$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json) Hash identifier: IghHMrtExoaCvB1wOrCfL2f8Imm5hIjoOjPbnkP1SSQ= Subject key identifier: FD:29:CD:B5:18:A7:70:48:F4:CB:20:7F:EA:7F:DF:DE:E6:85:3E:81 Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft Manifest number: 044B Signing time: Sat 23 Aug 2025 00:30:59 +0000 Manifest this update: Sat 23 Aug 2025 00:30:58 +0000 Manifest next update: Sat 30 Aug 2025 00:30:58 +0000 Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: xJzjE7vSp8nnzl/GGMMcQNUn6xrHpx6TUS+6r5jEOP4=) 2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Validity Not Before: Aug 23 00:30:58 2025 GMT Not After : Aug 30 00:30:58 2025 GMT Subject: CN=68a90bc3-352c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:cf:2c:72:94:73:e4:e3:b7:0f:4c:96:6a: a1:bb:9f:fd:04:46:1d:b5:65:d6:15:77:e0:95:37: 39:0f:60:45:70:80:ea:9f:41:55:69:ec:61:bf:ad: 19:f3:e1:07:4e:9b:c8:10:4b:49:a6:71:54:8a:fb: 27:e7:f6:a2:26:f4:12:f3:40:5d:dc:5b:30:a9:fb: ae:e0:bb:de:55:11:2e:44:90:f7:10:d0:2f:85:32: 06:9e:11:0c:48:d1:dd:8e:fd:f3:3c:92:d0:da:10: 30:8b:49:a1:34:f2:18:71:d7:87:da:02:41:49:1a: c9:f3:6c:97:42:b1:a2:86:8a:df:c5:8e:e3:81:c1: e9:5a:ae:fc:f6:35:07:10:3e:51:0c:6d:68:91:ba: 5f:03:d5:2e:20:13:9e:b4:96:fd:89:8e:71:0c:be: 43:75:f6:be:bb:71:e0:f2:30:73:fc:9e:3f:b7:c2: dc:b7:6f:8e:ba:ff:a1:20:ca:74:b5:0c:9d:d7:ba: b1:e8:c3:e5:e2:ec:07:87:96:f9:39:92:c2:ad:00: e7:2a:e1:58:75:c6:7a:eb:b6:7b:b1:26:a7:a5:c5: 9e:93:89:c9:36:31:6c:b3:9e:54:e1:52:e2:39:6b: 39:c2:36:f2:87:61:e0:96:dc:59:47:af:f8:4b:ca: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:CD:B5:18:A7:70:48:F4:CB:20:7F:EA:7F:DF:DE:E6:85:3E:81 X509v3 Authority Key Identifier: keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:78:2c:20:c5:5f:22:8d:84:8f:a3:2b:69:2d:dd:e8:c3:99: b1:f3:2f:26:34:1d:8d:bc:0e:ea:11:2f:77:6c:db:d6:16:b8: 42:e4:c5:cc:4f:3f:aa:1d:78:40:20:30:08:bb:63:2c:b6:b4: f5:da:d3:39:0a:88:5d:2d:f2:d0:a8:c4:94:d3:a4:ee:bc:e2: 8e:d8:ef:db:51:57:f1:34:14:69:a9:03:e5:51:cf:75:2f:0e: 53:69:80:7c:3d:b7:29:a4:ce:e3:85:7b:57:95:d4:7b:04:f2: dd:b5:c0:28:36:b7:b7:63:26:94:b0:60:db:cc:1e:01:b1:09: 2e:84:4a:08:36:c6:40:dc:4c:eb:70:5e:e2:6b:45:72:36:fa: 6e:83:c7:bc:0e:93:5b:e8:d3:72:f1:41:40:bb:6b:a9:90:8a: b9:72:1e:0c:4b:62:4a:6e:1d:19:e2:b4:a3:b9:28:3b:b7:ae: 3c:da:5f:e9:85:f5:fa:67:bf:32:80:bb:60:ca:2d:cb:99:1d: 4e:bd:e8:3a:2a:08:d8:33:76:1f:62:d2:30:70:5c:24:0e:44: f0:2b:67:b1:11:7d:fb:80:52:df:8f:1a:74:46:f4:a7:30:3f: ad:4c:ce:90:f6:27:fc:21:58:70:69:3a:d9:e6:6c:11:72:89: 99:68:e3:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx MkE1NTFDMzgwHhcNMjUwODIzMDAzMDU4WhcNMjUwODMwMDAzMDU4WjAYMRYwFAYD VQQDEw02OGE5MGJjMy0zNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycrPLHKUc+Tjtw9Mlmqhu5/9BEYdtWXWFXfglTc5D2BFcIDqn0FVaexhv60Z 8+EHTpvIEEtJpnFUivsn5/aiJvQS80Bd3Fswqfuu4LveVREuRJD3ENAvhTIGnhEM SNHdjv3zPJLQ2hAwi0mhNPIYcdeH2gJBSRrJ82yXQrGihorfxY7jgcHpWq789jUH ED5RDG1okbpfA9UuIBOetJb9iY5xDL5Ddfa+u3Hg8jBz/J4/t8Lct2+Ouv+hIMp0 tQyd17qx6MPl4uwHh5b5OZLCrQDnKuFYdcZ667Z7sSanpcWek4nJNjFss55U4VLi OWs5wjbyh2HgltxZR6/4S8rNQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0pzbUY p3BI9Msgf+p/397mhT6BMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy bnFzd05HOWlTMk1TcFZIRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqeCwgxV8ijYSPoytpLd3ow5mx8y8mNB2NvA7qES93bNvWFrhC5MXM Tz+qHXhAIDAIu2MstrT12tM5CohdLfLQqMSU06TuvOKO2O/bUVfxNBRpqQPlUc91 Lw5TaYB8PbcppM7jhXtXldR7BPLdtcAoNre3YyaUsGDbzB4BsQkuhEoINsZA3Ezr cF7ia0VyNvpug8e8DpNb6NNy8UFAu2upkIq5ch4MS2JKbh0Z4rSjuSg7t6482l/p hfX6Z78ygLtgyi3LmR1Oveg6KgjYM3YfYtIwcFwkDkTwK2exEX37gFLfjxp0RvSn MD+tTM6Q9if8IVhwaTrZ5mwRcomZaOPS -----END CERTIFICATE-----Generated at Sun Aug 24 09:00:13 2025 by rpki-client