$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: V+Mnd7DMHYS6ELpCLe5iIAXN9JxF3wWc2GvUJKKfHEA= Subject key identifier: 16:9C:E5:61:8A:81:B1:7B:00:78:1A:9C:39:46:F9:81:66:EE:76:D6 Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 07A7 Signing time: Fri 22 Aug 2025 21:28:25 +0000 Manifest this update: Fri 22 Aug 2025 21:28:24 +0000 Manifest next update: Fri 29 Aug 2025 21:28:24 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: GQTeLvGkpcQs8/1H+mgK9Gq8AArCXMwdpgoZbxExl58=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Aug 22 21:28:24 2025 GMT Not After : Aug 29 21:28:24 2025 GMT Subject: CN=68a8e0f9-4959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:79:30:b7:12:09:25:d5:a8:91:f4:cd:4d: 3d:8b:fc:1a:46:5b:ad:27:3c:13:2c:a5:77:eb:74: 89:5d:23:92:8e:3e:2f:cb:d2:39:01:c0:6f:b8:75: 60:1c:b1:09:02:2e:ae:8d:19:65:db:cf:82:ea:d5: 29:a7:e7:cd:d6:75:fc:bb:29:71:9f:df:ad:eb:6e: f1:d9:76:5e:a9:50:0a:fa:98:b7:13:84:78:44:a6: d7:ec:5e:ed:6a:ae:9f:e7:cd:8d:8f:1d:c8:18:60: 48:15:2a:50:4a:99:66:aa:14:5c:fd:b3:05:b9:47: cb:d1:94:20:ee:6a:5c:a6:30:69:f4:05:6e:33:cd: 75:9e:7b:b8:b1:6e:76:94:3c:5e:12:26:b6:f9:b2: f0:a5:b4:78:52:16:63:4b:6a:c7:4c:56:af:a7:b4: d2:e4:0a:16:e5:6f:90:93:f3:ee:53:90:35:b8:54: 18:59:05:12:1a:4c:ab:af:cb:12:52:1b:2b:2a:63: 96:3b:b8:40:05:da:57:ac:31:ae:6a:f2:86:f3:f9: 15:e9:c6:64:86:a0:67:e9:bd:4a:81:09:48:45:77: 89:1d:eb:7a:0b:c8:10:b8:50:78:dc:f4:49:a0:03: 9d:96:e6:4a:59:30:95:f5:eb:23:65:f4:96:29:a4: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:E5:61:8A:81:B1:7B:00:78:1A:9C:39:46:F9:81:66:EE:76:D6 X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:aa:c5:4c:8b:7f:8d:44:8f:d9:72:ff:d5:1d:2f:08:1e: 07:fb:3f:9b:77:1a:c9:94:8d:9f:f3:93:1a:c3:9d:2f:fd:09: d3:b1:3f:2e:4e:8e:16:1d:82:35:f6:77:6d:31:db:8e:ad:71: 45:32:30:4f:4f:f3:f8:1c:1d:3e:13:f7:8b:51:cf:15:cd:d1: 94:0a:1b:a5:56:aa:0f:61:09:96:31:2f:ac:56:ba:64:fe:e5: 39:76:58:94:4e:0a:c7:23:88:a3:43:14:59:df:61:88:38:85: 52:6a:86:03:43:78:91:aa:5c:3d:a6:a9:1e:85:7c:cb:1e:de: d0:78:03:b9:30:eb:d0:f0:0f:c0:7f:a6:42:4c:0b:27:b9:d1: 27:e3:e4:83:82:5a:bd:b2:e3:9a:8f:6a:14:b8:9d:35:c8:ec: ec:af:ff:77:06:9a:6a:84:f5:bd:47:09:e3:b2:c3:14:e5:ed: 6c:5f:04:00:76:6c:97:34:1c:57:4c:4d:a2:b6:bd:c6:36:2b: 3d:56:7d:60:9e:f8:36:f3:2e:ab:f6:c7:09:30:a8:71:e3:d1: 7b:98:3a:2f:6e:18:62:6e:14:4b:5d:e4:1d:9c:2d:b3:0c:9d: 6f:d4:cf:57:fd:5f:36:11:ad:f5:cb:48:b2:66:8d:b5:4b:bd: 09:9a:f4:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjUwODIyMjEyODI0WhcNMjUwODI5MjEyODI0WjAYMRYwFAYD VQQDEw02OGE4ZTBmOS00OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50p5MLcSCSXVqJH0zU09i/waRlutJzwTLKV363SJXSOSjj4vy9I5AcBvuHVg HLEJAi6ujRll28+C6tUpp+fN1nX8uylxn9+t627x2XZeqVAK+pi3E4R4RKbX7F7t aq6f582Njx3IGGBIFSpQSplmqhRc/bMFuUfL0ZQg7mpcpjBp9AVuM811nnu4sW52 lDxeEia2+bLwpbR4UhZjS2rHTFavp7TS5AoW5W+Qk/PuU5A1uFQYWQUSGkyrr8sS UhsrKmOWO7hABdpXrDGuavKG8/kV6cZkhqBn6b1KgQlIRXeJHet6C8gQuFB43PRJ oAOdluZKWTCV9esjZfSWKaQETwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBac5WGK gbF7AHganDlG+YFm7nbWMB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI76rFTIt/jUSP2XL/1R0vCB4H+z+bdxrJlI2f85Maw50v/QnTsT8u To4WHYI19ndtMduOrXFFMjBPT/P4HB0+E/eLUc8VzdGUChulVqoPYQmWMS+sVrpk /uU5dliUTgrHI4ijQxRZ32GIOIVSaoYDQ3iRqlw9pqkehXzLHt7QeAO5MOvQ8A/A f6ZCTAsnudEn4+SDglq9suOaj2oUuJ01yOzsr/93BppqhPW9RwnjssMU5e1sXwQA dmyXNBxXTE2itr3GNis9Vn1gnvg28y6r9scJMKhx49F7mDovbhhibhRLXeQdnC2z DJ1v1M9X/V82Ea31y0iyZo21S70JmvQC -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:42 2025 by rpki-client