Subject: CN=68a8d64a-7231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:22:ed:86:bf:03:2f:a4:54:e2:c7:f9:47: de:fe:d0:d0:5f:f5:7b:4b:94:a2:65:21:42:57:5c: 87:fe:43:13:90:20:7a:77:f9:3d:ce:7c:fb:94:c5: 7a:5e:b1:99:85:88:c3:7b:3a:fb:3e:04:df:62:05: e6:b2:50:22:54:f6:f8:28:53:2d:91:97:b7:df:30: 57:c9:c7:2c:0e:5f:ec:35:87:18:15:df:99:f2:b3: 3b:26:25:b4:2a:0a:0c:d5:68:63:01:d4:5c:8f:c8: 8a:5f:13:60:49:30:4e:65:81:7f:b9:c4:2f:1b:b0: da:f8:9d:28:24:8c:d1:68:65:68:6b:d2:5e:38:dd: 1c:ab:c0:1d:5b:38:80:0d:5e:17:d2:f2:2a:f4:12: bc:bf:10:84:a3:43:ca:36:42:f2:e5:21:09:69:a6: 10:e1:15:18:e7:42:62:d8:51:bb:14:f5:8b:39:47: e2:7d:68:07:1c:34:27:69:fe:0a:fa:cb:9b:ec:bf: af:80:6b:c8:eb:9b:33:7b:f6:4a:9f:f8:92:36:31: dd:aa:0d:7b:19:d0:24:6e:e7:9f:2c:3b:35:39:9f: 16:e9:c5:0d:36:fa:3a:46:45:ce:f6:78:5d:15:da: 8f:07:b4:34:c1:26:0e:69:40:34:f4:b8:6c:e5:7a: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:6E:65:65:13:AD:20:A6:D7:7D:AD:BD:EB:40:86:39:53:88:E2 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:90:e5:e9:8e:fc:32:ac:41:29:bb:91:90:3d:59:45:8a:f5: 57:4f:7d:e4:7a:af:f7:01:23:e5:3e:fa:5a:87:54:63:4f:ce: ae:63:b0:3c:3f:b9:66:de:8b:bf:56:ec:58:1a:c1:38:d5:f2: c4:0e:89:80:46:79:3b:73:4d:0a:24:03:a1:50:c7:2f:c7:4f: 2b:b4:96:85:47:67:aa:5c:fb:1a:1c:33:8d:05:99:d2:1a:2b: 5e:bd:eb:c7:04:c4:41:43:b1:3b:12:60:a8:11:00:2c:56:74: b9:9e:8e:81:c8:51:4f:8e:c8:de:f8:ed:ae:44:af:0e:eb:56: f7:02:06:65:db:90:39:17:47:dc:52:fd:81:58:35:6a:4a:f9: bb:b5:94:55:d1:30:45:23:3e:d6:c6:20:77:17:9f:b5:18:44: f5:0f:93:b7:44:cd:91:59:56:9d:39:4c:f5:fd:35:c5:09:8a: 6c:5a:be:cf:62:99:7b:9c:c0:40:b2:b7:1c:03:73:07:20:19: 1e:e3:3d:d8:5c:4d:af:32:54:41:51:be:76:52:d6:59:70:fc: a6:ab:fb:51:6b:00:b8:23:f6:04:f4:64:32:7f:10:57:8f:34: 94:3a:e4:09:cf:87:4b:fc:dc:9f:5f:57:c0:2c:98:f1:25:73: f2:59:cb:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwODIyMjA0MjUwWhcNMjUwODI5MjA0MjUwWjAYMRYwFAYD VQQDEw02OGE4ZDY0YS03MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02ci7Ya/Ay+kVOLH+Ufe/tDQX/V7S5SiZSFCV1yH/kMTkCB6d/k9znz7lMV6 XrGZhYjDezr7PgTfYgXmslAiVPb4KFMtkZe33zBXyccsDl/sNYcYFd+Z8rM7JiW0 KgoM1WhjAdRcj8iKXxNgSTBOZYF/ucQvG7Da+J0oJIzRaGVoa9JeON0cq8AdWziA DV4X0vIq9BK8vxCEo0PKNkLy5SEJaaYQ4RUY50Ji2FG7FPWLOUfifWgHHDQnaf4K +sub7L+vgGvI65sze/ZKn/iSNjHdqg17GdAkbuefLDs1OZ8W6cUNNvo6RkXO9nhd FdqPB7Q0wSYOaUA09Lhs5XoX4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY9bmVl E60gptd9rb3rQIY5U4jiMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKkOXpjvwyrEEpu5GQPVlFivVXT33keq/3ASPlPvpah1RjT86uY7A8 P7lm3ou/VuxYGsE41fLEDomARnk7c00KJAOhUMcvx08rtJaFR2eqXPsaHDONBZnS GitevevHBMRBQ7E7EmCoEQAsVnS5no6ByFFPjsje+O2uRK8O61b3AgZl25A5F0fc Uv2BWDVqSvm7tZRV0TBFIz7WxiB3F5+1GET1D5O3RM2RWVadOUz1/TXFCYpsWr7P Ypl7nMBAsrccA3MHIBke4z3YXE2vMlRBUb52UtZZcPymq/tRawC4I/YE9GQyfxBX jzSUOuQJz4dL/NyfX1fALJjxJXPyWcvf -----END CERTIFICATE-----Generated at Sun Aug 24 06:45:48 2025 by rpki-client