$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft File: ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json) Hash identifier: zy5HKSmgQt27kIR+iuSYgFKGkN/o5cq6eQlNetoiDys= Subject key identifier: B4:00:A9:75:B6:B9:3B:B5:B8:80:35:AF:27:E9:F8:4A:F8:81:7D:05 Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft Manifest number: 34BE Signing time: Fri 22 Aug 2025 15:15:47 +0000 Manifest this update: Fri 22 Aug 2025 15:15:47 +0000 Manifest next update: Fri 29 Aug 2025 15:15:47 +0000 Files and hashes: 1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: k9gl9mxpiMEAcv4Yr4shLs0cVCeqbR1DuFeq4/41ykE=) 2: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: Yhv6SLVoZ0lTl3VQ8oBTiyjwIMld5GdKG4lLfPu9iQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Validity Not Before: Aug 22 15:15:47 2025 GMT Not After : Aug 29 15:15:47 2025 GMT Subject: CN=68a889a3-2a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:e4:32:03:d4:cd:86:eb:43:cc:f0:98:3e: 98:d9:60:2a:00:43:3f:8b:f9:f1:68:f0:66:60:67: f3:51:f6:03:d2:4a:19:ee:9c:9f:14:54:0c:9b:a9: e6:d5:35:e5:47:4d:95:fb:ef:d5:b6:28:02:a6:f9: 4d:b1:3b:2b:9a:4f:08:34:4c:a1:64:06:d9:a9:2d: df:55:b0:44:9d:57:b8:91:c7:e7:88:d7:b2:5f:4c: 9b:e2:1a:df:b5:1c:0b:3d:5e:af:25:92:77:78:4c: ce:bf:a0:bb:6b:91:4f:92:42:4b:f3:ce:a5:f6:9f: 52:db:c7:15:9e:b7:df:8f:3a:b6:e9:74:99:e9:8f: bc:ee:08:20:00:cc:31:e6:c3:6c:6a:70:68:2d:b6: 2a:26:c7:b9:54:c9:f0:9a:c6:62:47:6c:19:71:4e: 93:75:e6:bf:bd:f6:3e:03:d4:84:e6:62:2b:2c:6e: ef:5d:f9:db:60:7c:53:fb:24:c9:6b:9d:b1:8e:d2: 16:ef:d5:1d:aa:b4:66:c1:78:e9:9e:80:9e:d0:46: 43:da:ce:7f:54:a3:8f:f4:fc:25:b0:fb:61:fd:09: d7:91:ab:e1:cb:52:46:a9:74:09:47:d1:21:e6:ad: ed:bb:c6:0e:bd:68:56:8c:b4:40:69:0f:77:54:49: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:00:A9:75:B6:B9:3B:B5:B8:80:35:AF:27:E9:F8:4A:F8:81:7D:05 X509v3 Authority Key Identifier: keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ab:50:8a:e2:7f:ad:ee:cc:4e:36:ad:9c:f9:d9:ba:95:cd: 4b:b4:10:23:92:89:57:00:fd:1c:42:64:ed:32:6a:0b:ce:be: 4b:b3:bd:64:fe:d4:66:84:1a:ad:4d:e8:5a:0d:af:9f:b0:9e: 78:b4:8a:49:bb:fd:11:3e:4b:77:23:69:d8:c3:e3:ea:d0:82: ff:56:8e:03:74:71:1d:3b:ad:76:22:36:47:ff:53:2f:d7:05: a6:3b:c0:60:f3:bf:2b:8c:a6:4a:44:8d:80:81:52:69:10:85: 57:97:ce:15:d3:e1:d6:95:40:d2:6d:55:5e:65:6b:9a:91:1d: 09:56:0a:84:f4:e6:71:90:1f:91:7b:c9:75:37:71:99:25:b1: 94:6d:98:4e:61:05:83:10:b3:a1:2f:b7:13:91:d8:29:d4:79: 33:5c:cb:a6:79:8d:03:2e:9c:44:96:9d:6c:5c:92:28:65:c7: 7f:20:94:4d:4d:c6:24:64:16:6c:64:60:b0:c3:a8:2a:57:76: 4b:22:31:30:f4:49:ec:e7:0a:70:ba:2f:96:a6:b5:5e:86:45: e5:72:dd:91:41:2c:6b:9a:75:66:fa:54:9d:f3:28:18:64:d1: 41:09:8a:01:fa:c9:61:89:5e:15:73:9c:f1:f1:35:41:6f:2f: 2f:3c:e7:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCNjMxMTAvBgNVBAUTKDY2RUEwRjgzQkREMzYzMkJGRjE5NDAwQjNBMUJBNkZF REZGQzU1ODcwHhcNMjUwODIyMTUxNTQ3WhcNMjUwODI5MTUxNTQ3WjAYMRYwFAYD VQQDEw02OGE4ODlhMy0yYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcXkMgPUzYbrQ8zwmD6Y2WAqAEM/i/nxaPBmYGfzUfYD0koZ7pyfFFQMm6nm 1TXlR02V++/VtigCpvlNsTsrmk8INEyhZAbZqS3fVbBEnVe4kcfniNeyX0yb4hrf tRwLPV6vJZJ3eEzOv6C7a5FPkkJL886l9p9S28cVnrffjzq26XSZ6Y+87gggAMwx 5sNsanBoLbYqJse5VMnwmsZiR2wZcU6Tdea/vfY+A9SE5mIrLG7vXfnbYHxT+yTJ a52xjtIW79UdqrRmwXjpnoCe0EZD2s5/VKOP9PwlsPth/QnXkavhy1JGqXQJR9Eh 5q3tu8YOvWhWjLRAaQ93VEl29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQAqXW2 uTu1uIA1ryfp+Er4gX0FMB8GA1UdIwQYMBaAFGbqD4O902Mr/xlACzobpv7f/FWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0I2My9FMUIwNTRGQzFE QTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5dl9HVUFMT2h1bV90XzhW WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b1BnNzNUWXl2X0dVQUxPaHVtX3RfOFZZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0I2My9FMUIwNTRGQzFEQTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5 dl9HVUFMT2h1bV90XzhWWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1q1CK4n+t7sxONq2c+dm6lc1LtBAjkolXAP0cQmTtMmoLzr5Ls71k /tRmhBqtTehaDa+fsJ54tIpJu/0RPkt3I2nYw+Pq0IL/Vo4DdHEdO612IjZH/1Mv 1wWmO8Bg878rjKZKRI2AgVJpEIVXl84V0+HWlUDSbVVeZWuakR0JVgqE9OZxkB+R e8l1N3GZJbGUbZhOYQWDELOhL7cTkdgp1HkzXMumeY0DLpxElp1sXJIoZcd/IJRN TcYkZBZsZGCww6gqV3ZLIjEw9Ens5wpwui+WprVehkXlct2RQSxrmnVm+lSd8ygY ZNFBCYoB+slhiV4Vc5zx8TVBby8vPOeA -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:21 2025 by rpki-client