$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft File: zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json) Hash identifier: XkMZxcKMIRd/qVm4xn93Mr3jSPF+/q0ePfxT2et7O6Q= Subject key identifier: FD:0D:27:19:44:03:29:90:F0:63:02:63:85:60:7A:CA:E5:34:EF:CD Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70 Certificate issuer: /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 05:01:07 +0000 Manifest this update: Sat 23 Aug 2025 05:01:07 +0000 Manifest next update: Sat 30 Aug 2025 05:01:07 +0000 Files and hashes: 1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: loAeikyr+e73f6NsGbneH1qiOHyXt3mxkxXUCOYwCtA=) 2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: KzdO+S8UaZA+5dqwU3YevT9OI76OGpIsZ7GNNEbB7Sc=) 3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: 9rjLofEU8o84/eDpG2+v1chrVfPs+sqWqIrHcUhxjLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770 Validity Not Before: Aug 23 05:01:07 2025 GMT Not After : Aug 30 05:01:07 2025 GMT Subject: CN=68a94b13-2257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:72:23:46:b7:63:ef:5b:9b:1e:d5:ea:3c: 6e:27:32:0c:26:31:56:d7:f5:39:2a:36:c4:4a:3a: 4f:dd:dd:38:71:33:52:89:a6:58:ac:99:c9:77:6e: 52:cd:7c:82:bc:67:91:85:a7:ed:18:2d:46:88:18: 5b:31:0f:b3:91:f4:c7:72:94:97:38:97:58:6e:96: b0:24:87:32:81:e2:45:90:13:a0:cb:18:e6:1a:4e: 15:bb:ec:12:b5:ef:36:d3:e9:87:d6:7d:79:62:3a: 5c:2b:1b:48:ff:d5:d0:33:ae:f9:89:ec:ac:ff:59: 6b:fc:1c:6b:23:19:c1:b1:6a:49:1c:0c:c9:de:b6: 0b:9c:66:dc:a7:eb:28:c5:1d:2c:62:7a:3c:64:57: b3:11:a8:3d:d7:96:76:2e:78:bc:ac:22:53:ab:fd: 44:12:83:a3:e6:ba:a4:3c:59:65:91:66:df:d6:5b: a4:9f:d5:ef:46:48:99:27:d7:54:33:41:9b:96:c1: 7e:c0:6a:08:e7:d3:7e:ff:e4:00:58:07:80:1b:a5: 16:83:3c:79:64:94:4d:d4:15:93:31:a7:12:ee:1c: 70:9e:03:23:ec:78:7b:1e:34:1c:33:02:56:b4:59: e1:3e:45:be:e5:6f:cd:38:e2:f7:63:30:73:d4:2e: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:27:19:44:03:29:90:F0:63:02:63:85:60:7A:CA:E5:34:EF:CD X509v3 Authority Key Identifier: keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:cb:3c:16:23:3a:6d:28:ab:85:55:5d:d1:e2:6c:cd:8f: 32:64:b0:2b:6a:0f:cb:27:7d:8b:a7:19:2b:e2:21:ee:d3:91: c6:ab:12:df:85:08:bb:c0:cf:b0:00:ec:0f:1e:2e:da:cf:34: d6:eb:04:56:e4:c8:b9:45:ee:02:99:fc:16:18:24:0a:0c:26: bf:16:e3:52:42:66:02:df:44:20:0d:bb:f0:02:96:77:66:0a: c9:23:17:2c:4d:f4:3c:7c:72:2e:77:02:01:ad:ec:ab:c5:a7: 8c:29:87:c2:1c:00:ad:03:68:c3:9e:d7:24:b3:f9:12:62:80: 98:e9:7a:b3:fb:4c:5d:6f:78:ca:c1:e1:81:27:24:5d:73:cc: 26:4f:ea:42:7c:ee:67:48:e5:80:9f:69:e6:5a:6e:13:4b:00: 36:e0:54:9b:cd:fc:38:79:34:5f:80:01:69:4b:da:f9:34:83: 3a:2a:09:d5:4f:3c:d0:c2:d3:cc:ab:75:a5:35:53:9a:58:e1: e6:03:d1:df:ca:c9:67:8f:63:a6:f7:c5:3a:24:04:2d:84:f8: e6:4e:43:5c:5d:2c:21:e4:04:8f:3b:e3:38:72:da:c9:5d:2f: 08:e6:1e:99:eb:29:87:80:fb:2f:be:87:23:64:42:2b:b1:1a: f6:fd:e9:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI2MUUxMTAvBgNVBAUTKENEN0I4Njk1NkJFRDlERDYyMTVCRTQ4NUYwQzcxNUI5 MjBDOUE3NzAwHhcNMjUwODIzMDUwMTA3WhcNMjUwODMwMDUwMTA3WjAYMRYwFAYD VQQDEw02OGE5NGIxMy0yMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP9yI0a3Y+9bmx7V6jxuJzIMJjFW1/U5KjbESjpP3d04cTNSiaZYrJnJd25S zXyCvGeRhaftGC1GiBhbMQ+zkfTHcpSXOJdYbpawJIcygeJFkBOgyxjmGk4Vu+wS te820+mH1n15YjpcKxtI/9XQM675ieys/1lr/BxrIxnBsWpJHAzJ3rYLnGbcp+so xR0sYno8ZFezEag915Z2Lni8rCJTq/1EEoOj5rqkPFllkWbf1lukn9XvRkiZJ9dU M0GblsF+wGoI59N+/+QAWAeAG6UWgzx5ZJRN1BWTMacS7hxwngMj7Hh7HjQcMwJW tFnhPkW+5W/NOOL3YzBz1C6+ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0NJxlE AymQ8GMCY4VgesrlNO/NMB8GA1UdIwQYMBaAFM17hpVr7Z3WIVvkhfDHFbkgyadw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjYxRS84MDdGOTI1NEQ1 NEUxMUVFOENDOTY1MzBDNEY5QUUwMi96WHVHbFd2dG5kWWhXLVNGOE1jVnVTREpw M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pYdUdsV3Z0bmRZaFctU0Y4TWNWdVNESnAzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjYxRS84MDdGOTI1NEQ1NEUxMUVFOENDOTY1MzBDNEY5QUUwMi96WHVHbFd2dG5k WWhXLVNGOE1jVnVTREpwM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd8cs8FiM6bSirhVVd0eJszY8yZLArag/LJ32Lpxkr4iHu05HGqxLf hQi7wM+wAOwPHi7azzTW6wRW5Mi5Re4CmfwWGCQKDCa/FuNSQmYC30QgDbvwApZ3 ZgrJIxcsTfQ8fHIudwIBreyrxaeMKYfCHACtA2jDntcks/kSYoCY6Xqz+0xdb3jK weGBJyRdc8wmT+pCfO5nSOWAn2nmWm4TSwA24FSbzfw4eTRfgAFpS9r5NIM6KgnV TzzQwtPMq3WlNVOaWOHmA9Hfyslnj2Om98U6JAQthPjmTkNcXSwh5ASPO+M4ctrJ XS8I5h6Z6ymHgPsvvocjZEIrsRr2/elX -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:22 2025 by rpki-client