$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: +E9pXkZwA9biSeuuuqj4UX1VdgAvWPJd57jpMDp1EOo= Subject key identifier: 66:B0:18:4A:62:55:4D:7B:6E:B7:B7:C8:30:D1:15:BF:D0:73:AB:64 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: DF Signing time: Sat 09 Aug 2025 05:54:36 +0000 Manifest this update: Sat 09 Aug 2025 05:54:35 +0000 Manifest next update: Sat 16 Aug 2025 05:54:35 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 8RJOUY92lc44FDYFjQic4UWknpTomJA51ogq+ksIPnI=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Aug 9 05:54:35 2025 GMT Not After : Aug 16 05:54:35 2025 GMT Subject: CN=6896e29b-8a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:0c:c9:f3:42:12:9d:a8:79:46:9a:01:bb: f7:aa:35:46:08:94:bc:57:89:35:5f:0a:1d:c7:ee: 57:9f:71:82:fc:90:04:a4:b0:e3:17:30:2d:4c:e7: 58:b6:d0:74:8a:0e:f0:9a:2d:57:23:26:a3:91:69: 67:83:2e:ec:77:8a:1b:e1:ba:a3:3e:a7:2f:db:09: 5b:48:65:8e:e6:71:e2:17:7c:3a:40:26:7e:3d:8e: d9:53:f2:c5:ef:d1:55:87:d3:64:8e:df:7a:37:f0: 0d:43:95:f7:05:ab:78:3e:1c:45:58:34:e1:19:ba: aa:7e:3d:14:c8:e5:51:11:02:a9:1d:dc:10:db:6f: 15:2e:ee:ed:d1:18:0a:6b:35:fc:0b:68:a9:82:15: a1:8b:b4:09:ec:83:1f:f8:4e:9e:25:85:72:c9:63: ec:81:a9:9d:d1:00:bc:78:73:13:59:af:2d:a3:ea: b7:9e:a0:6d:44:ba:d1:09:07:a5:f2:03:c7:75:39: ce:d6:c0:e1:ab:37:f3:18:56:86:6e:da:c2:26:4c: 96:ac:9c:72:0a:ec:a6:11:85:7d:63:db:67:ff:10: 60:97:13:a0:7f:25:bd:83:02:b3:d5:06:f4:de:a8: e4:ce:8c:18:04:8f:56:3e:56:10:84:2d:14:90:93: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:18:4A:62:55:4D:7B:6E:B7:B7:C8:30:D1:15:BF:D0:73:AB:64 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:2b:95:42:0c:bd:88:ea:6d:75:3c:e6:98:35:91:f5:60: 5b:50:1d:40:a2:a7:3b:8b:27:e9:6f:bc:55:f4:1f:81:06:db: b5:bf:fb:d6:60:d9:54:9a:bf:b1:b8:2c:28:39:cf:78:b5:2f: 49:80:d7:2b:ee:1e:59:bf:83:1e:5c:70:2d:e6:e4:2f:fd:72: 7a:33:3e:79:58:d0:9b:70:f9:d4:b9:9a:32:bc:7b:a3:a4:49: e8:57:79:b1:52:fa:b0:b5:7d:ac:04:80:2d:f7:da:71:65:47: f0:69:e9:44:03:ca:51:2e:db:8e:73:33:59:79:71:cc:e2:2b: 8d:1b:c9:29:0c:7f:b4:5c:e0:97:b1:d6:a3:5c:f6:cf:35:0f: b2:e8:34:c8:45:a6:de:e0:bf:c4:74:9d:a5:70:e7:3c:16:3b: e2:bf:69:5b:34:35:4b:e0:d5:d7:26:fb:09:97:5e:ed:62:cc: 87:06:4e:c3:7b:0d:68:05:6b:5e:35:6c:06:2e:ce:c5:83:23: 12:a5:21:0c:32:75:c2:6a:fa:6b:1a:82:ec:12:35:49:6f:91: 94:ad:67:f9:24:7d:7f:15:d5:22:88:bf:37:46:a4:41:3a:0f: 15:42:83:81:5e:95:99:58:a1:73:39:07:e1:ee:3d:14:1f:d4: ce:81:23:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwODA5MDU1NDM1WhcNMjUwODE2MDU1NDM1WjAYMRYwFAYD VQQDEw02ODk2ZTI5Yi04YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ogMyfNCEp2oeUaaAbv3qjVGCJS8V4k1Xwodx+5Xn3GC/JAEpLDjFzAtTOdY ttB0ig7wmi1XIyajkWlngy7sd4ob4bqjPqcv2wlbSGWO5nHiF3w6QCZ+PY7ZU/LF 79FVh9Nkjt96N/ANQ5X3Bat4PhxFWDThGbqqfj0UyOVREQKpHdwQ228VLu7t0RgK azX8C2ipghWhi7QJ7IMf+E6eJYVyyWPsgamd0QC8eHMTWa8to+q3nqBtRLrRCQel 8gPHdTnO1sDhqzfzGFaGbtrCJkyWrJxyCuymEYV9Y9tn/xBglxOgfyW9gwKz1Qb0 3qjkzowYBI9WPlYQhC0UkJNY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGawGEpi VU17bre3yDDRFb/Qc6tkMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYSCuVQgy9iOptdTzmmDWR9WBbUB1Aoqc7iyfpb7xV9B+BBtu1v/vW YNlUmr+xuCwoOc94tS9JgNcr7h5Zv4MeXHAt5uQv/XJ6Mz55WNCbcPnUuZoyvHuj pEnoV3mxUvqwtX2sBIAt99pxZUfwaelEA8pRLtuOczNZeXHM4iuNG8kpDH+0XOCX sdajXPbPNQ+y6DTIRabe4L/EdJ2lcOc8Fjviv2lbNDVL4NXXJvsJl17tYsyHBk7D ew1oBWteNWwGLs7FgyMSpSEMMnXCavprGoLsEjVJb5GUrWf5JH1/FdUiiL83RqRB Og8VQoOBXpWZWKFzOQfh7j0UH9TOgSMk -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:30 2025 by rpki-client