$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: ST68fDV//d/6zMPteEu86AXMF/SyGj3pwr8f1lIJDGg= Subject key identifier: 79:9C:1B:31:A2:47:4C:1E:B7:1F:B5:62:54:98:D8:E1:8E:8F:A2:98 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 09E3 Signing time: Fri 22 Aug 2025 20:03:12 +0000 Manifest this update: Fri 22 Aug 2025 20:03:12 +0000 Manifest next update: Fri 29 Aug 2025 20:03:12 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: L7Nitk9jUMqDV2+4zu+wTpdBaBc8KjYSiROuECg8EDY=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Aug 22 20:03:12 2025 GMT Not After : Aug 29 20:03:12 2025 GMT Subject: CN=68a8cd00-5c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:9f:85:eb:b7:cb:d3:af:6f:d3:3c:87:fd: cf:2d:e0:0f:94:67:52:93:3f:6f:69:39:15:7b:41: 59:28:b6:87:ad:c3:c5:47:5a:b4:89:5d:d5:d7:0b: b8:b3:7c:32:c6:d4:8e:4b:23:fd:8a:4b:a2:09:41: 47:9e:f2:55:42:9a:22:3e:9e:b4:e2:39:5f:77:b2: 13:e5:22:53:5a:6b:cb:1d:40:03:43:b2:ec:29:23: f9:91:be:7f:e3:0a:15:42:f0:79:4a:11:d7:53:38: 7e:fe:6c:85:8c:90:99:3f:7d:85:cd:f4:78:bd:0b: e4:0e:39:89:5d:b4:17:c9:63:49:93:1e:5d:d7:5e: 97:d8:ba:38:fb:49:45:61:d8:65:8f:35:a7:a5:3f: ef:da:5e:f0:6c:78:cd:7c:58:c1:86:98:f7:51:7a: ce:c9:80:8d:0a:10:40:1e:fa:f4:75:99:46:da:df: 3f:c3:22:62:56:f8:3b:24:e6:8e:dc:18:dc:90:cf: 3b:3f:bc:78:de:39:17:a2:1a:e9:75:e7:9d:cc:c4: 98:3a:05:c9:c0:45:a2:72:9c:4d:b6:18:c6:eb:8a: 9a:48:84:e5:45:9e:67:41:09:b0:db:21:cc:d3:ee: 88:05:8b:0d:00:c2:4e:90:c0:59:c0:ba:26:7c:fd: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9C:1B:31:A2:47:4C:1E:B7:1F:B5:62:54:98:D8:E1:8E:8F:A2:98 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:25:fc:c0:4d:89:ca:2c:e9:3e:5b:a2:25:d1:79:fa:c7:06: 34:da:89:ba:05:1f:45:a9:c4:2b:17:d7:91:92:d5:96:d4:2a: 93:42:f1:4a:a8:89:8d:67:20:48:78:f9:9e:17:52:2a:77:19: de:db:56:c2:ce:e7:7c:56:06:ca:3b:72:d8:01:1f:37:60:87: ad:e1:32:8f:c8:92:cb:77:e2:10:68:b5:ef:23:1b:47:8c:c9: 8a:4e:42:da:26:ec:13:25:ad:5c:65:ce:48:de:4e:3f:84:11: 3b:51:7a:77:82:ee:67:fb:69:44:e4:18:f3:36:d8:55:f1:70: 92:85:b3:47:bf:76:45:a0:4f:75:c4:c0:b7:39:ae:0a:53:34: 96:b3:12:38:1a:78:cf:c9:d2:bb:5a:2d:1a:4c:76:7a:ce:2d: ac:ec:4d:4f:c9:e2:20:8c:84:8b:50:f8:ec:0a:47:37:53:f0: bc:58:29:20:9a:f4:86:1b:ba:64:8a:8e:6d:4e:27:a4:68:f1: 15:e2:a9:ff:c3:47:e7:5b:51:a2:06:75:bf:51:c3:9c:fe:ca: 56:7d:20:c3:6f:de:57:5f:74:20:bd:d2:f5:bc:73:db:26:c2: aa:0b:53:52:28:ad:c1:bc:88:0d:2b:7c:54:90:8e:61:68:d5: ca:f4:a8:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUwODIyMjAwMzEyWhcNMjUwODI5MjAwMzEyWjAYMRYwFAYD VQQDEw02OGE4Y2QwMC01YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgGfheu3y9Ovb9M8h/3PLeAPlGdSkz9vaTkVe0FZKLaHrcPFR1q0iV3V1wu4 s3wyxtSOSyP9ikuiCUFHnvJVQpoiPp604jlfd7IT5SJTWmvLHUADQ7LsKSP5kb5/ 4woVQvB5ShHXUzh+/myFjJCZP32FzfR4vQvkDjmJXbQXyWNJkx5d116X2Lo4+0lF YdhljzWnpT/v2l7wbHjNfFjBhpj3UXrOyYCNChBAHvr0dZlG2t8/wyJiVvg7JOaO 3BjckM87P7x43jkXohrpdeedzMSYOgXJwEWicpxNthjG64qaSITlRZ5nQQmw2yHM 0+6IBYsNAMJOkMBZwLomfP31FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmcGzGi R0wetx+1YlSY2OGOj6KYMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcJfzATYnKLOk+W6Il0Xn6xwY02om6BR9FqcQrF9eRktWW1CqTQvFK qImNZyBIePmeF1Iqdxne21bCzud8VgbKO3LYAR83YIet4TKPyJLLd+IQaLXvIxtH jMmKTkLaJuwTJa1cZc5I3k4/hBE7UXp3gu5n+2lE5BjzNthV8XCShbNHv3ZFoE91 xMC3Oa4KUzSWsxI4GnjPydK7Wi0aTHZ6zi2s7E1PyeIgjISLUPjsCkc3U/C8WCkg mvSGG7pkio5tTiekaPEV4qn/w0fnW1GiBnW/UcOc/spWfSDDb95XX3QgvdL1vHPb JsKqC1NSKK3BvIgNK3xUkI5haNXK9KhI -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:42 2025 by rpki-client