$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: JbUKmdeaLWtZ3jyc2fAxvJ/t/pmqTjvyFDQpURaEQ0I= Subject key identifier: 26:AC:AC:8B:FC:0F:AF:B0:C4:8F:B4:25:C2:A3:5A:51:E8:07:15:F4 Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 014F Signing time: Fri 22 Aug 2025 16:58:01 +0000 Manifest this update: Fri 22 Aug 2025 16:58:01 +0000 Manifest next update: Fri 29 Aug 2025 16:58:01 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: wIB+Sxp5mPIwN2l41720aQCRH5iuenLYmxd1+MCkg34=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: TReNRUcB9Slmh+4MFPwcv7z0b4ojdmnvbTh9IbkrL54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Aug 22 16:58:01 2025 GMT Not After : Aug 29 16:58:01 2025 GMT Subject: CN=68a8a199-b2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:e9:cd:26:68:6a:46:77:d3:e4:21:33:9a: c8:0d:32:1f:d9:f7:4a:ab:70:9f:c5:8f:a6:c5:64: 21:7b:9f:73:f3:e8:7a:69:64:21:74:15:d2:93:2b: 17:44:28:5f:54:ba:a7:3b:45:ff:52:12:12:fc:ac: e3:f8:83:9f:9a:e9:9f:87:42:5b:ab:fa:09:74:77: 03:bc:0e:ea:79:1b:60:7c:e4:eb:88:0f:99:ad:8f: a8:d7:8e:86:06:a3:1c:c3:b4:56:bb:4e:ae:0c:b9: da:87:ca:43:26:c3:3d:48:95:4e:82:8b:5b:7c:39: 2e:9a:28:a7:1a:21:61:be:2d:ab:66:11:08:c3:53: 44:1b:b1:e6:1b:44:2f:6d:69:ac:2e:62:03:4d:7b: 9e:58:60:69:45:2e:0d:83:bc:16:b9:65:fa:aa:4a: 34:2f:ba:37:5a:9a:8c:14:c9:23:89:e9:b9:9a:25: 8a:a0:0c:e4:fd:77:15:93:f1:75:14:c3:8d:97:1a: 6b:af:b5:c0:eb:2b:e6:00:ca:d4:cc:58:c4:ce:23: 89:c7:86:e7:db:2d:79:ed:f2:78:8e:f8:01:4d:8b: 1d:d8:c2:92:d7:ae:dc:92:fd:0a:57:c5:25:fc:91: 56:c0:cd:56:00:92:31:60:66:61:aa:83:1b:12:dc: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AC:AC:8B:FC:0F:AF:B0:C4:8F:B4:25:C2:A3:5A:51:E8:07:15:F4 X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:06:06:d7:d0:e9:b5:45:70:3a:aa:35:fc:04:24:5b:7a:37: 15:0d:4d:04:d9:ce:de:df:57:1c:36:19:a7:11:7d:7f:de:9c: 9d:c4:65:9b:75:6a:ec:a6:32:32:20:c9:ca:cc:e9:89:ac:c6: 98:c3:21:3c:c9:aa:46:c6:82:c8:aa:3e:09:b0:d4:91:8e:f9: 20:d6:98:fb:9b:d6:02:f0:f1:b5:2a:33:90:c6:66:32:bd:87: 13:3c:fd:e9:81:ed:3b:a8:9a:dd:32:4e:28:1b:3e:31:ff:42: 72:bf:47:4a:69:8d:66:be:f9:7c:b3:f0:5a:6b:f5:e3:14:cc: c0:de:6f:c0:e7:03:79:58:dc:23:28:36:9d:8f:17:a5:9e:cf: 97:e9:eb:2d:dc:8d:28:3f:87:04:ec:ae:2a:e1:86:ac:b7:4e: 18:eb:85:27:a0:ad:35:16:f7:d2:df:35:3d:3c:97:df:6f:47: db:7f:8b:82:34:76:c9:cd:f2:83:65:99:12:1a:11:39:b2:00: 73:6e:68:69:bd:fd:71:b1:8c:b8:2f:28:49:73:9f:d5:4e:b8: 40:3c:af:32:10:90:e0:9a:8c:2d:5c:3d:9b:0b:86:f5:49:ea: 7c:93:2d:3f:7f:16:b6:b9:f6:c1:5c:f9:4e:0f:ea:5f:e0:da: 2c:9a:2c:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjUwODIyMTY1ODAxWhcNMjUwODI5MTY1ODAxWjAYMRYwFAYD VQQDEw02OGE4YTE5OS1iMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fTpzSZoakZ30+QhM5rIDTIf2fdKq3CfxY+mxWQhe59z8+h6aWQhdBXSkysX RChfVLqnO0X/UhIS/Kzj+IOfmumfh0Jbq/oJdHcDvA7qeRtgfOTriA+ZrY+o146G BqMcw7RWu06uDLnah8pDJsM9SJVOgotbfDkumiinGiFhvi2rZhEIw1NEG7HmG0Qv bWmsLmIDTXueWGBpRS4Ng7wWuWX6qko0L7o3WpqMFMkjiem5miWKoAzk/XcVk/F1 FMONlxprr7XA6yvmAMrUzFjEziOJx4bn2y157fJ4jvgBTYsd2MKS167ckv0KV8Ul /JFWwM1WAJIxYGZhqoMbEtwBDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCasrIv8 D6+wxI+0JcKjWlHoBxX0MB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2BgbX0Om1RXA6qjX8BCRbejcVDU0E2c7e31ccNhmnEX1/3pydxGWb dWrspjIyIMnKzOmJrMaYwyE8yapGxoLIqj4JsNSRjvkg1pj7m9YC8PG1KjOQxmYy vYcTPP3pge07qJrdMk4oGz4x/0Jyv0dKaY1mvvl8s/Baa/XjFMzA3m/A5wN5WNwj KDadjxelns+X6est3I0oP4cE7K4q4Yast04Y64UnoK01FvfS3zU9PJffb0fbf4uC NHbJzfKDZZkSGhE5sgBzbmhpvf1xsYy4LyhJc5/VTrhAPK8yEJDgmowtXD2bC4b1 Sep8ky0/fxa2ufbBXPlOD+pf4Nosmixb -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:11 2025 by rpki-client