$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: +W3ZBIT2tPxu6Ls1VpZKUhzbcsEuz9NkXW01niwZ2Jw= Subject key identifier: 6D:EE:ED:B1:98:D0:5C:E2:54:00:5D:B1:F8:4B:16:FD:16:A5:8A:B5 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1ADA Signing time: Fri 22 Aug 2025 16:24:22 +0000 Manifest this update: Fri 22 Aug 2025 16:24:22 +0000 Manifest next update: Fri 29 Aug 2025 16:24:22 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: NOU+UNxoiRKrZ5ZVnmrpxco1EHQxsNnm20m3V5+gkRM=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: KiWJOvCe66mFAiJ0qYL+AaD4VB+ASk4GdSBTzbRbNlw=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6923 (0x1b0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Aug 22 16:24:22 2025 GMT Not After : Aug 29 16:24:22 2025 GMT Subject: CN=68a899b6-b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:f3:40:f2:90:38:42:6c:91:7e:68:b9:0e: 21:35:58:02:51:91:69:2b:89:38:85:a9:36:67:9e: 12:54:56:a2:72:67:90:f9:a5:57:41:a2:38:ba:d0: 0c:cd:84:93:c4:67:e0:b1:7e:ad:2a:b1:1c:27:75: f0:6c:40:ab:e3:74:c8:54:55:bc:fc:23:06:e6:42: d1:c5:5e:e0:79:31:2a:ed:e6:37:9b:2f:1b:83:ad: 4e:c0:7a:a2:60:94:1a:f1:c8:e1:2e:d6:49:32:ff: 6d:07:2b:0f:2c:66:e8:72:68:a2:f8:66:3a:6e:0e: 53:9d:5c:be:6e:ae:d5:4c:1b:ff:cc:32:95:61:60: a6:4d:05:ac:2e:ae:91:6b:79:89:8b:72:88:12:81: 04:80:5a:03:07:c3:b7:79:36:2c:d6:01:88:4d:0d: 2a:e2:bd:7c:ab:71:8a:f8:9f:4e:e3:56:c5:60:46: 27:b4:96:59:66:12:86:b2:56:71:c2:e8:78:5a:e7: b0:15:00:45:53:80:0b:c4:42:0e:e1:b3:b3:c0:77: 4e:74:7b:1e:92:15:97:66:b5:67:99:04:28:6e:fe: 19:b4:0c:f2:53:2a:09:df:29:76:14:ee:b3:8f:af: f7:57:47:d7:ed:09:e2:73:20:5f:9f:18:00:f5:3b: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EE:ED:B1:98:D0:5C:E2:54:00:5D:B1:F8:4B:16:FD:16:A5:8A:B5 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:7b:87:7e:56:70:55:d8:38:6d:cf:19:e8:1e:48:cb:42: 35:5e:6f:e2:c6:80:db:cc:7b:cf:4c:4d:35:ef:9d:75:49:49: f3:7a:48:0c:24:19:b4:63:b2:6e:9b:0e:e4:04:39:bf:10:31: 06:3c:c8:f1:b2:f2:b2:6e:f9:57:bb:c3:68:fa:74:d9:c5:21: b5:d0:0f:f2:de:bf:45:15:12:cc:b9:87:b1:7d:9f:42:df:8c: 07:4e:66:91:7a:78:0c:6f:f6:17:aa:d1:f7:e0:1c:46:5b:99: e5:d3:f4:3b:b7:a7:08:e6:4b:bc:45:1f:c1:c8:16:0e:0e:cf: 82:65:93:5c:92:03:4f:c3:d1:c2:3a:9b:2a:fe:98:23:0d:00: a9:9c:47:a7:fe:c2:97:c9:b8:85:34:63:7c:26:6d:37:fd:40: b1:30:f1:3d:2a:7f:92:dc:94:7c:00:31:d8:44:23:d9:17:73: 40:56:f0:36:c7:af:ca:8a:9b:4b:73:e1:ab:26:07:22:90:8e: 7f:d5:44:1d:fb:69:3c:aa:6a:d3:c0:95:77:7b:43:c6:fa:fd: 68:8e:21:89:d8:d5:39:ea:83:fd:79:d4:d3:49:18:3a:ff:51: a4:62:8a:fd:29:21:fd:3e:41:5a:de:06:37:59:1d:1e:87:2b: ab:6f:28:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwODIyMTYyNDIyWhcNMjUwODI5MTYyNDIyWjAYMRYwFAYD VQQDEw02OGE4OTliNi1iNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TLzQPKQOEJskX5ouQ4hNVgCUZFpK4k4hak2Z54SVFaicmeQ+aVXQaI4utAM zYSTxGfgsX6tKrEcJ3XwbECr43TIVFW8/CMG5kLRxV7geTEq7eY3my8bg61OwHqi YJQa8cjhLtZJMv9tBysPLGbocmii+GY6bg5TnVy+bq7VTBv/zDKVYWCmTQWsLq6R a3mJi3KIEoEEgFoDB8O3eTYs1gGITQ0q4r18q3GK+J9O41bFYEYntJZZZhKGslZx wuh4WuewFQBFU4ALxEIO4bOzwHdOdHsekhWXZrVnmQQobv4ZtAzyUyoJ3yl2FO6z j6/3V0fX7QnicyBfnxgA9TtEcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3u7bGY 0FziVABdsfhLFv0WpYq1MB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAInnuHflZwVdg4bc8Z6B5Iy0I1Xm/ixoDbzHvPTE017511SUnzekgM JBm0Y7Jumw7kBDm/EDEGPMjxsvKybvlXu8No+nTZxSG10A/y3r9FFRLMuYexfZ9C 34wHTmaRengMb/YXqtH34BxGW5nl0/Q7t6cI5ku8RR/ByBYODs+CZZNckgNPw9HC Opsq/pgjDQCpnEen/sKXybiFNGN8Jm03/UCxMPE9Kn+S3JR8ADHYRCPZF3NAVvA2 x6/KiptLc+GrJgcikI5/1UQd+2k8qmrTwJV3e0PG+v1ojiGJ2NU56oP9edTTSRg6 /1GkYor9KSH9PkFa3gY3WR0ehyurbyjj -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:35 2025 by rpki-client