$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: DrJH5/7hPNim1LXqJ+d+o8lEGxxPXJAR1L6YSyxAsYY= Subject key identifier: 84:83:D4:34:A3:D7:B6:8F:99:78:DE:90:08:8B:3E:2D:62:B9:D4:4F Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 057E Signing time: Fri 22 Aug 2025 23:26:23 +0000 Manifest this update: Fri 22 Aug 2025 23:26:22 +0000 Manifest next update: Fri 29 Aug 2025 23:26:22 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: sbXWaoybLEQooZCfJ9Yl4ZRypM0fEkqGzAe9SWDADDY=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Aug 22 23:26:22 2025 GMT Not After : Aug 29 23:26:22 2025 GMT Subject: CN=68a8fc9e-0630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:32:8c:aa:79:23:26:92:99:a1:52:e8:2b: fe:92:c6:e7:14:da:20:ae:9b:44:a9:65:47:91:59: c5:78:ac:00:6e:49:c0:41:f6:98:98:28:65:c6:ae: 8a:7a:67:4f:bf:7e:6f:a8:5c:f0:55:9a:f9:2a:ab: c9:bd:4b:cb:f4:60:dd:53:39:c0:0b:9f:0d:f0:4d: 66:45:ef:2b:2f:59:db:59:8b:f8:9d:29:97:57:c2: 9e:44:4b:3a:ee:df:47:49:f0:87:f4:cb:91:32:36: 52:b4:7c:c9:46:c1:e5:e5:79:fa:b1:bb:37:df:34: 51:e3:00:4c:5d:7d:7e:3c:02:1b:d7:08:9d:e8:18: 93:8f:dd:3f:bb:de:a0:23:2d:59:72:6c:96:04:25: 23:61:28:d5:e8:1d:3d:e1:5b:2d:98:47:89:08:69: 2f:a6:7c:81:69:00:08:18:bb:c8:cf:81:a8:cc:1e: cf:77:87:e8:ac:5c:07:31:88:62:9e:c0:70:e1:60: 99:e1:2a:4e:cd:25:88:37:18:a7:ca:d9:8f:0f:45: 4f:7e:c8:7c:60:53:f4:65:cd:7d:87:b4:01:51:75: 90:58:58:6a:9b:4e:23:09:06:5f:e9:ff:78:98:9b: 1c:bd:57:b6:87:1f:2d:89:32:31:85:f5:80:1a:80: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:83:D4:34:A3:D7:B6:8F:99:78:DE:90:08:8B:3E:2D:62:B9:D4:4F X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:15:70:50:7e:ae:1c:d8:62:6c:b4:9b:30:53:c6:72:23:8f: 39:b1:d8:a9:c9:be:dd:e0:17:c1:c5:7e:34:ac:60:b6:d1:75: 04:68:c7:b6:d2:c0:34:91:9a:18:82:d9:2a:d1:72:1f:c2:5c: a5:03:9b:ab:49:dc:32:2d:65:06:66:d9:01:44:e5:da:4e:37: d2:c7:82:f5:d5:41:e1:92:bf:5d:ae:c8:cb:73:7b:33:a4:3a: e9:e8:d8:1b:23:86:28:6f:df:a0:ac:27:f1:2b:82:75:56:e8: da:ba:eb:3c:e0:5b:9e:51:b5:b4:a5:58:36:ea:ae:40:76:e9: 7f:55:81:a6:fb:c5:1d:72:12:a6:ae:d2:e5:67:94:2f:18:89: 42:3e:07:24:1c:db:64:62:8c:4f:8b:39:c7:f7:60:63:35:d6: d5:96:f4:da:29:12:f7:15:92:96:ac:11:12:5b:ca:e8:76:08: b7:1b:26:22:dc:c3:95:0c:c6:20:2f:f3:93:5f:5c:0c:83:dc: c8:7e:d4:19:80:56:8d:bd:7f:26:13:57:ea:80:e0:f2:28:c4: b4:15:cf:cd:f1:5d:c7:94:d8:ab:75:8c:b1:81:3b:46:3a:d6: be:89:65:d0:d4:d4:56:23:e9:b2:7f:1f:0f:62:a5:6f:a6:19: 7c:1e:da:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwODIyMjMyNjIyWhcNMjUwODI5MjMyNjIyWjAYMRYwFAYD VQQDEw02OGE4ZmM5ZS0wNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoIyjKp5IyaSmaFS6Cv+ksbnFNogrptEqWVHkVnFeKwAbknAQfaYmChlxq6K emdPv35vqFzwVZr5KqvJvUvL9GDdUznAC58N8E1mRe8rL1nbWYv4nSmXV8KeREs6 7t9HSfCH9MuRMjZStHzJRsHl5Xn6sbs33zRR4wBMXX1+PAIb1wid6BiTj90/u96g Iy1ZcmyWBCUjYSjV6B094VstmEeJCGkvpnyBaQAIGLvIz4GozB7Pd4forFwHMYhi nsBw4WCZ4SpOzSWINxinytmPD0VPfsh8YFP0Zc19h7QBUXWQWFhqm04jCQZf6f94 mJscvVe2hx8tiTIxhfWAGoCHzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISD1DSj 17aPmXjekAiLPi1iudRPMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFXBQfq4c2GJstJswU8ZyI485sdipyb7d4BfBxX40rGC20XUEaMe2 0sA0kZoYgtkq0XIfwlylA5urSdwyLWUGZtkBROXaTjfSx4L11UHhkr9drsjLc3sz pDrp6NgbI4Yob9+grCfxK4J1Vujauus84FueUbW0pVg26q5Adul/VYGm+8UdchKm rtLlZ5QvGIlCPgckHNtkYoxPiznH92BjNdbVlvTaKRL3FZKWrBESW8rodgi3GyYi 3MOVDMYgL/OTX1wMg9zIftQZgFaNvX8mE1fqgODyKMS0Fc/N8V3HlNirdYyxgTtG Ota+iWXQ1NRWI+myfx8PYqVvphl8HtrG -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:22 2025 by rpki-client