$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: Kw9bbKv/zUXhS9lcO9mor2aQvVdHL1k4oT10aKjImZw= Subject key identifier: 9C:E7:74:54:B8:E1:04:68:8E:03:85:66:2C:CD:74:74:AE:FE:64:30 Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 092B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 092A Signing time: Fri 22 Aug 2025 20:21:49 +0000 Manifest this update: Fri 22 Aug 2025 20:21:49 +0000 Manifest next update: Fri 29 Aug 2025 20:21:49 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: tIGXBYbj/6YVo8PoeOTQkDj9w+omVwhIWZV7akgKL/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2347 (0x92b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Aug 22 20:21:49 2025 GMT Not After : Aug 29 20:21:49 2025 GMT Subject: CN=68a8d15d-a379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:2a:ae:83:a1:b4:37:c6:59:53:65:96:7a: f9:c3:03:94:33:36:b2:9d:44:87:d7:3a:55:3c:fa: 7f:2f:e1:2f:07:4d:a1:26:fe:9b:c4:d0:70:97:89: 13:01:fb:a6:61:d2:10:d4:5a:f3:9b:56:70:07:dc: 7c:3c:9f:49:0f:2f:09:73:e0:9d:46:c8:b7:d9:c8: b8:26:30:c3:74:b5:49:ca:1d:ed:f5:8f:c0:ab:04: e5:a6:c8:3b:12:1f:91:0e:20:6d:49:24:4c:f9:b2: 8a:57:21:8c:09:1f:4a:6e:8d:cb:7d:98:52:11:4e: 4e:11:ed:51:8a:1b:9e:40:16:16:a3:1c:35:f2:88: 74:8d:79:04:5d:ec:dd:f9:e6:66:20:e5:cc:15:5e: 06:bc:dc:65:45:f9:69:77:d7:1f:3e:f6:0a:4b:1b: f3:19:dc:dc:9f:0c:78:b1:6e:de:21:85:9e:ac:58: 11:6d:39:93:d8:2e:0c:1f:ef:66:d0:cb:f4:59:13: 82:e0:36:46:2e:72:f8:49:51:ef:17:32:58:e3:e1: ac:7b:d2:45:a9:3f:e5:6c:c3:04:e1:e6:43:bf:c8: c1:9f:0c:5e:c8:21:f4:d2:1a:7b:2d:72:1f:57:41: 7e:d6:ff:eb:28:b7:c4:b6:d7:90:32:11:1f:68:6d: 73:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:74:54:B8:E1:04:68:8E:03:85:66:2C:CD:74:74:AE:FE:64:30 X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:1b:1b:52:8d:09:98:21:c8:11:c1:f6:db:ed:68:f8:55:90: 50:53:eb:30:ea:4a:23:49:05:1b:a4:4a:3b:bb:7d:09:61:eb: 05:b2:dd:95:a0:ff:21:3f:17:68:3d:1a:80:e9:95:52:8f:35: 96:d6:47:04:36:30:0f:7b:f2:22:a3:cf:46:57:81:5b:7b:28: a2:b6:60:52:3a:5b:34:6d:26:21:5c:89:d5:6b:8a:0f:44:4c: d5:a4:fa:2a:34:b9:ce:ce:1b:e7:6c:a3:89:97:9a:2a:ec:25: 35:62:72:a5:54:1d:21:d5:8b:3a:5c:98:52:46:12:60:25:47: 00:7c:44:8e:59:97:c6:e6:cd:94:aa:4e:37:fd:c4:44:ef:1d: 1d:3c:30:86:b3:f5:93:f6:2e:60:05:7a:f9:e8:9d:2a:69:2b: b0:14:f8:20:f9:85:18:5f:9a:71:30:83:65:7f:f7:10:70:80: dd:90:98:48:6a:03:1d:f6:a9:a4:05:68:db:6d:77:6b:df:e3: 14:f8:bf:22:c4:f7:d2:c7:92:60:6f:f0:cb:45:a7:f4:fe:40: 17:0c:96:e4:0f:db:98:0e:01:3f:a7:08:22:7b:bb:8a:94:55: cd:be:fe:73:19:62:e1:28:93:db:9a:f4:8a:80:9d:4e:3b:5e: 3b:e4:85:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUwODIyMjAyMTQ5WhcNMjUwODI5MjAyMTQ5WjAYMRYwFAYD VQQDEw02OGE4ZDE1ZC1hMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+8qroOhtDfGWVNllnr5wwOUMzaynUSH1zpVPPp/L+EvB02hJv6bxNBwl4kT AfumYdIQ1Frzm1ZwB9x8PJ9JDy8Jc+CdRsi32ci4JjDDdLVJyh3t9Y/AqwTlpsg7 Eh+RDiBtSSRM+bKKVyGMCR9Kbo3LfZhSEU5OEe1RihueQBYWoxw18oh0jXkEXezd +eZmIOXMFV4GvNxlRflpd9cfPvYKSxvzGdzcnwx4sW7eIYWerFgRbTmT2C4MH+9m 0Mv0WROC4DZGLnL4SVHvFzJY4+Gse9JFqT/lbMME4eZDv8jBnwxeyCH00hp7LXIf V0F+1v/rKLfEtteQMhEfaG1zTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzndFS4 4QRojgOFZizNdHSu/mQwMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhGxtSjQmYIcgRwfbb7Wj4VZBQU+sw6kojSQUbpEo7u30JYesFst2V oP8hPxdoPRqA6ZVSjzWW1kcENjAPe/Iio89GV4FbeyiitmBSOls0bSYhXInVa4oP REzVpPoqNLnOzhvnbKOJl5oq7CU1YnKlVB0h1Ys6XJhSRhJgJUcAfESOWZfG5s2U qk43/cRE7x0dPDCGs/WT9i5gBXr56J0qaSuwFPgg+YUYX5pxMINlf/cQcIDdkJhI agMd9qmkBWjbbXdr3+MU+L8ixPfSx5Jgb/DLRaf0/kAXDJbkD9uYDgE/pwgie7uK lFXNvv5zGWLhKJPbmvSKgJ1OO1475IUk -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:52 2025 by rpki-client