$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: iCuwR4uCkM1lugq3c7Gzlaz9MxP2fj+baCxpkTdCNjQ= Subject key identifier: 9F:C8:4B:34:5D:DD:8B:13:21:80:A1:CB:75:52:3F:86:17:83:EB:CA Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D35 Signing time: Fri 22 Aug 2025 16:11:59 +0000 Manifest this update: Fri 22 Aug 2025 16:11:59 +0000 Manifest next update: Fri 29 Aug 2025 16:11:59 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: 4byS5ffrOV9YbxrOSH+5l7NxHFDnYq0bBxpVnks38Rw=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7490 (0x1d42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Aug 22 16:11:59 2025 GMT Not After : Aug 29 16:11:59 2025 GMT Subject: CN=68a896cf-5468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:2e:ff:b4:80:ab:ef:98:2c:92:62:1c:4e: 6d:cc:d1:6d:ed:7e:d5:f2:b4:cf:32:10:3d:54:a2: 7e:a2:df:3e:91:c2:73:98:45:ad:6c:ab:26:41:8e: bb:64:ec:06:4f:fb:f9:59:31:3c:f0:f0:7b:5f:bd: af:77:e2:1d:e8:09:de:da:72:3a:33:6b:70:a6:fc: a2:db:8c:d6:1f:f5:01:2c:d2:a8:e1:f2:43:eb:77: 47:aa:48:57:78:ab:74:de:31:b2:ab:3a:5f:8b:d5: bc:80:52:23:42:7b:49:df:94:da:76:ec:6d:8c:01: 9c:a1:e0:49:d5:2e:5b:e0:5d:bd:67:87:de:b6:09: 68:77:e5:e1:6b:a5:56:ec:ad:d1:7d:8f:7b:bb:48: 72:40:61:f5:3b:e7:df:dc:0f:4d:8b:12:7a:55:9f: f5:3c:55:65:86:97:16:8d:97:d8:ed:79:d2:37:c8: f0:ee:8d:8a:f9:15:d2:94:07:48:33:8e:be:3c:86: 1f:60:b4:2f:ba:38:30:dd:a4:76:75:88:43:00:21: 7c:ec:b5:98:26:bf:99:15:fe:1a:4c:3e:bc:ff:d9: b3:39:f3:d5:b0:96:c7:8a:cb:da:7d:55:b2:5a:9b: 0c:ce:97:a5:a1:84:b2:c5:e7:6d:18:aa:57:24:68: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C8:4B:34:5D:DD:8B:13:21:80:A1:CB:75:52:3F:86:17:83:EB:CA X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e9:31:26:cb:eb:36:8e:8b:22:bc:cd:6a:99:46:bc:d2:20: aa:6b:e1:e9:4d:ce:57:9b:d3:dc:3c:76:b4:90:a4:75:27:ab: 2f:1d:61:bf:12:c5:bf:43:d6:ba:81:ca:d7:a4:1b:49:77:c1: b2:85:a4:ba:d4:2b:65:73:05:5d:1a:21:16:bf:c1:ca:3b:43: f8:7d:61:bf:3e:70:77:b1:f8:9e:ca:9c:a7:6d:7d:55:3c:de: 84:ef:6c:b6:f2:b1:e9:2c:c1:25:ec:b1:9f:18:67:92:f5:b8: ab:92:f5:6d:4c:c2:e2:32:d5:c9:9e:28:69:0d:cc:34:19:f1: 55:b8:dd:80:ae:c9:9a:b3:a8:cb:10:8b:77:2b:d1:0b:af:0b: d9:04:70:7e:77:73:aa:17:d5:80:94:bc:94:47:f4:87:64:6f: 5c:bc:f0:53:69:6d:25:86:90:b7:bc:db:87:3e:64:bb:92:c1: 49:3b:8f:83:01:b3:a8:e2:e6:76:c8:96:26:f7:ff:8a:9e:42: d7:16:53:8f:1a:39:5d:93:5f:cf:bb:d3:ef:34:2c:38:32:a0: cc:4b:ec:4f:00:d8:2d:59:d4:1c:bb:f7:f4:62:76:12:c5:ad: c2:e6:e5:4d:81:6a:3b:82:54:60:a7:7f:19:5e:fa:c5:d4:4e: a9:20:d1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwODIyMTYxMTU5WhcNMjUwODI5MTYxMTU5WjAYMRYwFAYD VQQDEw02OGE4OTZjZi01NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnou/7SAq++YLJJiHE5tzNFt7X7V8rTPMhA9VKJ+ot8+kcJzmEWtbKsmQY67 ZOwGT/v5WTE88PB7X72vd+Id6Ane2nI6M2twpvyi24zWH/UBLNKo4fJD63dHqkhX eKt03jGyqzpfi9W8gFIjQntJ35TaduxtjAGcoeBJ1S5b4F29Z4fetglod+Xha6VW 7K3RfY97u0hyQGH1O+ff3A9NixJ6VZ/1PFVlhpcWjZfY7XnSN8jw7o2K+RXSlAdI M46+PIYfYLQvujgw3aR2dYhDACF87LWYJr+ZFf4aTD68/9mzOfPVsJbHisvafVWy WpsMzpeloYSyxedtGKpXJGgFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/ISzRd 3YsTIYChy3VSP4YXg+vKMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC86TEmy+s2josivM1qmUa80iCqa+HpTc5Xm9PcPHa0kKR1J6svHWG/ EsW/Q9a6gcrXpBtJd8GyhaS61CtlcwVdGiEWv8HKO0P4fWG/PnB3sfieypynbX1V PN6E72y28rHpLMEl7LGfGGeS9birkvVtTMLiMtXJnihpDcw0GfFVuN2Arsmas6jL EIt3K9ELrwvZBHB+d3OqF9WAlLyUR/SHZG9cvPBTaW0lhpC3vNuHPmS7ksFJO4+D AbOo4uZ2yJYm9/+KnkLXFlOPGjldk1/Pu9PvNCw4MqDMS+xPANgtWdQcu/f0YnYS xa3C5uVNgWo7glRgp38ZXvrF1E6pINHe -----END CERTIFICATE-----Generated at Sun Aug 24 00:55:40 2025 by rpki-client