$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: k6ohpM0Q7J+z8WyJF+3rOD5IJZ1+feSMALdixmr0AN0= Subject key identifier: 76:00:34:4B:4B:BA:4A:E3:A4:3A:3E:C0:98:17:AC:01:6B:E2:45:85 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 92 Signing time: Sat 23 Aug 2025 06:41:41 +0000 Manifest this update: Sat 23 Aug 2025 06:41:40 +0000 Manifest next update: Sat 30 Aug 2025 06:41:40 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: esPSxnLK3grH1WWVTImNjHHA2ZPveZ3csMJwk3Imiqc=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Aug 23 06:41:40 2025 GMT Not After : Aug 30 06:41:40 2025 GMT Subject: CN=68a962a4-c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:e5:84:f0:db:76:64:7e:0b:a4:25:d7:dc: aa:0b:0f:65:f3:9a:97:c4:ab:d9:41:e5:fc:cd:06: 30:5d:92:ed:d6:f8:19:46:f0:5d:02:ef:a9:c1:f4: 0b:df:a4:51:69:68:7e:12:2a:0b:a0:26:ab:cb:33: d8:45:6f:dc:f9:7f:ff:9c:67:f1:35:c6:9c:40:81: ea:f3:60:7f:65:cf:2d:bb:2c:cf:9d:d4:8b:cc:58: 55:0f:63:10:cc:38:ad:c0:43:60:de:1c:b3:62:d0: 82:42:ae:6a:fa:26:ac:07:e4:b1:4a:89:7a:29:a2: 28:3a:26:ff:d2:d4:e9:3d:32:9c:26:1e:c3:ca:0a: d4:5e:48:ef:dd:22:12:c7:ab:f3:15:bc:3a:6d:d9: 80:89:c0:3b:b0:57:95:39:7b:6b:8f:3e:12:dd:36: 4f:b0:ba:6d:66:9b:32:1e:ad:51:ce:97:d7:6e:06: 28:d1:73:ad:53:03:7b:cb:fb:da:3c:cf:bc:dd:45: 06:27:ed:ef:96:4c:b3:8d:2f:7a:9e:4b:13:0d:a8: c3:89:1f:e5:ea:ac:1c:ee:56:2e:e1:04:66:28:80: 8c:00:47:3f:e2:0d:51:f0:f5:07:d7:62:d5:30:6f: 4a:95:09:6a:be:8d:db:d9:a6:4c:5f:3d:53:d1:15: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:34:4B:4B:BA:4A:E3:A4:3A:3E:C0:98:17:AC:01:6B:E2:45:85 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:7b:fa:0c:19:76:cc:4f:a5:e3:65:6c:b6:a0:76:e4:63:62: ec:2a:57:05:4b:ad:dd:ed:47:46:9f:be:db:a1:d9:02:70:6a: 5d:e5:fa:b0:5f:97:03:b0:cf:09:f1:54:f4:88:7a:fd:0c:4a: 59:24:b7:80:f6:26:59:41:7f:98:05:61:f8:b4:5b:f1:28:26: 40:fd:31:d7:02:25:31:58:e3:ae:57:91:1e:50:a0:e7:2d:f4: 5e:5c:05:9a:d5:d1:f3:d2:9d:85:6f:b1:bb:2f:c8:5c:ff:29: dd:7e:47:57:69:dd:f9:6e:0b:10:79:e8:2e:8b:b4:23:0b:03: 9f:24:cc:c0:97:e4:c0:83:44:ec:a4:86:3f:98:11:3e:35:eb: b1:ab:25:61:81:01:c8:7a:6d:19:59:fe:ab:5d:c2:9b:89:29: fa:e0:fc:b5:d7:f6:87:12:7a:67:e7:34:af:05:e8:1a:ca:21: 96:d8:9e:a2:a6:39:af:3a:0e:ce:cb:da:ca:60:39:38:f3:7f: 73:73:a6:e1:61:b0:0b:08:95:0f:ac:08:6b:da:9d:7a:de:79: fe:b1:c1:1c:83:5f:0b:22:ec:f9:bc:54:53:7d:11:59:e4:bf: e5:c2:df:94:80:2f:0c:2c:50:56:90:d8:11:e6:66:b6:f1:cb: 7b:27:c0:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUwODIzMDY0MTQwWhcNMjUwODMwMDY0MTQwWjAYMRYwFAYD VQQDEw02OGE5NjJhNC1jMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy17lhPDbdmR+C6Ql19yqCw9l85qXxKvZQeX8zQYwXZLt1vgZRvBdAu+pwfQL 36RRaWh+EioLoCaryzPYRW/c+X//nGfxNcacQIHq82B/Zc8tuyzPndSLzFhVD2MQ zDitwENg3hyzYtCCQq5q+iasB+SxSol6KaIoOib/0tTpPTKcJh7DygrUXkjv3SIS x6vzFbw6bdmAicA7sFeVOXtrjz4S3TZPsLptZpsyHq1RzpfXbgYo0XOtUwN7y/va PM+83UUGJ+3vlkyzjS96nksTDajDiR/l6qwc7lYu4QRmKICMAEc/4g1R8PUH12LV MG9KlQlqvo3b2aZMXz1T0RWpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYANEtL ukrjpDo+wJgXrAFr4kWFMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEe/oMGXbMT6XjZWy2oHbkY2LsKlcFS63d7UdGn77bodkCcGpd5fqw X5cDsM8J8VT0iHr9DEpZJLeA9iZZQX+YBWH4tFvxKCZA/THXAiUxWOOuV5EeUKDn LfReXAWa1dHz0p2Fb7G7L8hc/yndfkdXad35bgsQeegui7QjCwOfJMzAl+TAg0Ts pIY/mBE+NeuxqyVhgQHIem0ZWf6rXcKbiSn64Py11/aHEnpn5zSvBegayiGW2J6i pjmvOg7Oy9rKYDk4839zc6bhYbALCJUPrAhr2p163nn+scEcg18LIuz5vFRTfRFZ 5L/lwt+UgC8MLFBWkNgR5ma28ct7J8A4 -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:41 2025 by rpki-client