$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: Hwmy2oyLgMbIT6uJ4kNMATE/5X5oPhlTQ96Z9NzK69k= Subject key identifier: AF:7A:38:F2:5D:06:91:25:D8:C5:BD:D7:2D:39:33:DD:BC:40:77:34 Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 2324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 2315 Signing time: Fri 22 Aug 2025 15:53:32 +0000 Manifest this update: Fri 22 Aug 2025 15:53:32 +0000 Manifest next update: Fri 29 Aug 2025 15:53:32 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: ErHQblfbrNdB08seNimsBiUNh5ihM9GB3F0FAAC5FL8=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8996 (0x2324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Aug 22 15:53:32 2025 GMT Not After : Aug 29 15:53:32 2025 GMT Subject: CN=68a8927c-35c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:cb:8c:b7:86:fc:7e:0a:84:63:63:7e:54: d9:31:7d:78:22:21:73:e8:35:67:11:8a:ed:ea:cb: 8e:62:70:67:94:40:cf:4e:1b:c7:05:8b:7a:de:0f: d5:0d:d0:c7:93:f7:b7:52:26:22:5a:e9:11:84:5e: 1f:a1:d3:f0:58:79:47:21:9f:67:16:03:19:48:9c: e9:dc:0a:05:e8:58:99:7f:df:6d:07:32:ff:ca:19: 35:04:5d:60:d3:24:ef:cb:dc:0b:91:40:1e:df:8e: 82:a0:41:d2:c9:44:b2:b5:af:77:08:76:ac:14:22: 4d:bc:1f:f1:08:4a:12:12:8a:24:9a:a9:d3:6c:20: 0f:4f:a5:a1:31:57:7f:a0:c5:3a:d9:a8:1f:9f:b7: a2:3f:e0:cc:35:44:5b:56:d4:1f:89:8b:a9:2e:35: f1:58:8f:50:bd:6d:ab:40:22:b4:23:70:e2:47:b1: 9b:08:9a:11:30:d2:69:0f:05:90:33:88:7a:9b:f1: 29:a8:b8:90:da:13:56:6b:1c:e2:b1:a9:db:7a:5a: 21:44:bd:cd:1e:54:cf:d2:6b:74:a9:32:2a:30:9f: be:17:40:93:26:9c:e8:12:43:40:d0:16:a6:73:85: f2:02:a8:6e:49:69:94:81:98:be:4c:6c:51:06:de: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7A:38:F2:5D:06:91:25:D8:C5:BD:D7:2D:39:33:DD:BC:40:77:34 X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:9a:15:74:70:54:e2:98:f6:bf:e1:2f:14:a4:58:ab:81: aa:13:15:56:ac:b0:21:f0:5d:34:2c:3f:d5:ec:c5:28:92:07: 3f:92:10:7e:de:20:b6:ef:35:5e:35:32:6b:54:07:f5:11:c4: 0d:fe:14:8a:2f:72:6a:b8:1c:10:9e:d7:df:76:a8:8c:be:ee: e1:b5:03:dd:2e:18:26:c5:37:70:6b:72:81:c4:e9:30:30:33: e6:4b:2d:b8:5d:6c:62:ce:33:09:a6:59:b6:10:61:2d:a1:4f: 65:ad:99:e2:a9:43:f9:59:86:b7:be:82:98:c3:be:bc:1c:51: 27:29:ed:c8:81:37:bb:85:f1:3d:12:a8:75:6c:bf:3b:75:08: ce:4a:97:07:2b:c1:33:46:86:14:79:8d:43:c7:a9:54:9b:f9: ed:59:bd:be:87:cd:c0:f7:78:3d:37:b6:75:89:4d:70:0b:de: ac:80:f0:01:85:a7:18:9b:39:8f:7e:7c:0f:a6:99:b5:d3:dc: a9:33:b9:c7:96:fc:97:61:ce:1b:55:12:b7:3f:ff:f7:d1:1e: dd:57:8e:be:34:b4:67:e9:43:1f:aa:b4:7b:05:e0:47:37:ac: 2e:7b:f2:78:0c:f0:63:b7:e3:d0:80:81:07:c7:2b:39:ff:26: 32:c7:ca:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUwODIyMTU1MzMyWhcNMjUwODI5MTU1MzMyWjAYMRYwFAYD VQQDEw02OGE4OTI3Yy0zNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4DLjLeG/H4KhGNjflTZMX14IiFz6DVnEYrt6suOYnBnlEDPThvHBYt63g/V DdDHk/e3UiYiWukRhF4fodPwWHlHIZ9nFgMZSJzp3AoF6FiZf99tBzL/yhk1BF1g 0yTvy9wLkUAe346CoEHSyUSyta93CHasFCJNvB/xCEoSEookmqnTbCAPT6WhMVd/ oMU62agfn7eiP+DMNURbVtQfiYupLjXxWI9QvW2rQCK0I3DiR7GbCJoRMNJpDwWQ M4h6m/EpqLiQ2hNWaxzisanbelohRL3NHlTP0mt0qTIqMJ++F0CTJpzoEkNA0Bam c4XyAqhuSWmUgZi+TGxRBt6ZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK96OPJd BpEl2MW91y05M928QHc0MB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVwpoVdHBU4pj2v+EvFKRYq4GqExVWrLAh8F00LD/V7MUokgc/khB+ 3iC27zVeNTJrVAf1EcQN/hSKL3JquBwQntffdqiMvu7htQPdLhgmxTdwa3KBxOkw MDPmSy24XWxizjMJplm2EGEtoU9lrZniqUP5WYa3voKYw768HFEnKe3IgTe7hfE9 Eqh1bL87dQjOSpcHK8EzRoYUeY1Dx6lUm/ntWb2+h83A93g9N7Z1iU1wC96sgPAB hacYmzmPfnwPppm109ypM7nHlvyXYc4bVRK3P//30R7dV46+NLRn6UMfqrR7BeBH N6wue/J4DPBjt+PQgIEHxys5/yYyx8qn -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:40 2025 by rpki-client