$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: SozonaXs1v0sxp/iRy0LqXvRCVupVltH1/o/k0iMw8s= Subject key identifier: A1:43:6F:F1:8C:DE:78:10:0D:F9:45:4B:63:49:FA:2A:EA:CB:91:6A Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: 62 Signing time: Sat 09 Aug 2025 07:36:00 +0000 Manifest this update: Sat 09 Aug 2025 07:36:00 +0000 Manifest next update: Sat 16 Aug 2025 07:36:00 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: vtvfeRNRLEjSZNRHbuR1GfLkxHphQjFrXE5MV2y5UkI=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 8xExEFAiYA/8lFGHuqLYzWCAWTLUpOx+eEmK9KK5c0M=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: 2GRtPqItvUjTSj4+s6HmnNB8Os7tS39gLre6A6tNJzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Aug 9 07:36:00 2025 GMT Not After : Aug 16 07:36:00 2025 GMT Subject: CN=6896fa60-9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:3a:a5:e1:88:18:54:9d:b1:d7:1c:81:42: 19:cd:90:5d:22:37:fa:1b:1c:db:46:d5:ee:ae:ac: 43:a5:65:32:33:69:b3:f3:dc:f3:04:09:05:08:16: 44:8a:02:38:1f:4c:b4:d5:6d:fd:ed:ea:f4:fb:53: 82:5b:05:8e:b3:86:17:76:ac:4f:ef:ec:01:b0:b9: 25:e3:0c:dc:0f:f6:74:aa:f2:ad:85:de:42:fb:97: 4f:bf:d6:02:df:ae:95:e0:bb:5b:11:ea:7d:dc:3d: 4d:74:60:56:b7:0b:ff:84:2d:1f:42:c6:db:81:47: df:88:7e:bf:2c:8a:d0:20:be:4d:c0:5c:5a:d5:4e: 53:be:c4:6e:85:ca:b7:a4:71:d9:70:71:87:db:65: 64:b8:21:4e:f4:f9:d1:46:18:ca:a2:ec:11:92:70: 8d:55:04:ea:4c:4c:1a:8e:90:85:d0:02:26:7f:88: 90:1f:24:96:c0:79:0a:f9:4f:5c:90:a9:c1:d8:bd: a6:f8:7a:44:26:cc:97:ff:d6:bd:93:53:59:62:b8: 27:07:94:ec:f7:7e:ba:5d:de:99:1d:3e:67:84:c4: 34:47:c7:ba:04:fa:da:0d:38:83:3c:69:cc:b2:91: f1:8a:c0:8c:32:a5:ee:68:bd:25:60:44:29:59:d1: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:43:6F:F1:8C:DE:78:10:0D:F9:45:4B:63:49:FA:2A:EA:CB:91:6A X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:91:bd:58:dd:90:74:94:ef:9c:22:93:e5:01:72:56:ff:24: 1a:6a:85:1d:8e:b3:25:c5:15:7f:48:5a:74:bc:1a:d0:b0:66: da:80:6b:3a:42:71:f3:d0:6e:6c:09:e3:b9:d1:8f:94:86:a5: dd:84:96:fd:77:30:ae:99:e9:2c:75:f0:f8:52:51:16:f1:52: 57:1b:e7:5b:31:f0:bf:5d:67:8f:26:75:91:3c:73:14:fd:08: d6:eb:b4:5a:da:2b:f7:d2:39:e1:ee:6b:54:37:f1:a2:4a:e4: 46:d7:a6:0e:25:bb:7d:9d:4d:50:0d:f2:d9:87:32:f5:20:66: 90:36:3d:e7:55:5a:e2:4e:4c:0a:ed:37:bc:b5:c1:08:8a:fc: e7:fe:43:9e:e8:81:7d:08:7a:58:fa:13:cb:56:3c:07:be:a1: df:f6:5b:a5:a8:e6:7c:3c:38:d0:2c:c7:93:47:a6:04:38:71: cd:69:24:ef:e8:b2:27:95:74:d9:69:a3:9f:94:0b:59:02:e2: ae:b0:5d:13:81:96:31:c4:ae:9c:34:d5:ba:65:1f:24:09:8e: 63:04:87:73:c2:88:c4:2f:2a:90:49:69:05:e1:5b:65:c7:13: 3a:43:81:83:9e:20:82:5c:22:42:e8:c3:08:e3:2c:14:46:0b: ad:3f:84:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTU1NzExMC8GA1UEBRMoNjdDRTNEOUMyNkExNEJDREZGOUIzMzk0RDMzNTU3NjY4 MjE4QTE1NjAeFw0yNTA4MDkwNzM2MDBaFw0yNTA4MTYwNzM2MDBaMBgxFjAUBgNV BAMTDTY4OTZmYTYwLTliODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC87Tql4YgYVJ2x1xyBQhnNkF0iN/obHNtG1e6urEOlZTIzabPz3PMECQUIFkSK AjgfTLTVbf3t6vT7U4JbBY6zhhd2rE/v7AGwuSXjDNwP9nSq8q2F3kL7l0+/1gLf rpXgu1sR6n3cPU10YFa3C/+ELR9CxtuBR9+Ifr8sitAgvk3AXFrVTlO+xG6Fyrek cdlwcYfbZWS4IU70+dFGGMqi7BGScI1VBOpMTBqOkIXQAiZ/iJAfJJbAeQr5T1yQ qcHYvab4ekQmzJf/1r2TU1liuCcHlOz3frpd3pkdPmeExDRHx7oE+toNOIM8acyy kfGKwIwype5ovSVgRClZ0UBtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoUNv8Yze eBAN+UVLY0n6KurLkWowHwYDVR0jBBgwFoAUZ849nCahS83/mzOU0zVXZoIYoVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNTU3LzkyNjgzRTNBRTg2 QzExRUZCMjMyMDU2RUM0RjlBRTAyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9W WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjg0OW5DYWhTODNfbXpPVTB6Vlhab0lZb1ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NTU3LzkyNjgzRTNBRTg2QzExRUZCMjMyMDU2RUM0RjlBRTAyL1o4NDluQ2FoUzgz X216T1UwelZYWm9JWW9WWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuRvVjdkHSU75wik+UBclb/JBpqhR2OsyXFFX9IWnS8GtCwZtqAazpC cfPQbmwJ47nRj5SGpd2Elv13MK6Z6Sx18PhSURbxUlcb51sx8L9dZ48mdZE8cxT9 CNbrtFraK/fSOeHua1Q38aJK5EbXpg4lu32dTVAN8tmHMvUgZpA2PedVWuJOTArt N7y1wQiK/Of+Q57ogX0Ielj6E8tWPAe+od/2W6Wo5nw8ONAsx5NHpgQ4cc1pJO/o sieVdNlpo5+UC1kC4q6wXROBljHErpw01bplHyQJjmMEh3PCiMQvKpBJaQXhW2XH EzpDgYOeIIJcIkLowwjjLBRGC60/hNc= -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:01 2025 by rpki-client