$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: vLKF8UE9UR7L5p9tk03Fi6L3tSEJVWPpslwq4WPYNPI= Subject key identifier: ED:D7:6A:7F:4A:72:FB:28:6D:76:9E:41:0D:06:7E:82:C3:4C:19:68 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 27F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 27EB Signing time: Fri 22 Aug 2025 15:40:06 +0000 Manifest this update: Fri 22 Aug 2025 15:40:06 +0000 Manifest next update: Fri 29 Aug 2025 15:40:06 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: SkbkZCj2UrDXR+RHxQq+J2eE5jCqP59PsSiufJ3KWSU=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10233 (0x27f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Aug 22 15:40:06 2025 GMT Not After : Aug 29 15:40:06 2025 GMT Subject: CN=68a88f56-49f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:ef:ce:03:e8:c7:eb:9e:bd:b5:c6:6b:ca: 35:29:c4:5e:f2:b0:c4:15:c4:a1:b4:b3:4a:f2:a5: 14:60:e0:02:c5:f6:f2:97:c7:3c:cf:57:91:94:f8: 4c:f9:7a:a5:ae:89:05:ab:cf:8a:76:e4:5c:d0:4e: 17:89:58:46:a2:5a:62:62:4b:28:8e:f5:4e:1b:31: b2:a4:8b:93:98:9a:a3:57:0b:23:a8:e4:f2:87:4f: 27:36:13:75:42:91:5f:ba:75:06:32:9d:8c:8f:32: bc:d1:b1:00:20:dc:cf:f4:cc:9a:10:5c:a7:c6:e9: 55:cb:3c:64:00:34:71:f0:49:dc:6f:c5:2b:76:9a: 1d:6a:83:12:6a:a9:73:51:59:81:bd:36:11:8d:bd: 10:7c:72:bd:26:a8:4b:70:42:27:40:0f:b0:c2:62: 91:6c:fc:26:0f:1c:4e:87:aa:39:a0:17:64:b6:5f: 19:99:ed:ec:5f:5f:c1:58:29:e4:38:3a:a2:63:7f: 16:1f:57:b3:80:c6:3d:37:c9:6b:57:ce:f1:f8:bc: df:89:ba:f5:43:b5:bb:cc:58:16:13:1e:9d:d1:36: 2f:cc:2e:18:a1:c1:30:7e:2f:bc:8d:8c:d6:3a:e6: 03:73:84:63:d2:99:c0:0f:ca:4c:92:74:6d:46:2c: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:6A:7F:4A:72:FB:28:6D:76:9E:41:0D:06:7E:82:C3:4C:19:68 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:bf:98:bd:89:33:42:db:a0:c1:64:17:69:f5:15:22:14:3e: 2a:91:9a:3c:92:d1:f3:37:5b:1e:56:43:74:16:14:a3:b1:ac: b9:5a:8f:19:d2:42:7d:e9:21:f6:3b:2d:5d:a4:50:a4:f0:9e: 9b:9a:c6:51:eb:50:37:fb:33:af:32:3c:45:78:e6:64:64:d8: 07:e8:cb:ef:70:b3:17:4e:0e:34:00:04:95:2f:fa:c1:01:2a: 52:d1:1c:be:cc:13:7b:54:6e:17:06:a2:22:96:d1:2b:80:30: 81:89:fb:93:49:78:b6:ed:ac:6b:9f:e6:5d:07:9e:cb:6a:48: 9c:a8:ae:6c:70:f1:08:d8:7e:3d:87:32:3f:c7:14:74:d1:74: eb:e8:6d:b0:fd:b2:bf:5a:20:bf:e0:cc:be:a9:8b:a8:19:a3: ec:78:86:1c:6c:68:ad:23:a5:c0:d7:13:1c:d7:b8:db:76:dc: 93:e2:6f:ad:4b:37:85:88:02:91:91:84:05:b8:e4:08:29:c7: 8c:29:8e:6b:43:bb:24:59:a5:17:5e:6c:d6:4d:a6:bb:9d:7e: 3f:ac:05:80:4f:00:eb:07:df:ca:97:0b:8c:38:6e:ca:65:f5: b2:88:1a:49:9c:46:d2:ac:37:4e:af:d1:ba:a6:e4:e6:47:58: 97:2b:e0:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUwODIyMTU0MDA2WhcNMjUwODI5MTU0MDA2WjAYMRYwFAYD VQQDEw02OGE4OGY1Ni00OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA3vzgPox+uevbXGa8o1KcRe8rDEFcShtLNK8qUUYOACxfbyl8c8z1eRlPhM +XqlrokFq8+KduRc0E4XiVhGolpiYksojvVOGzGypIuTmJqjVwsjqOTyh08nNhN1 QpFfunUGMp2MjzK80bEAINzP9MyaEFynxulVyzxkADRx8Encb8UrdpodaoMSaqlz UVmBvTYRjb0QfHK9JqhLcEInQA+wwmKRbPwmDxxOh6o5oBdktl8Zme3sX1/BWCnk ODqiY38WH1ezgMY9N8lrV87x+Lzfibr1Q7W7zFgWEx6d0TYvzC4YocEwfi+8jYzW OuYDc4Rj0pnAD8pMknRtRixjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3Xan9K cvsobXaeQQ0GfoLDTBloMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAov5i9iTNC26DBZBdp9RUiFD4qkZo8ktHzN1seVkN0FhSjsay5Wo8Z 0kJ96SH2Oy1dpFCk8J6bmsZR61A3+zOvMjxFeOZkZNgH6MvvcLMXTg40AASVL/rB ASpS0Ry+zBN7VG4XBqIiltErgDCBifuTSXi27axrn+ZdB57LakicqK5scPEI2H49 hzI/xxR00XTr6G2w/bK/WiC/4My+qYuoGaPseIYcbGitI6XA1xMc17jbdtyT4m+t SzeFiAKRkYQFuOQIKceMKY5rQ7skWaUXXmzWTaa7nX4/rAWATwDrB9/KlwuMOG7K ZfWyiBpJnEbSrDdOr9G6puTmR1iXK+A0 -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:23 2025 by rpki-client