$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: 0O1+LZGnhllRthTyFd/OA9waWq2WfeKjdM5F+UsLCCo= Subject key identifier: 8A:84:C9:C0:9B:DE:4D:49:0B:03:FD:6B:A3:3F:B2:FC:1E:11:B2:63 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 093D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0937 Signing time: Fri 08 Aug 2025 20:32:49 +0000 Manifest this update: Fri 08 Aug 2025 20:32:48 +0000 Manifest next update: Fri 15 Aug 2025 20:32:48 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: NV7c9bblzGLg8AbNaWWigbAJKzuTjUGa1OtdC2nejPw=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2365 (0x93d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Aug 8 20:32:48 2025 GMT Not After : Aug 15 20:32:48 2025 GMT Subject: CN=68965ef1-ea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:68:fd:0c:8f:f3:a6:08:e6:cf:93:5d:c3: e9:e6:0b:82:87:d6:94:64:c3:6a:24:b8:bf:de:b7: 69:45:87:91:4d:c5:94:42:e4:61:c3:0c:2a:89:2e: fc:69:61:60:2b:ad:27:cc:18:74:d0:05:03:a5:99: aa:45:e6:4e:87:0e:df:f7:2e:14:60:b0:cf:a2:04: fb:9f:22:9b:32:e9:df:af:29:62:37:2b:0a:c8:90: 87:5b:3a:4d:ba:8c:da:a9:af:5e:b9:06:6b:cc:23: 14:9f:0c:49:74:fc:42:05:95:64:5f:46:f0:ce:20: 76:1d:64:45:4a:2d:43:5d:38:58:d8:04:dc:54:aa: fd:db:17:8f:9b:17:98:fb:5d:0a:6c:6c:0c:8f:5a: e0:c8:f0:3b:06:81:a5:cd:6c:7a:90:c2:9c:b7:a8: 67:29:6d:af:bf:ab:16:0a:ae:08:51:a1:af:68:b4: 2f:f5:28:f3:dd:77:30:5c:01:15:6d:84:b9:8a:73: b3:00:e1:50:eb:6a:3b:fe:e4:10:65:8e:03:8b:87: bd:0d:39:f6:7a:21:17:a7:ee:c7:48:a1:95:30:c9: ff:70:76:8c:c1:e0:77:26:f2:7f:05:f0:ee:60:8f: 48:c1:2f:e1:c0:5e:4a:68:93:8e:14:4f:ac:3b:65: 14:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:84:C9:C0:9B:DE:4D:49:0B:03:FD:6B:A3:3F:B2:FC:1E:11:B2:63 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:9e:71:fd:1e:d8:fa:75:fc:0f:1e:ee:d6:3a:53:86:17:14: e0:46:f6:85:b5:82:86:2b:5d:a6:17:a6:ae:5d:06:83:42:9f: e3:c1:90:21:19:4c:a4:8a:51:b6:d6:b1:2e:7b:54:f2:e7:86: e1:1e:4f:b6:fe:86:83:a9:de:d1:5a:4c:44:df:6f:89:59:c6: 41:c2:d9:16:82:60:68:cb:0c:c5:1f:89:1d:43:f6:f6:ee:b1: 99:03:93:0b:25:d6:db:57:83:7a:84:4a:65:d2:dd:86:13:90: 0c:22:e7:92:4a:6b:d1:22:d1:21:7f:8c:34:55:db:47:b5:d6: fc:e8:73:3b:05:8c:0e:43:51:31:f5:78:d3:83:6d:a5:3f:30: fe:d0:7c:12:ea:a4:bb:6f:7a:62:06:78:44:be:e3:35:4f:20: c3:4b:e9:ae:53:35:8e:42:0e:24:30:5f:78:82:75:bc:a4:b5: b3:71:27:99:db:de:82:70:13:00:c5:1c:e4:0d:20:7c:03:04: 0c:7f:5f:ca:1e:ca:37:5f:db:e3:f0:53:67:58:1e:c9:ff:b8: 51:49:25:69:81:84:d2:3a:e8:69:75:85:8e:d3:34:30:19:61: 6b:79:2c:cb:f3:54:82:5a:9c:63:71:89:56:9a:44:3c:91:d0: f6:e3:9b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwODA4MjAzMjQ4WhcNMjUwODE1MjAzMjQ4WjAYMRYwFAYD VQQDEw02ODk2NWVmMS1lYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyORo/QyP86YI5s+TXcPp5guCh9aUZMNqJLi/3rdpRYeRTcWUQuRhwwwqiS78 aWFgK60nzBh00AUDpZmqReZOhw7f9y4UYLDPogT7nyKbMunfryliNysKyJCHWzpN uozaqa9euQZrzCMUnwxJdPxCBZVkX0bwziB2HWRFSi1DXThY2ATcVKr92xePmxeY +10KbGwMj1rgyPA7BoGlzWx6kMKct6hnKW2vv6sWCq4IUaGvaLQv9Sjz3XcwXAEV bYS5inOzAOFQ62o7/uQQZY4Di4e9DTn2eiEXp+7HSKGVMMn/cHaMweB3JvJ/BfDu YI9IwS/hwF5KaJOOFE+sO2UUDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqEycCb 3k1JCwP9a6M/svweEbJjMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxnnH9Htj6dfwPHu7WOlOGFxTgRvaFtYKGK12mF6auXQaDQp/jwZAh GUykilG21rEue1Ty54bhHk+2/oaDqd7RWkxE32+JWcZBwtkWgmBoywzFH4kdQ/b2 7rGZA5MLJdbbV4N6hEpl0t2GE5AMIueSSmvRItEhf4w0VdtHtdb86HM7BYwOQ1Ex 9XjTg22lPzD+0HwS6qS7b3piBnhEvuM1TyDDS+muUzWOQg4kMF94gnW8pLWzcSeZ 296CcBMAxRzkDSB8AwQMf1/KHso3X9vj8FNnWB7J/7hRSSVpgYTSOuhpdYWO0zQw GWFreSzL81SCWpxjcYlWmkQ8kdD245se -----END CERTIFICATE-----Generated at Sun Aug 10 18:52:20 2025 by rpki-client