$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: upgvHEl1z/mxNBkdrd2TMKDlJljKI8RCmbOar9Ml9Iw= Subject key identifier: A9:4E:3B:A3:B2:74:8F:6C:78:B1:FB:06:B9:85:85:5C:0A:FF:9A:F9 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 065D Signing time: Fri 22 Aug 2025 22:44:08 +0000 Manifest this update: Fri 22 Aug 2025 22:44:07 +0000 Manifest next update: Fri 29 Aug 2025 22:44:07 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: LoRnkjDxORQ4oOx3JZjrg+dMnzWIRYo2i9OU+iPTYgc=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Aug 22 22:44:07 2025 GMT Not After : Aug 29 22:44:07 2025 GMT Subject: CN=68a8f2b7-41ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:0e:70:c5:58:90:70:5f:c9:ae:e8:f1:b3: 2e:56:f1:e5:17:61:65:75:cf:0e:91:8a:5b:fb:4d: 6a:21:5f:6d:d2:70:c0:f0:18:e1:35:b3:59:b9:c4: fa:8e:b0:79:43:9b:96:2d:3c:be:6f:5c:aa:41:51: 77:24:0c:1e:15:13:de:97:d2:55:67:db:5b:f2:55: 2c:b4:25:1a:ab:38:be:8f:18:ae:24:46:27:df:ab: f5:8f:6a:6e:65:bf:8b:4a:07:00:06:3a:ae:17:08: 4e:7a:c9:4d:e9:6e:c5:28:fd:10:9b:6e:52:d9:4a: 0d:3e:d9:cf:60:66:16:2e:a2:5f:17:22:81:f4:b6: 85:72:b5:3f:c2:a4:b9:02:8a:18:b2:81:50:24:1b: 40:87:aa:31:80:ba:44:bb:f5:12:7e:ec:08:ad:cf: cd:10:f4:11:04:15:4e:83:36:e0:a7:45:27:7e:8d: 2b:42:99:96:f7:db:ac:dc:d5:aa:a3:59:76:87:92: 59:0b:fa:b0:24:a9:77:3d:30:1e:d1:eb:a4:b0:cd: 58:a2:70:9d:c6:f7:94:d2:71:f7:af:e5:29:78:a2: 7f:1d:97:c3:ff:cb:50:e2:d3:60:93:d9:41:be:9c: d6:ef:e4:f5:6c:26:e3:bd:ca:20:da:5e:20:52:15: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:3B:A3:B2:74:8F:6C:78:B1:FB:06:B9:85:85:5C:0A:FF:9A:F9 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:9f:ac:82:8f:e5:a4:9e:5b:a6:8c:53:a1:e9:0e:b9:1a:d1: c5:dc:75:bc:ad:18:a9:15:a4:b6:ca:4d:81:c7:35:c1:42:fc: 87:73:3c:3c:55:96:ef:71:d4:b9:85:1c:8d:f1:0f:34:5e:81: fe:12:22:d7:0e:3a:3c:5d:82:8e:d5:a2:9d:c5:1b:66:8d:ac: b8:37:85:02:3a:db:74:64:1b:d4:9a:d8:68:15:23:51:7b:2b: 5f:5a:13:dd:c1:84:f8:3a:f1:85:51:bd:d7:9d:2a:38:3f:da: 03:b0:0d:10:fd:2b:f3:f1:8b:67:b3:87:d2:6b:39:26:7b:5d: 13:01:7b:e8:34:ed:eb:d5:dd:00:f4:96:64:05:41:b5:8b:a0: 2a:83:8b:aa:be:67:ca:1d:2f:f0:1f:0e:26:0a:fa:04:06:09: 81:06:37:9f:ea:a8:fa:56:e7:4c:de:6d:79:ac:e4:79:5e:80: 58:29:52:63:66:dd:f9:c4:8c:2c:9f:f7:d2:45:4b:90:ec:5e: ae:fe:f6:f7:86:cb:8c:15:30:ef:c9:03:18:57:d5:1b:ac:b8: c2:fa:7f:ec:7c:56:b9:d1:d3:fd:9b:3f:7a:c8:a7:e0:ca:47: 1a:b2:69:e1:83:87:91:3b:4b:d4:bc:6e:2d:01:be:30:85:bd: 51:1b:d1:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUwODIyMjI0NDA3WhcNMjUwODI5MjI0NDA3WjAYMRYwFAYD VQQDEw02OGE4ZjJiNy00MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutQOcMVYkHBfya7o8bMuVvHlF2Fldc8OkYpb+01qIV9t0nDA8BjhNbNZucT6 jrB5Q5uWLTy+b1yqQVF3JAweFRPel9JVZ9tb8lUstCUaqzi+jxiuJEYn36v1j2pu Zb+LSgcABjquFwhOeslN6W7FKP0Qm25S2UoNPtnPYGYWLqJfFyKB9LaFcrU/wqS5 AooYsoFQJBtAh6oxgLpEu/USfuwIrc/NEPQRBBVOgzbgp0Unfo0rQpmW99us3NWq o1l2h5JZC/qwJKl3PTAe0euksM1YonCdxveU0nH3r+UpeKJ/HZfD/8tQ4tNgk9lB vpzW7+T1bCbjvcog2l4gUhW22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlOO6Oy dI9seLH7BrmFhVwK/5r5MB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARn6yCj+WknlumjFOh6Q65GtHF3HW8rRipFaS2yk2BxzXBQvyHczw8 VZbvcdS5hRyN8Q80XoH+EiLXDjo8XYKO1aKdxRtmjay4N4UCOtt0ZBvUmthoFSNR eytfWhPdwYT4OvGFUb3XnSo4P9oDsA0Q/Svz8Ytns4fSazkme10TAXvoNO3r1d0A 9JZkBUG1i6Aqg4uqvmfKHS/wHw4mCvoEBgmBBjef6qj6VudM3m15rOR5XoBYKVJj Zt35xIwsn/fSRUuQ7F6u/vb3hsuMFTDvyQMYV9UbrLjC+n/sfFa50dP9mz96yKfg ykcasmnhg4eRO0vUvG4tAb4whb1RG9Hx -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:21 2025 by rpki-client