$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: xzOrz/bEvtraf1CxNxhm//d4lKjnox3z5olIyjYJalc= Subject key identifier: 77:E7:C5:38:93:9D:08:14:00:06:F5:6B:24:7F:3C:7E:CC:37:C2:D3 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 013C Signing time: Sat 23 Aug 2025 04:39:01 +0000 Manifest this update: Sat 23 Aug 2025 04:39:01 +0000 Manifest next update: Sat 30 Aug 2025 04:39:01 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: QWAc+Tpoxsqwqupgs8YLwaGd5IpaIC9zR2iiUruRGKA=) 2: A4FA29BC750411F09F0F3145C4F9AE02.roa (hash: eq3Foq5M9QUghcS91tb93v1XHbNde25fjNDc1FX1j6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Aug 23 04:39:01 2025 GMT Not After : Aug 30 04:39:01 2025 GMT Subject: CN=68a945e5-ff4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2e:9b:46:49:72:5d:7a:1b:71:7d:fa:93:c3: 41:76:18:b2:de:36:9a:a4:40:97:55:75:e7:af:6d: 57:44:45:ef:ac:d2:c3:f0:d5:3a:50:55:bc:ae:3a: db:92:22:8e:6c:ae:c7:3c:82:30:95:31:42:cb:c3: 8a:cf:ce:67:54:0e:bb:ab:4d:69:40:47:b5:22:0b: a0:7d:c0:ae:78:ae:d0:ef:e8:81:31:1e:b3:2c:c1: f1:34:fd:1a:74:59:cc:21:8c:e2:fb:7a:d4:5c:18: 55:c4:8f:52:46:c6:a5:1f:2c:6e:7b:a8:05:72:9d: 57:28:05:01:7f:1e:f7:7c:15:0e:0d:b1:32:f1:d0: c4:36:35:c3:a4:d2:9f:76:35:a9:ed:55:c6:b9:e9: f7:8d:1a:39:25:a3:1d:0a:6f:39:eb:f3:08:16:0d: 56:da:78:04:58:5c:a4:03:3c:9e:73:a1:06:49:a5: d4:d9:e3:3b:b8:5a:fe:01:1a:12:7a:4f:14:e3:fe: a8:92:58:f5:e2:50:19:bb:b6:f2:67:7f:66:f3:91: 54:82:24:a2:c7:ab:9d:91:50:1b:7c:d4:a5:f6:de: 82:93:c1:07:66:26:30:5a:37:b5:6f:2a:56:d3:27: a8:33:5b:74:14:fa:ef:0f:f2:f6:c0:96:5f:f9:c1: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E7:C5:38:93:9D:08:14:00:06:F5:6B:24:7F:3C:7E:CC:37:C2:D3 X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0e:c8:89:0d:94:95:01:51:5b:88:61:ec:39:fd:ce:24:d7: c0:a1:e4:88:ab:25:b9:11:78:30:8b:50:87:46:ab:52:12:84: 46:67:93:61:90:4c:f4:f0:16:1c:8c:d0:ae:a0:07:10:5b:b9: d4:4b:a8:91:da:28:84:b4:53:6a:2f:81:48:b0:1f:01:cd:a7: 08:4e:6d:db:0f:1e:4a:d6:a1:e0:3e:5d:ee:8c:4e:67:fb:a1: 0e:69:24:54:fb:a6:06:19:6e:b9:33:00:c5:63:e7:f8:b8:5e: a6:08:90:b4:96:43:33:a1:26:a5:43:a0:c6:b5:94:a9:8c:9c: 7a:b8:a4:09:36:c8:71:ec:f1:cd:18:c6:e9:21:28:25:81:87: 63:e6:0a:11:73:5b:26:7b:77:4d:f1:ee:80:0b:ab:24:e3:0d: 81:77:92:04:7c:21:53:18:1b:0e:fb:ce:b2:6c:d5:13:59:07: 2d:24:0d:5b:d2:52:4f:b3:d1:20:93:19:e2:de:05:30:4a:24: fe:c5:22:42:8d:b2:b5:72:60:34:ff:9a:94:74:81:c4:31:d6: 97:9e:4d:98:6d:71:23:1c:27:8c:bc:ea:82:24:23:d2:4e:d2: d0:09:12:83:f2:7d:56:5c:92:84:12:c3:00:74:ed:a6:7e:ad: d7:4d:55:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjUwODIzMDQzOTAxWhcNMjUwODMwMDQzOTAxWjAYMRYwFAYD VQQDEw02OGE5NDVlNS1mZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7S6bRklyXXobcX36k8NBdhiy3jaapECXVXXnr21XREXvrNLD8NU6UFW8rjrb kiKObK7HPIIwlTFCy8OKz85nVA67q01pQEe1IgugfcCueK7Q7+iBMR6zLMHxNP0a dFnMIYzi+3rUXBhVxI9SRsalHyxue6gFcp1XKAUBfx73fBUODbEy8dDENjXDpNKf djWp7VXGuen3jRo5JaMdCm856/MIFg1W2ngEWFykAzyec6EGSaXU2eM7uFr+ARoS ek8U4/6oklj14lAZu7byZ39m85FUgiSix6udkVAbfNSl9t6Ck8EHZiYwWje1bypW 0yeoM1t0FPrvD/L2wJZf+cHESwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfnxTiT nQgUAAb1ayR/PH7MN8LTMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFDsiJDZSVAVFbiGHsOf3OJNfAoeSIqyW5EXgwi1CHRqtSEoRGZ5Nh kEz08BYcjNCuoAcQW7nUS6iR2iiEtFNqL4FIsB8BzacITm3bDx5K1qHgPl3ujE5n +6EOaSRU+6YGGW65MwDFY+f4uF6mCJC0lkMzoSalQ6DGtZSpjJx6uKQJNshx7PHN GMbpISglgYdj5goRc1sme3dN8e6AC6sk4w2Bd5IEfCFTGBsO+86ybNUTWQctJA1b 0lJPs9Egkxni3gUwSiT+xSJCjbK1cmA0/5qUdIHEMdaXnk2YbXEjHCeMvOqCJCPS TtLQCRKD8n1WXJKEEsMAdO2mfq3XTVWq -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:19 2025 by rpki-client