$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: bF4VTEDlAJHoq9IVGdBLkJNl8y8gnHQRXotxhjei4wc= Subject key identifier: B1:26:6E:A3:0D:65:AB:91:24:12:5D:34:79:12:D0:BD:F9:2C:EC:EF Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0C05 Signing time: Fri 22 Aug 2025 18:52:27 +0000 Manifest this update: Fri 22 Aug 2025 18:52:26 +0000 Manifest next update: Fri 29 Aug 2025 18:52:26 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: hbPom9y4oJKZjt18G3WforUBrjIhQFd8F11yvhJPytg=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Aug 22 18:52:26 2025 GMT Not After : Aug 29 18:52:26 2025 GMT Subject: CN=68a8bc6b-ee7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:92:82:c2:de:df:ab:19:2e:95:26:c8:d0: bf:47:f8:83:65:27:92:d4:7b:22:41:91:39:a3:32: 9d:68:14:7d:c9:8e:5f:1a:c4:eb:91:44:95:3b:64: ba:6a:5c:44:6f:bd:a3:69:2e:8f:37:d5:1d:e1:c5: b6:fb:c0:82:e8:74:99:6d:06:e9:f6:70:12:c3:54: a1:84:52:37:c2:55:4a:3d:ce:f0:5b:4b:63:1f:e8: 5e:4a:7f:2c:6b:dc:b3:b2:32:d1:dd:35:36:c2:ce: 72:4f:c6:d6:f5:36:fc:02:4d:c3:f4:f8:dd:23:0d: 25:2f:46:94:c7:d4:81:02:02:b4:ca:9e:f9:58:d7: 36:27:ef:10:a4:9b:9f:bd:bf:fe:bd:72:52:bc:8c: 72:03:4b:a7:93:db:28:7b:1f:60:40:6f:be:ef:65: 3b:8d:78:d0:e2:ae:32:90:14:49:ab:77:ab:84:57: 10:51:da:b3:5d:38:5c:48:7c:55:ca:09:59:04:f6: 02:e4:2f:13:81:3d:e7:97:b5:0c:a6:30:8f:8e:a4: e6:60:fd:14:b8:c7:26:50:3f:fc:97:76:6f:75:38: 93:ec:b8:47:dc:a6:37:1b:4e:a1:9e:59:41:f7:7b: 00:1a:09:7e:91:ef:54:a5:1b:d4:77:ff:ef:2b:07: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:6E:A3:0D:65:AB:91:24:12:5D:34:79:12:D0:BD:F9:2C:EC:EF X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:57:5f:9d:56:63:34:ba:ac:92:98:b8:d7:75:0b:b4:c3:a7: 7f:f0:ab:b3:cd:41:dc:fe:b9:e1:dc:77:f4:e9:00:9c:11:47: 18:6f:2b:31:26:4f:9e:1a:e7:1e:7a:a6:19:09:57:80:c5:5a: 0e:d6:43:13:28:74:94:10:03:fa:1e:5d:dd:4f:ec:69:c4:f2: 51:85:42:ba:a6:49:0b:5b:71:c6:1d:38:8d:02:23:85:23:2f: 05:0a:a0:67:6a:f3:21:b4:2b:21:87:13:9b:f6:2b:fa:a5:40: 7d:aa:3b:c4:0f:a5:e5:73:31:e5:8a:eb:8a:68:38:e4:92:1e: 8a:39:4d:df:87:5f:9a:c4:08:45:a5:3d:4e:d2:a5:b0:65:47: d9:c8:dc:bd:35:e8:ac:3f:03:49:fa:b4:36:52:e3:7b:e3:66: d9:88:4d:91:0e:b5:2c:19:3e:e3:62:e6:b3:ab:9e:12:1e:5c: d4:be:54:92:a7:cc:c9:14:1a:57:37:6a:fe:76:a8:fa:f3:d3: fc:6d:95:8d:90:46:ac:33:5c:23:05:47:4e:34:43:90:ea:b4: c1:b6:47:82:96:0b:6a:8a:2a:d7:9d:88:c3:e2:b9:e8:01:d4: 23:fb:c1:2f:28:24:cb:80:ba:f8:ec:ee:c3:93:9b:6a:42:07: d8:00:ad:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjUwODIyMTg1MjI2WhcNMjUwODI5MTg1MjI2WjAYMRYwFAYD VQQDEw02OGE4YmM2Yi1lZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpGSgsLe36sZLpUmyNC/R/iDZSeS1HsiQZE5ozKdaBR9yY5fGsTrkUSVO2S6 alxEb72jaS6PN9Ud4cW2+8CC6HSZbQbp9nASw1ShhFI3wlVKPc7wW0tjH+heSn8s a9yzsjLR3TU2ws5yT8bW9Tb8Ak3D9PjdIw0lL0aUx9SBAgK0yp75WNc2J+8QpJuf vb/+vXJSvIxyA0unk9soex9gQG++72U7jXjQ4q4ykBRJq3erhFcQUdqzXThcSHxV yglZBPYC5C8TgT3nl7UMpjCPjqTmYP0UuMcmUD/8l3ZvdTiT7LhH3KY3G06hnllB 93sAGgl+ke9UpRvUd//vKwcdrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEmbqMN ZauRJBJdNHkS0L35LOzvMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARV1+dVmM0uqySmLjXdQu0w6d/8KuzzUHc/rnh3Hf06QCcEUcYbysx Jk+eGuceeqYZCVeAxVoO1kMTKHSUEAP6Hl3dT+xpxPJRhUK6pkkLW3HGHTiNAiOF Iy8FCqBnavMhtCshhxOb9iv6pUB9qjvED6XlczHliuuKaDjkkh6KOU3fh1+axAhF pT1O0qWwZUfZyNy9NeisPwNJ+rQ2UuN742bZiE2RDrUsGT7jYuazq54SHlzUvlSS p8zJFBpXN2r+dqj689P8bZWNkEasM1wjBUdONEOQ6rTBtkeClgtqiirXnYjD4rno AdQj+8EvKCTLgLr47O7Dk5tqQgfYAK1j -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:56 2025 by rpki-client