$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: 2QTQkBD9RNQ0PzVExbS6z/CKrsehKFnAle8Ntpq/+HA= Subject key identifier: B6:7A:18:F7:05:BC:99:23:E5:09:19:1B:CB:9F:39:2A:23:F5:04:3F Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: 9F Signing time: Sat 23 Aug 2025 06:36:27 +0000 Manifest this update: Sat 23 Aug 2025 06:36:26 +0000 Manifest next update: Sat 30 Aug 2025 06:36:26 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: 2Wv19ovZUHdQmwtT9scaOibNheeCsvJMgvOFVbmXPPw=) 2: 088C9298981611EFBE510B59C4F9AE02.roa (hash: +mzl+XLmGyaMauQYRfPSe1wPo0jhs14C721ea24fx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Aug 23 06:36:26 2025 GMT Not After : Aug 30 06:36:26 2025 GMT Subject: CN=68a9616a-2593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:20:e8:cc:da:16:8f:ec:e4:34:f9:eb:17: 39:28:44:bd:bf:63:ea:21:0b:28:7c:55:9a:89:b7: 3e:84:05:e5:ae:d0:d1:45:76:28:a2:4b:53:4d:23: 70:44:81:55:34:64:44:0f:c9:b6:ce:b4:e7:6a:59: d1:24:ac:ff:07:f4:3b:a0:ab:53:92:45:dd:b6:06: 6d:5f:e6:cf:89:c4:0f:da:cf:dd:20:70:02:d8:28: da:a7:6b:7b:a9:8a:6c:32:a6:eb:85:08:6e:71:06: 04:67:ae:88:44:bb:89:28:fb:8b:0d:19:aa:e1:09: aa:e1:85:6b:9f:0e:ae:a0:29:26:f4:ad:41:6a:eb: 2a:23:7d:19:3b:e9:4f:bf:57:22:3b:12:48:09:f8: 8e:41:9e:00:89:e9:9e:0e:f1:98:f7:a2:5a:bc:b5: b5:af:14:11:ef:18:84:2c:e1:f6:c1:de:25:7f:2a: 23:46:3e:e6:fd:20:83:56:c0:73:10:87:72:02:7d: ae:4d:aa:61:03:2c:57:d6:10:d7:bd:cb:49:9b:ec: 29:3e:91:cc:6f:58:bb:6a:73:12:9e:87:70:39:c1: 59:9c:b4:b2:2a:b4:4a:66:f1:e4:c1:d1:fd:20:f0: b2:c6:a0:ff:a4:04:28:9e:f6:44:40:ed:17:3b:63: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7A:18:F7:05:BC:99:23:E5:09:19:1B:CB:9F:39:2A:23:F5:04:3F X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:44:73:29:0e:0c:27:56:2a:71:2c:74:57:ff:c7:d8:c0:19: 8e:78:67:76:44:85:f6:37:27:08:1d:35:4a:8d:a3:a2:c3:87: 49:ef:0c:1c:57:0b:b3:96:9e:af:5f:f5:34:98:a1:92:07:20: 52:96:6a:27:b9:e2:5b:39:41:1d:8e:4b:52:29:ea:28:b5:2f: a9:1d:60:40:53:d4:ee:bc:1d:ff:7f:4f:09:32:5b:05:dc:84: a7:14:8d:cd:bf:68:10:a4:1b:7e:fa:87:44:22:f6:fe:9c:dc: e5:47:3d:c1:79:cc:05:5f:35:54:2c:b8:34:68:29:8e:59:3f: 6c:e5:77:1f:0d:d8:a2:28:e5:1c:8e:38:ed:ed:17:11:24:c7: c4:2d:e2:39:61:fa:17:d5:28:dc:d6:21:46:61:67:52:1a:55: 68:56:11:35:0b:19:71:53:8d:69:54:70:85:d7:c1:22:63:9c: 51:b1:2b:96:56:8b:ed:7a:8e:ed:c8:0f:4f:42:cf:75:f8:7a: 28:5e:c9:a9:5d:69:30:37:c5:9a:8e:ee:ec:35:99:45:ac:09: 41:11:24:b7:d1:4a:22:73:b2:2d:37:6a:1c:82:92:58:23:5b: 7b:4d:43:32:23:a6:8a:e7:91:94:7c:f2:15:17:25:c9:5e:15: 7a:70:23:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjUwODIzMDYzNjI2WhcNMjUwODMwMDYzNjI2WjAYMRYwFAYD VQQDEw02OGE5NjE2YS0yNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0N0g6MzaFo/s5DT56xc5KES9v2PqIQsofFWaibc+hAXlrtDRRXYooktTTSNw RIFVNGRED8m2zrTnalnRJKz/B/Q7oKtTkkXdtgZtX+bPicQP2s/dIHAC2Cjap2t7 qYpsMqbrhQhucQYEZ66IRLuJKPuLDRmq4Qmq4YVrnw6uoCkm9K1BausqI30ZO+lP v1ciOxJICfiOQZ4AiemeDvGY96JavLW1rxQR7xiELOH2wd4lfyojRj7m/SCDVsBz EIdyAn2uTaphAyxX1hDXvctJm+wpPpHMb1i7anMSnodwOcFZnLSyKrRKZvHkwdH9 IPCyxqD/pAQonvZEQO0XO2Oj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ6GPcF vJkj5QkZG8ufOSoj9QQ/MB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5RHMpDgwnVipxLHRX/8fYwBmOeGd2RIX2NycIHTVKjaOiw4dJ7wwc Vwuzlp6vX/U0mKGSByBSlmonueJbOUEdjktSKeootS+pHWBAU9TuvB3/f08JMlsF 3ISnFI3Nv2gQpBt++odEIvb+nNzlRz3BecwFXzVULLg0aCmOWT9s5XcfDdiiKOUc jjjt7RcRJMfELeI5YfoX1Sjc1iFGYWdSGlVoVhE1CxlxU41pVHCF18EiY5xRsSuW Vovteo7tyA9PQs91+HooXsmpXWkwN8Waju7sNZlFrAlBESS30Uoic7ItN2ocgpJY I1t7TUMyI6aK55GUfPIVFyXJXhV6cCO6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:03 2025 by rpki-client