$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: WSdzOjF2G4X5c+rlnkGe4cGIUz9abGLnOZJEOWMAx18= Subject key identifier: 53:2B:8C:97:49:68:E7:F5:DF:FF:2E:4E:70:1D:30:6A:BD:7A:41:F5 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0C73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0C6D Signing time: Fri 22 Aug 2025 18:28:41 +0000 Manifest this update: Fri 22 Aug 2025 18:28:40 +0000 Manifest next update: Fri 29 Aug 2025 18:28:40 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: BhTP/WJ3pq6bFCiQxl2SZsFQVLavc39bC7O0RIXqM1w=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: dMPlbwZZJ9a9ifwF8f+1OVtKYmpgj8cV+d0a3+m/kqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Aug 22 18:28:40 2025 GMT Not After : Aug 29 18:28:40 2025 GMT Subject: CN=68a8b6d8-b58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:fc:74:da:23:08:63:f5:4b:fe:92:dc:c3: 3d:94:87:78:1c:70:10:c2:6a:72:b0:a8:6a:6a:bc: 22:4f:da:59:9a:5b:d8:ec:c7:8b:a4:2d:03:2b:93: f1:64:68:89:9b:06:87:73:20:d5:e8:53:ae:36:a4: 10:f8:84:88:f2:43:86:cf:59:81:8f:41:2f:f5:8b: 5c:03:ce:de:ea:99:94:84:57:aa:2e:50:47:54:2f: 0e:52:b1:57:f6:7e:aa:c0:1a:a4:b7:f4:0a:72:e6: 4a:91:92:9f:5c:6b:df:b5:c7:f3:81:59:b8:5f:ef: 0b:3c:77:e7:69:82:85:ab:a7:c1:70:73:02:8d:de: 55:1d:87:15:48:ce:39:0e:b6:56:85:3e:66:18:b6: 49:84:29:97:54:c9:00:44:d7:ad:64:fc:b0:fe:9f: 3a:dc:96:47:d4:cd:5d:53:08:a8:8a:b5:6f:c3:06: 47:8a:7f:de:ef:eb:c2:74:67:00:1c:bb:0f:52:9d: c2:12:4d:6f:fa:ff:45:26:03:83:5c:98:50:c8:a9: d6:8d:20:fd:00:75:22:c2:0b:b5:89:13:79:63:f5: e2:a8:76:27:ef:a3:95:c8:59:68:8f:6f:6b:e3:0e: 38:da:5e:a5:4f:20:40:c2:ba:4d:d9:68:7a:79:08: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:8C:97:49:68:E7:F5:DF:FF:2E:4E:70:1D:30:6A:BD:7A:41:F5 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:81:bb:12:83:50:63:7a:9e:a7:3d:d4:35:a5:de:a0:0c:35: 01:88:0a:cc:8a:33:d8:da:8c:8a:e8:dc:17:2c:77:d2:ea:0c: bf:c1:e9:a6:a0:a6:65:b9:b8:47:79:4e:dc:c4:dd:ba:86:bf: 85:e3:1e:1e:d0:13:27:32:7f:97:b1:eb:76:31:90:5e:76:7d: f3:aa:8b:13:be:60:eb:66:63:8e:16:05:0a:e0:1f:64:07:1e: 65:d2:93:91:5d:7d:d3:a1:0e:ad:93:b6:5f:93:4d:55:af:ea: ad:76:9a:b4:8b:6e:df:b8:c5:b1:ca:73:e8:9a:61:ba:3a:95: ab:3c:3f:b4:c4:2b:e7:10:7e:72:29:0c:6c:74:53:49:10:82: 65:f8:9b:6a:7e:21:01:0c:80:bf:d5:2f:49:84:f9:09:bf:77: 3f:9b:4d:98:78:f0:21:e8:0f:2c:22:70:8e:69:72:9b:be:24: 6a:ef:ca:4e:c3:f4:3e:b4:9b:67:9a:70:bc:75:6e:a9:6a:af: bd:45:ba:85:d7:ad:97:6e:60:b5:82:4b:b4:ab:74:90:ee:a5: 58:a2:8c:47:33:26:95:19:11:8e:37:21:c8:83:52:c3:c0:80: 4a:63:b1:30:67:02:9b:f0:39:58:ec:bc:dd:10:22:35:cd:3c: 9f:37:cc:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjUwODIyMTgyODQwWhcNMjUwODI5MTgyODQwWjAYMRYwFAYD VQQDEw02OGE4YjZkOC1iNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzez8dNojCGP1S/6S3MM9lId4HHAQwmpysKhqarwiT9pZmlvY7MeLpC0DK5Px ZGiJmwaHcyDV6FOuNqQQ+ISI8kOGz1mBj0Ev9YtcA87e6pmUhFeqLlBHVC8OUrFX 9n6qwBqkt/QKcuZKkZKfXGvftcfzgVm4X+8LPHfnaYKFq6fBcHMCjd5VHYcVSM45 DrZWhT5mGLZJhCmXVMkARNetZPyw/p863JZH1M1dUwioirVvwwZHin/e7+vCdGcA HLsPUp3CEk1v+v9FJgODXJhQyKnWjSD9AHUiwgu1iRN5Y/XiqHYn76OVyFloj29r 4w442l6lTyBAwrpN2Wh6eQhooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMrjJdJ aOf13/8uTnAdMGq9ekH1MB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtgbsSg1Bjep6nPdQ1pd6gDDUBiArMijPY2oyK6NwXLHfS6gy/wemm oKZlubhHeU7cxN26hr+F4x4e0BMnMn+Xset2MZBedn3zqosTvmDrZmOOFgUK4B9k Bx5l0pORXX3ToQ6tk7Zfk01Vr+qtdpq0i27fuMWxynPommG6OpWrPD+0xCvnEH5y KQxsdFNJEIJl+JtqfiEBDIC/1S9JhPkJv3c/m02YePAh6A8sInCOaXKbviRq78pO w/Q+tJtnmnC8dW6paq+9RbqF162XbmC1gku0q3SQ7qVYooxHMyaVGRGONyHIg1LD wIBKY7EwZwKb8DlY7LzdECI1zTyfN8yx -----END CERTIFICATE-----Generated at Sat Aug 23 13:50:23 2025 by rpki-client