$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json) Hash identifier: du2n9kKr4dxvfqkchT773GlIrL2/eLWt6iW3TggaXz8= Subject key identifier: DC:CB:E1:06:CB:0C:85:6B:6C:4B:99:8A:CE:3A:ED:03:A0:CB:F8:61 Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft Manifest number: 31 Signing time: Sat 23 Aug 2025 07:54:58 +0000 Manifest this update: Sat 23 Aug 2025 07:54:57 +0000 Manifest next update: Sat 30 Aug 2025 07:54:57 +0000 Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: n4egJy6GpOGBYeuqmK3mdJDUZWa7WZm1dlwy+pyuE2A=) 2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Validity Not Before: Aug 23 07:54:57 2025 GMT Not After : Aug 30 07:54:57 2025 GMT Subject: CN=68a973d2-8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:af:c5:6b:28:b6:49:b8:b8:48:b1:7b:b7: 6e:ec:89:27:d1:c0:15:c6:96:34:d9:30:84:8d:b5: 92:91:99:3d:04:52:53:1a:20:4b:6b:ee:e8:7b:9f: 18:49:d6:9e:1a:98:0f:51:78:c8:9b:2a:8c:bd:08: 06:88:4f:fb:81:02:18:ef:6e:4b:89:12:c8:e9:0b: e0:d7:a2:97:68:29:d0:60:ba:2a:82:83:36:d3:a5: e3:4a:53:76:46:23:df:49:73:67:9f:7c:d9:ad:2f: 62:67:6a:c3:e4:63:ff:aa:92:ed:9e:78:3f:6d:6a: 10:ce:70:79:12:df:4f:59:4c:d2:2a:b8:d1:4b:95: 4d:99:62:1b:26:a7:25:66:ab:10:4b:ca:6f:4e:59: 09:e5:dc:0b:b0:ac:e4:d5:e5:6b:10:b7:9d:d3:a8: ef:71:e5:47:d6:79:e0:86:1f:e9:47:7a:c3:28:c5: be:30:d6:1d:06:56:7b:71:f6:e0:ad:02:1d:10:69: 1c:52:e7:93:ff:13:f1:b2:0a:9f:14:68:8e:dc:cd: fa:07:d0:ca:6c:53:27:c2:82:29:36:eb:ce:a6:a9: dd:99:ec:35:fd:db:22:27:65:16:c8:3e:61:41:37: 43:2e:d0:23:c9:39:56:43:39:d8:ff:ab:1b:43:74: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CB:E1:06:CB:0C:85:6B:6C:4B:99:8A:CE:3A:ED:03:A0:CB:F8:61 X509v3 Authority Key Identifier: keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:00:d2:6c:6c:2a:cb:1f:43:fb:dc:fd:b5:a1:68:2d:5d:23: d6:f0:c0:c9:b0:01:bf:84:88:f4:83:bd:27:d5:1e:51:48:ef: 98:10:2a:f9:92:d6:f6:a8:23:32:1d:b3:05:e2:f1:ff:18:38: cf:c0:c3:dc:09:ab:0e:13:78:0f:2f:0f:85:f9:c0:eb:00:c0: 6d:d2:e3:3d:ac:52:68:1d:6d:02:e2:4c:37:de:5c:bc:9e:e1: 8a:dd:17:46:73:95:a0:e1:b5:94:eb:7d:9c:df:60:71:0b:6f: 1a:7d:c1:25:3e:04:14:71:95:85:fe:90:5a:fd:72:27:17:87: 59:98:67:67:44:85:3a:4b:72:ba:cb:25:7d:c0:62:ce:ee:54: bf:6b:f2:56:2b:37:82:42:be:2e:71:f3:98:b2:4d:23:16:20: 33:49:2b:9f:7f:38:25:b0:cc:d9:99:4f:25:6d:b3:e7:27:8d: b6:6b:5e:bc:e0:47:0a:02:a7:73:d0:5a:c6:99:96:f2:87:4a: c1:7e:26:3a:6e:5e:1b:ac:01:18:80:8a:72:af:d8:a7:e5:28: 65:4f:51:42:72:5a:6c:6e:df:4d:b7:4e:fb:ad:12:b6:7b:4a: 39:43:79:a0:af:7b:10:08:f2:65:ec:fd:9a:72:fc:db:fb:64: dd:ba:43:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MEU5MDExMC8GA1UEBRMoQ0YxRTBFNUJENzdCMUZGQjUzNTY3ODFGNjE2MzE1OEMy RTJGN0I2RDAeFw0yNTA4MjMwNzU0NTdaFw0yNTA4MzAwNzU0NTdaMBgxFjAUBgNV BAMTDTY4YTk3M2QyLThjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+5a/Fayi2Sbi4SLF7t27siSfRwBXGljTZMISNtZKRmT0EUlMaIEtr7uh7nxhJ 1p4amA9ReMibKoy9CAaIT/uBAhjvbkuJEsjpC+DXopdoKdBguiqCgzbTpeNKU3ZG I99Jc2effNmtL2JnasPkY/+qku2eeD9tahDOcHkS309ZTNIquNFLlU2ZYhsmpyVm qxBLym9OWQnl3AuwrOTV5WsQt53TqO9x5UfWeeCGH+lHesMoxb4w1h0GVntx9uCt Ah0QaRxS55P/E/GyCp8UaI7czfoH0MpsUyfCgik2686mqd2Z7DX92yInZRbIPmFB N0Mu0CPJOVZDOdj/qxtDdLvfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3MvhBssM hWtsS5mKzjrtA6DL+GEwHwYDVR0jBBgwFoAUzx4OW9d7H/tTVngfYWMVjC4ve20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRTkwL0JCNkZCNjg4Mzk2 NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveng0T1c5ZDdIX3RUVm5nZllXTVZqQzR2ZTIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw RTkwL0JCNkZCNjg4Mzk2NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90 VFZuZ2ZZV01WakM0dmUyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgA0mxsKssfQ/vc/bWhaC1dI9bwwMmwAb+EiPSDvSfVHlFI75gQKvmS 1vaoIzIdswXi8f8YOM/Aw9wJqw4TeA8vD4X5wOsAwG3S4z2sUmgdbQLiTDfeXLye 4YrdF0ZzlaDhtZTrfZzfYHELbxp9wSU+BBRxlYX+kFr9cicXh1mYZ2dEhTpLcrrL JX3AYs7uVL9r8lYrN4JCvi5x85iyTSMWIDNJK59/OCWwzNmZTyVts+cnjbZrXrzg RwoCp3PQWsaZlvKHSsF+JjpuXhusARiAinKv2KflKGVPUUJyWmxu3023TvutErZ7 SjlDeaCvexAI8mXs/Zpy/Nv7ZN26Qyk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:40 2025 by rpki-client