$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: y5Z5+vGvIdYBsuJBsQdQTINe/kvS/gZ6Kar8JBlNNMo= Subject key identifier: BA:18:0C:25:D8:2C:CE:0A:C7:02:FC:64:E6:54:1A:4E:1C:94:D2:12 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 113C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1134 Signing time: Mon 04 Aug 2025 17:26:56 +0000 Manifest this update: Mon 04 Aug 2025 17:26:55 +0000 Manifest next update: Mon 11 Aug 2025 17:26:55 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: jgABx4vt+AiuyKZW8iOaiTFXKHh0qUVwoLnJ6ErOXRo=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4412 (0x113c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Aug 4 17:26:55 2025 GMT Not After : Aug 11 17:26:55 2025 GMT Subject: CN=6890ed60-9f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:83:ea:13:ee:31:81:a0:47:d5:b3:57:fd: 1b:cb:ac:9b:3d:76:86:34:c6:a3:72:de:73:11:94: 72:a2:d5:95:c0:64:cc:bb:a2:f3:1b:f2:e4:b3:a4: 28:d7:1e:75:fb:a2:25:c3:bc:04:bd:56:b0:f5:20: c0:13:a4:b3:11:01:f4:64:1a:11:12:6b:0d:44:26: 48:cf:67:80:19:94:1d:40:57:2a:40:57:59:e3:0c: a9:8f:45:68:e1:d4:f1:93:8e:cd:17:09:75:db:e8: 5a:24:08:e5:ae:96:66:e3:0e:db:90:39:c1:99:60: 58:c6:7b:86:4e:e1:81:c3:44:57:1d:d0:66:8b:8b: aa:38:53:9c:18:38:7d:7f:9c:dc:91:78:5a:32:cf: c9:ec:c3:f0:d7:ad:82:8a:ea:58:21:98:30:b7:78: 6f:d8:2b:3a:db:8b:51:fa:64:19:c8:3b:ea:e5:ae: 15:a3:6d:56:36:90:bb:25:07:03:f7:ff:97:c4:b4: 7e:c2:04:50:1f:22:be:15:35:aa:a1:b4:67:19:0f: c0:73:a3:b3:64:da:f2:a3:cd:27:16:2a:63:d9:9c: d6:06:c8:19:19:7c:2d:09:f3:16:9e:fe:3d:60:86: b8:28:ab:9b:75:49:e8:c2:9c:05:7d:02:89:86:da: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:18:0C:25:D8:2C:CE:0A:C7:02:FC:64:E6:54:1A:4E:1C:94:D2:12 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:6a:6d:7b:b6:60:80:75:47:b5:ef:f6:8c:ba:97:e9:c6:a7: c3:79:7a:06:54:1a:45:82:91:a6:96:07:16:33:bb:65:e1:f5: 79:8d:8f:f0:ac:c5:5a:af:b6:da:91:9e:27:82:c6:c3:a0:05: fb:b7:74:16:08:b9:a7:4f:44:5a:ea:aa:23:d1:da:6b:a2:6d: b5:a8:ec:8f:fc:ac:f7:73:db:11:c6:87:03:a2:c6:ea:02:9c: 10:26:f2:83:d4:93:da:12:28:37:36:6f:2e:83:19:c6:c4:ba: 09:2d:04:cf:09:ff:3a:f4:8c:a2:87:cd:50:ee:41:e3:da:c9: 2a:10:ed:6e:a4:5d:9e:52:86:98:a2:e1:9f:5d:b1:84:81:cc: e4:ef:10:b2:f0:c6:70:dc:a9:81:33:eb:d0:78:30:f0:cc:46: 82:4a:78:9a:e9:5a:ef:57:85:81:72:fb:2a:5a:e2:a8:bb:03: 25:68:57:98:b6:ec:ee:fb:d4:ef:10:d5:e3:4b:5f:e7:4a:15: 98:63:7e:c3:56:1f:73:33:03:be:02:83:9c:92:cd:c4:ce:1c: 20:08:35:a0:c8:58:da:83:a3:4c:c0:d4:1e:38:ea:b7:ea:0c: c8:16:05:11:69:30:77:40:f8:c0:31:fb:ec:5e:56:8f:9f:02: 84:2e:2d:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUwODA0MTcyNjU1WhcNMjUwODExMTcyNjU1WjAYMRYwFAYD VQQDEw02ODkwZWQ2MC05ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRiD6hPuMYGgR9WzV/0by6ybPXaGNMajct5zEZRyotWVwGTMu6LzG/Lks6Qo 1x51+6Ilw7wEvVaw9SDAE6SzEQH0ZBoREmsNRCZIz2eAGZQdQFcqQFdZ4wypj0Vo 4dTxk47NFwl12+haJAjlrpZm4w7bkDnBmWBYxnuGTuGBw0RXHdBmi4uqOFOcGDh9 f5zckXhaMs/J7MPw162CiupYIZgwt3hv2Cs624tR+mQZyDvq5a4Vo21WNpC7JQcD 9/+XxLR+wgRQHyK+FTWqobRnGQ/Ac6OzZNryo80nFipj2ZzWBsgZGXwtCfMWnv49 YIa4KKubdUnowpwFfQKJhtoYLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoYDCXY LM4KxwL8ZOZUGk4clNISMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUam17tmCAdUe17/aMupfpxqfDeXoGVBpFgpGmlgcWM7tl4fV5jY/w rMVar7bakZ4ngsbDoAX7t3QWCLmnT0Ra6qoj0dprom21qOyP/Kz3c9sRxocDosbq ApwQJvKD1JPaEig3Nm8ugxnGxLoJLQTPCf869Iyih81Q7kHj2skqEO1upF2eUoaY ouGfXbGEgczk7xCy8MZw3KmBM+vQeDDwzEaCSnia6VrvV4WBcvsqWuKouwMlaFeY tuzu+9TvENXjS1/nShWYY37DVh9zMwO+AoOcks3EzhwgCDWgyFjag6NMwNQeOOq3 6gzIFgURaTB3QPjAMfvsXlaPnwKELi0D -----END CERTIFICATE-----Generated at Wed Aug 6 16:13:07 2025 by rpki-client