$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: VOalOIwqAcXZByyXQ84JONC0lDDTt76DVRUhQaBZvj4= Subject key identifier: CE:8E:CF:5A:19:F1:1A:B0:86:24:9E:42:03:66:0A:CC:F7:E2:C8:B8 Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0DE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0DE3 Signing time: Wed 06 Aug 2025 18:02:14 +0000 Manifest this update: Wed 06 Aug 2025 18:02:13 +0000 Manifest next update: Wed 13 Aug 2025 18:02:13 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: iMSqaVTunuGrEAZ9yj4YGfG2YFBCPsyvjTBDUDITyNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: Aug 6 18:02:13 2025 GMT Not After : Aug 13 18:02:13 2025 GMT Subject: CN=689398a6-2163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:df:84:50:93:be:d5:af:bb:b6:be:b7:1d:53: cd:d7:44:fb:04:2c:63:5e:1c:08:9f:a6:c9:44:14: 25:a7:d5:02:82:a2:39:d3:5c:c7:da:2c:09:a2:a1: 7b:77:ea:94:73:4d:ac:0e:38:47:24:f0:12:f7:de: 24:21:f5:51:4b:4d:98:a0:de:d3:33:f3:9e:93:f8: cc:be:ff:7b:0c:d2:25:8f:a6:e9:79:3e:6d:53:25: 80:19:b7:20:87:6e:01:34:94:35:5d:07:0e:c0:9a: 77:21:97:45:00:e3:b0:55:d4:a6:ed:5a:0c:3d:fb: f7:e1:64:7e:bb:c8:71:ef:47:6e:96:8d:3c:15:25: 33:2d:24:d9:3b:5e:b5:e2:2e:0c:55:4d:af:2a:a6: 69:75:1d:19:23:2b:a9:b3:4d:6b:25:73:26:26:7c: d9:7e:dc:8d:cc:96:b6:ad:36:ef:0c:1c:4d:72:e8: 68:b8:3d:f9:a7:62:03:f8:67:7c:d0:c6:4d:f4:55: f3:de:5b:08:76:5c:89:52:56:9e:ba:b4:9f:03:15: 3e:09:2f:18:df:dd:32:cc:37:85:54:e2:db:fc:85: 74:2f:39:31:b2:3b:45:4a:4c:e6:18:75:77:a6:05: ba:39:87:f2:2d:75:20:f0:55:a1:29:65:c3:e7:11: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:CF:5A:19:F1:1A:B0:86:24:9E:42:03:66:0A:CC:F7:E2:C8:B8 X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8d:73:9b:4f:aa:b3:16:7d:ab:13:87:23:b6:29:1d:a5:82: 9c:93:1e:87:ef:a7:90:15:74:c8:a3:7b:c7:e3:8a:2b:ad:43: 0a:92:2d:4e:37:69:8d:20:5d:1f:c8:29:6b:94:58:15:ef:0d: 4c:19:54:7e:60:99:63:7e:17:e2:ee:f1:7d:cf:ca:2d:7a:01: 47:e5:4f:c6:cd:5b:80:ad:e6:be:80:86:e8:60:fd:ae:17:e6: 90:60:89:b9:8b:62:31:c8:09:e1:24:0b:fb:b3:59:51:35:a1: 0d:77:b3:7e:a2:f0:eb:2c:3f:02:99:4c:cb:2d:70:0f:d3:c5: f0:c8:18:8b:ef:58:8e:0b:55:08:0e:a3:2a:c8:69:9c:2d:12: 9f:cc:8e:d9:45:33:8b:98:9b:85:d6:f5:5a:85:46:ce:e4:1c: d0:f6:89:47:17:d0:0f:39:de:fb:cd:f4:3b:b0:35:a5:cc:89: e3:13:a2:48:2d:53:82:ec:09:bb:78:70:64:6b:ee:84:bb:e1: 0f:3f:62:0d:24:b5:0c:65:ed:a9:bf:e1:51:e6:38:47:60:67: d5:93:65:5a:42:97:c1:62:76:70:16:d6:c2:b7:0d:58:a0:6e: 91:0f:ad:64:c1:c2:f7:07:c9:3d:8e:ed:57:b1:63:43:05:da: c0:e6:3e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjUwODA2MTgwMjEzWhcNMjUwODEzMTgwMjEzWjAYMRYwFAYD VQQDEw02ODkzOThhNi0yMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt+EUJO+1a+7tr63HVPN10T7BCxjXhwIn6bJRBQlp9UCgqI501zH2iwJoqF7 d+qUc02sDjhHJPAS994kIfVRS02YoN7TM/Oek/jMvv97DNIlj6bpeT5tUyWAGbcg h24BNJQ1XQcOwJp3IZdFAOOwVdSm7VoMPfv34WR+u8hx70dulo08FSUzLSTZO161 4i4MVU2vKqZpdR0ZIyups01rJXMmJnzZftyNzJa2rTbvDBxNcuhouD35p2ID+Gd8 0MZN9FXz3lsIdlyJUlaeurSfAxU+CS8Y390yzDeFVOLb/IV0LzkxsjtFSkzmGHV3 pgW6OYfyLXUg8FWhKWXD5xGhDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6Oz1oZ 8RqwhiSeQgNmCsz34si4MB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjXObT6qzFn2rE4cjtikdpYKckx6H76eQFXTIo3vH44orrUMKki1O N2mNIF0fyClrlFgV7w1MGVR+YJljfhfi7vF9z8otegFH5U/GzVuArea+gIboYP2u F+aQYIm5i2IxyAnhJAv7s1lRNaENd7N+ovDrLD8CmUzLLXAP08XwyBiL71iOC1UI DqMqyGmcLRKfzI7ZRTOLmJuF1vVahUbO5BzQ9olHF9APOd77zfQ7sDWlzInjE6JI LVOC7Am7eHBka+6Eu+EPP2INJLUMZe2pv+FR5jhHYGfVk2VaQpfBYnZwFtbCtw1Y oG6RD61kwcL3B8k9ju1XsWNDBdrA5j7k -----END CERTIFICATE-----Generated at Fri Aug 8 19:38:09 2025 by rpki-client