$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: D65lJfzg1oXJNsYpgiIpNq3RiZtIXgGnRH0l+GOuSvo= Subject key identifier: 3E:A7:F5:E4:AE:D8:8F:3F:29:36:F7:9B:DC:2E:D7:C9:76:93:78:47 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D84 Signing time: Fri 22 Aug 2025 15:33:30 +0000 Manifest this update: Fri 22 Aug 2025 15:33:30 +0000 Manifest next update: Fri 29 Aug 2025 15:33:30 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: ox/qNnS64tKfWMxIMEjUiEwM34QOYHMxEWBB9xI41S0=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11686 (0x2da6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Aug 22 15:33:30 2025 GMT Not After : Aug 29 15:33:30 2025 GMT Subject: CN=68a88dca-f89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:48:5d:7f:4d:3b:64:a3:f9:93:3d:11:7f:38: fa:3e:93:40:0b:15:3a:12:2a:4a:e6:88:53:69:3d: 88:37:2d:1b:41:15:a4:8c:0f:60:b2:7a:8e:6e:3f: 88:13:75:09:1d:ba:dc:73:67:2f:be:49:a9:59:68: 96:0d:34:58:ed:ab:c5:09:b5:07:eb:32:9b:61:c5: 5a:cc:b6:dd:45:35:8e:85:5b:06:a6:d3:c6:4d:a2: 2e:b6:f1:62:c4:5b:a5:ad:25:6f:5d:86:54:a2:de: 3a:38:f7:f9:7a:82:62:fd:e8:0b:74:1b:90:91:4e: bd:9b:6c:6a:af:03:4d:f0:38:1d:af:81:ce:40:ce: bf:e4:6a:a7:8f:f1:44:7a:5d:d1:9a:97:e9:5c:f2: 15:06:44:1b:d4:eb:76:8b:8e:4d:da:b6:94:7a:33: 8b:17:25:7c:ea:2c:4c:78:e0:13:00:50:bd:86:4b: 64:08:6a:9e:11:f9:4b:77:59:10:93:3d:4c:65:16: 6f:d3:8a:d4:a5:f5:c9:17:0f:d5:39:7c:7d:e3:2b: fe:e8:74:0c:30:2c:a9:f7:05:87:9f:a4:c6:e7:02: 3b:2e:d9:77:c6:88:16:6c:f5:dd:0e:fa:9d:38:22: fb:08:aa:b7:c3:1e:1a:e3:55:a2:f6:86:c3:bf:a5: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A7:F5:E4:AE:D8:8F:3F:29:36:F7:9B:DC:2E:D7:C9:76:93:78:47 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:54:40:90:cc:9a:ae:7f:20:70:11:97:7d:64:5a:e9:9b:a8: bd:9c:39:35:0c:a1:33:7a:b7:92:3a:be:da:4b:66:51:a8:7e: 47:20:27:8d:e7:67:9b:97:db:60:11:d2:9f:1c:ac:50:55:c0: a9:db:f7:cd:da:93:1f:c1:9a:4b:7c:e8:f6:90:36:3c:cf:e1: 26:76:9e:70:6c:b5:2d:d7:af:46:d7:53:98:41:68:2a:d1:25: a5:a9:17:3e:ad:d3:3b:83:9f:66:5c:06:74:bf:cf:f9:f5:7c: 4b:3b:be:c4:b1:74:70:da:1c:42:be:a5:c1:04:32:7d:b6:2e: 5b:24:a5:60:d4:a2:26:ce:0a:0e:04:97:1f:df:ce:3f:48:3c: 57:3c:8e:5d:66:33:19:45:77:49:e5:d4:18:fb:a0:d9:7e:bb: f8:95:8f:06:a1:3d:b3:88:f6:35:0f:90:03:b8:fd:59:cb:0c: 19:37:18:64:3b:a2:5b:89:9e:cc:1f:95:43:b2:f1:80:fd:97: 0c:01:a3:2c:bf:11:e5:5d:11:f6:10:3b:8c:e5:25:3d:c8:2f: 91:75:0a:63:26:af:03:50:9b:7d:11:19:27:1c:6f:6f:66:22: 41:69:46:07:b9:10:cb:5c:1a:90:28:1a:8a:c6:ea:59:9e:78: c1:60:79:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwODIyMTUzMzMwWhcNMjUwODI5MTUzMzMwWjAYMRYwFAYD VQQDEw02OGE4OGRjYS1mODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9khdf007ZKP5kz0Rfzj6PpNACxU6EipK5ohTaT2INy0bQRWkjA9gsnqObj+I E3UJHbrcc2cvvkmpWWiWDTRY7avFCbUH6zKbYcVazLbdRTWOhVsGptPGTaIutvFi xFulrSVvXYZUot46OPf5eoJi/egLdBuQkU69m2xqrwNN8Dgdr4HOQM6/5Gqnj/FE el3RmpfpXPIVBkQb1Ot2i45N2raUejOLFyV86ixMeOATAFC9hktkCGqeEflLd1kQ kz1MZRZv04rUpfXJFw/VOXx94yv+6HQMMCyp9wWHn6TG5wI7Ltl3xogWbPXdDvqd OCL7CKq3wx4a41Wi9obDv6UxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6n9eSu 2I8/KTb3m9wu18l2k3hHMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9VECQzJqufyBwEZd9ZFrpm6i9nDk1DKEzereSOr7aS2ZRqH5HICeN 52ebl9tgEdKfHKxQVcCp2/fN2pMfwZpLfOj2kDY8z+Emdp5wbLUt169G11OYQWgq 0SWlqRc+rdM7g59mXAZ0v8/59XxLO77EsXRw2hxCvqXBBDJ9ti5bJKVg1KImzgoO BJcf384/SDxXPI5dZjMZRXdJ5dQY+6DZfrv4lY8GoT2ziPY1D5ADuP1ZywwZNxhk O6JbiZ7MH5VDsvGA/ZcMAaMsvxHlXRH2EDuM5SU9yC+RdQpjJq8DUJt9ERknHG9v ZiJBaUYHuRDLXBqQKBqKxupZnnjBYHls -----END CERTIFICATE-----Generated at Sat Aug 23 22:30:11 2025 by rpki-client