$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: zVecXST01bj5MGqagFcRmVt6IrTVe5OCVMfM7j0QWiY= Subject key identifier: D0:E3:E7:58:59:4E:18:BA:FF:4D:FF:6C:3C:CA:50:AF:C5:04:91:19 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: C8 Signing time: Sat 23 Aug 2025 05:54:45 +0000 Manifest this update: Sat 23 Aug 2025 05:54:44 +0000 Manifest next update: Sat 30 Aug 2025 05:54:44 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: yOmSOdSgi/+CjvtJqVJ1dJz7DFGaRDnjglgEAOHdijA=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Aug 23 05:54:44 2025 GMT Not After : Aug 30 05:54:44 2025 GMT Subject: CN=68a957a4-1b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:e6:1e:42:57:7f:50:b6:c8:13:be:54:bc: 4e:2a:97:c4:be:ac:05:a1:34:0b:01:fe:43:f3:b9: ae:0d:d6:f7:80:19:c6:a6:14:fd:28:cd:a0:33:3a: a1:2e:a7:e3:48:51:01:fc:c8:57:54:1e:63:50:63: 39:6e:19:a5:f9:38:5b:ff:f1:bd:19:9f:04:83:7b: 84:af:ea:c2:89:6c:22:30:bb:e8:b7:66:92:de:b3: 52:b6:67:1e:21:81:e4:76:5e:cc:83:aa:02:11:a0: 63:7d:4e:18:11:07:a3:83:1f:ec:cb:fe:e0:e4:b3: 9e:a5:65:20:cd:62:c3:0f:72:3d:95:b4:8c:02:f3: b4:2e:89:56:71:69:fc:90:c5:c1:3c:01:60:3c:7a: db:c3:a3:36:2a:d1:24:5d:b7:0b:d3:44:46:f5:f2: f7:99:d9:83:57:2c:c4:f4:5c:08:d5:8b:76:eb:6b: eb:42:7f:03:cf:05:5f:78:b4:39:19:54:9a:5d:53: 94:6a:61:21:0f:71:df:d9:eb:0c:05:eb:6d:90:59: 14:af:1e:52:7a:71:7f:0e:68:61:49:10:60:d2:b4: c2:07:32:66:64:88:4a:35:b0:30:64:97:3d:63:76: a7:54:e1:8a:ba:dc:c7:f7:5e:eb:97:85:61:79:9e: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:E7:58:59:4E:18:BA:FF:4D:FF:6C:3C:CA:50:AF:C5:04:91:19 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:63:79:a7:6d:05:de:cb:af:dc:fd:71:d5:d5:42:22:03:45: fd:ce:3e:bc:a7:e9:75:f4:07:1c:97:b5:cd:e4:ce:6a:df:02: e8:32:7e:8d:93:a5:ee:a8:ce:74:33:53:82:93:83:c8:c2:92: 3f:10:fa:0e:c7:74:9f:bb:95:71:9f:92:d6:cf:83:e5:e3:c7: db:76:df:bf:71:a7:99:86:8b:35:74:38:61:71:97:59:65:01: 76:b5:76:d6:ff:ed:35:9c:99:4d:6c:92:73:02:82:e2:84:88: 7a:dc:e6:6f:a4:b5:84:4c:96:b7:c3:9e:29:0c:a4:b9:f1:b4: 39:ce:c9:e5:7e:65:a2:06:4b:bb:9e:1b:a6:d8:1e:5c:46:fd: e8:67:c8:f4:c0:13:43:a2:84:1b:83:37:13:1f:1e:57:74:38: b5:52:99:a7:4f:8c:41:92:66:fc:80:58:29:c6:37:0c:40:69: cc:d0:1d:80:40:32:95:7f:08:23:20:05:10:49:cd:7a:6a:81: 0b:23:a7:fd:fd:f8:79:10:d5:0f:95:0d:7f:78:3d:ea:c4:0a: 82:6a:e1:bb:fd:c1:f8:bb:e1:49:8d:0b:f4:80:88:d5:24:36: c8:03:f4:cb:22:b2:1c:64:64:5f:9d:37:65:c0:7d:30:79:7f: 08:52:59:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUwODIzMDU1NDQ0WhcNMjUwODMwMDU1NDQ0WjAYMRYwFAYD VQQDEw02OGE5NTdhNC0xYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+7mHkJXf1C2yBO+VLxOKpfEvqwFoTQLAf5D87muDdb3gBnGphT9KM2gMzqh LqfjSFEB/MhXVB5jUGM5bhml+Thb//G9GZ8Eg3uEr+rCiWwiMLvot2aS3rNStmce IYHkdl7Mg6oCEaBjfU4YEQejgx/sy/7g5LOepWUgzWLDD3I9lbSMAvO0LolWcWn8 kMXBPAFgPHrbw6M2KtEkXbcL00RG9fL3mdmDVyzE9FwI1Yt262vrQn8DzwVfeLQ5 GVSaXVOUamEhD3Hf2esMBettkFkUrx5SenF/DmhhSRBg0rTCBzJmZIhKNbAwZJc9 Y3anVOGKutzH917rl4VheZ7yBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDj51hZ Thi6/03/bDzKUK/FBJEZMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWY3mnbQXey6/c/XHV1UIiA0X9zj68p+l19Accl7XN5M5q3wLoMn6N k6XuqM50M1OCk4PIwpI/EPoOx3Sfu5Vxn5LWz4Pl48fbdt+/caeZhos1dDhhcZdZ ZQF2tXbW/+01nJlNbJJzAoLihIh63OZvpLWETJa3w54pDKS58bQ5zsnlfmWiBku7 nhum2B5cRv3oZ8j0wBNDooQbgzcTHx5XdDi1UpmnT4xBkmb8gFgpxjcMQGnM0B2A QDKVfwgjIAUQSc16aoELI6f9/fh5ENUPlQ1/eD3qxAqCauG7/cH4u+FJjQv0gIjV JDbIA/TLIrIcZGRfnTdlwH0weX8IUlkc -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:06 2025 by rpki-client