$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: T+xl1YOTaIJcFXIhECbGQ9CZw1jRsmldiguwWEx/KEc= Subject key identifier: 06:98:D4:57:2A:B5:45:44:A4:3B:CC:AB:48:C6:66:DB:F6:90:0D:67 Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 0839 Signing time: Fri 22 Aug 2025 20:53:34 +0000 Manifest this update: Fri 22 Aug 2025 20:53:33 +0000 Manifest next update: Fri 29 Aug 2025 20:53:33 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: lEzDIVGjNv1Kgn0bvLs7BFxnDzXwqTLDuRrqznLcE9w=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: 3IT/DHgHOTxt9Nlos2eMFej/wQukcdeUZ7Fwjd2moXo=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: kspmrSQhYNZyQkjYuTLZdSrauXWbtL77w7yiIdCBODs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Aug 22 20:53:33 2025 GMT Not After : Aug 29 20:53:33 2025 GMT Subject: CN=68a8d8ce-440e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:32:1c:d6:e6:2e:ef:81:b5:e2:7c:de:00: b5:65:4e:55:b7:0f:02:86:52:ce:b6:2d:9b:7c:30: db:b6:5e:2b:18:eb:f8:ff:c5:83:eb:37:31:a1:15: ff:1d:9e:ab:a4:03:12:d6:e8:fe:eb:e4:c7:3c:fa: c9:4c:0f:06:e6:ff:74:f2:0a:54:02:9d:1a:f7:e6: 3c:2b:38:0f:0a:77:ff:66:6b:6f:02:d1:31:e7:81: 8d:8c:64:ae:72:a6:6e:e4:09:8c:64:b2:aa:36:85: 68:45:8b:2f:19:8b:8f:8f:37:ce:bd:36:a9:76:ba: 28:cd:50:6d:ad:9b:e7:ea:f4:2a:5b:ca:38:2a:99: 22:e9:14:f5:b7:c4:1b:56:66:09:b2:f5:3d:86:b9: 42:ac:d9:83:81:eb:fb:5f:d1:98:e1:c9:7a:28:bd: 20:79:ef:bc:94:be:6d:36:c2:1a:8a:37:53:d7:fc: 56:92:8f:a0:e5:1d:40:76:7e:b4:e5:57:01:50:8b: 30:bb:cd:e7:70:93:92:0e:37:76:8b:14:9c:c6:8b: f8:29:5b:e8:43:ed:90:13:f0:9f:50:a3:d9:4d:bf: 73:a9:37:ea:c7:6d:25:19:cd:1e:76:40:9d:73:b2: 5e:fd:16:1a:7a:b8:5f:14:6a:03:5e:65:c6:ed:6e: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:98:D4:57:2A:B5:45:44:A4:3B:CC:AB:48:C6:66:DB:F6:90:0D:67 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c6:0f:4a:0a:cf:94:17:84:4b:d7:9e:6c:9d:fe:e4:e7:ed: fe:21:d7:6f:d5:41:24:5b:38:88:aa:12:23:78:63:79:0d:ef: e6:78:cd:89:f0:30:cc:f5:a1:d6:e1:63:8d:45:c3:4b:4f:9b: 23:85:5f:64:82:49:2f:4b:8a:33:5f:30:13:b9:ca:84:9c:38: 31:7e:c6:14:ca:53:fe:58:d7:13:42:0f:e1:ff:da:5a:9f:96: a3:cc:31:d8:bb:9d:c9:7b:43:68:66:9d:d9:7b:fa:f0:ce:5b: 64:70:32:d8:a4:eb:c6:c0:83:bf:62:8b:7d:81:86:bb:65:3a: fa:84:17:b1:bf:d3:d8:31:70:33:0a:15:fd:b5:a6:b8:04:8c: 26:56:48:ef:7c:5c:22:29:4d:07:af:63:b7:d0:09:f1:b2:24: a1:4f:c5:1c:b1:95:11:bc:91:ae:1e:c7:dd:80:98:56:5f:eb: 5f:15:8c:97:9f:57:8d:89:02:a0:27:b0:dc:16:a7:c5:c7:b0: df:80:79:16:d8:a6:12:2a:66:68:af:6f:ee:45:88:68:62:b0: 4a:55:b4:60:d8:c6:ce:dc:bf:35:b3:f4:b5:2d:9a:e2:f3:ae: dd:0c:9e:eb:3c:ef:f9:d1:24:f2:ca:02:3f:ab:f2:0d:f2:47: 99:31:10:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUwODIyMjA1MzMzWhcNMjUwODI5MjA1MzMzWjAYMRYwFAYD VQQDEw02OGE4ZDhjZS00NDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76EyHNbmLu+BteJ83gC1ZU5Vtw8ChlLOti2bfDDbtl4rGOv4/8WD6zcxoRX/ HZ6rpAMS1uj+6+THPPrJTA8G5v908gpUAp0a9+Y8KzgPCnf/ZmtvAtEx54GNjGSu cqZu5AmMZLKqNoVoRYsvGYuPjzfOvTapdroozVBtrZvn6vQqW8o4Kpki6RT1t8Qb VmYJsvU9hrlCrNmDgev7X9GY4cl6KL0gee+8lL5tNsIaijdT1/xWko+g5R1Adn60 5VcBUIswu83ncJOSDjd2ixScxov4KVvoQ+2QE/CfUKPZTb9zqTfqx20lGc0edkCd c7Je/RYaerhfFGoDXmXG7W7ZlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaY1Fcq tUVEpDvMq0jGZtv2kA1nMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcxg9KCs+UF4RL155snf7k5+3+Iddv1UEkWziIqhIjeGN5De/meM2J 8DDM9aHW4WONRcNLT5sjhV9kgkkvS4ozXzATucqEnDgxfsYUylP+WNcTQg/h/9pa n5ajzDHYu53Je0NoZp3Ze/rwzltkcDLYpOvGwIO/Yot9gYa7ZTr6hBexv9PYMXAz ChX9taa4BIwmVkjvfFwiKU0Hr2O30AnxsiShT8UcsZURvJGuHsfdgJhWX+tfFYyX n1eNiQKgJ7DcFqfFx7DfgHkW2KYSKmZor2/uRYhoYrBKVbRg2MbO3L81s/S1LZri 867dDJ7rPO/50STyygI/q/IN8keZMRCW -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:23 2025 by rpki-client