$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: BA7Myc9LN14474QN/uDGwKIZAKWKmVHVvrvqMOij37Y= Subject key identifier: 16:68:8E:05:0C:60:C5:37:68:79:AA:CE:E5:19:C3:92:9B:D4:80:39 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 139F Signing time: Sun 10 Aug 2025 16:59:00 +0000 Manifest this update: Sun 10 Aug 2025 16:59:00 +0000 Manifest next update: Sun 17 Aug 2025 16:59:00 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: N/Ukr2dGFMdx3jcEOt4WOs0Ge2bqhNpVEUWkgQnZC0w=) 2: 870235BE6B8E11F08983D440C4F9AE02.roa (hash: GDGIJdUGrEpRxBwv81PQh+d/BM2qnePmCvJ7OBX7XYs=) 3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5072 (0x13d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Aug 10 16:59:00 2025 GMT Not After : Aug 17 16:59:00 2025 GMT Subject: CN=6898cfd4-21a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:33:cb:e2:27:a7:09:b8:c4:bf:12:df:6b:50: 27:5c:06:fc:d7:70:f2:2f:18:77:28:19:10:9b:02: 27:53:b6:22:a9:1c:a6:58:30:fb:fc:58:58:f0:f7: 5f:42:1a:bf:87:ee:c1:33:12:45:c7:2b:da:84:2e: 5a:ba:10:e4:66:5a:f9:04:0f:61:b4:01:f9:57:32: fa:41:8c:6b:16:b4:f5:55:c4:cd:5e:3f:74:a1:ed: e0:ae:44:c6:a2:26:98:ca:49:90:99:9b:ca:ba:16: 26:8b:64:48:1a:33:72:7d:8d:89:eb:5d:58:c9:95: 3c:09:22:31:3e:c5:8e:74:31:c1:a6:bf:b7:f9:67: 37:c5:18:22:26:4c:33:10:e2:86:94:0d:f2:30:1c: 09:29:d3:22:58:a0:b6:9e:e2:89:13:5d:8c:d6:ad: 08:5d:c6:95:df:f7:83:d9:04:2b:35:4e:b5:84:19: 47:9a:d4:9d:ba:75:b8:1f:4d:2f:78:0a:b3:44:cf: a9:3b:00:71:21:3b:df:6a:5a:62:46:88:03:23:7f: cb:7f:5d:1a:16:03:96:9f:c0:d2:a2:be:11:52:f7: 1b:76:70:86:72:38:83:cd:ac:10:32:34:e6:5f:85: 97:47:cc:eb:a6:62:75:e7:0c:7b:b2:a7:5d:31:7e: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:68:8E:05:0C:60:C5:37:68:79:AA:CE:E5:19:C3:92:9B:D4:80:39 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ba:41:26:8e:02:11:99:39:f6:0d:22:a8:5d:24:7c:dd:a4: f4:6a:5c:9b:f0:b8:e3:86:c5:cc:f4:d1:ed:55:09:40:7f:87: 24:a2:f0:a0:de:90:64:c9:5f:ee:12:e5:95:9a:85:f3:33:85: bf:80:e7:67:0e:c7:0a:d2:01:3c:84:d4:85:e7:45:61:8e:8c: 18:07:ee:a1:7b:d4:7c:ef:da:94:be:05:d9:38:a1:4a:12:58: 56:f5:3c:7e:b7:ec:28:ee:08:cd:f3:75:66:e8:af:99:0c:6a: 6b:29:df:14:d7:57:bc:03:89:79:e1:0d:0b:cb:63:97:bf:42: b9:52:ac:04:c1:ef:d5:aa:3b:e0:5e:49:8b:69:b1:4a:6f:0b: d2:4d:77:cb:f7:4c:5f:a0:7b:74:12:ab:8f:8e:71:a6:13:c3: 2e:e7:96:f7:cd:f7:26:04:38:b2:79:d0:4c:0d:f0:f6:d3:7f: fe:93:62:8e:91:9c:51:f6:e2:33:85:99:aa:b7:1f:b2:66:17: 7c:ee:6f:c1:b1:f4:7b:2f:00:86:99:75:34:c7:6c:71:47:d9: 4a:51:79:18:96:ab:9d:3b:39:cf:19:2e:59:20:f9:60:8b:cd: 4b:65:e3:5f:49:58:b7:5e:e6:d5:98:74:8e:c2:f9:e3:10:77: 3f:41:63:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwODEwMTY1OTAwWhcNMjUwODE3MTY1OTAwWjAYMRYwFAYD VQQDEw02ODk4Y2ZkNC0yMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DPL4ienCbjEvxLfa1AnXAb813DyLxh3KBkQmwInU7YiqRymWDD7/FhY8Pdf Qhq/h+7BMxJFxyvahC5auhDkZlr5BA9htAH5VzL6QYxrFrT1VcTNXj90oe3grkTG oiaYykmQmZvKuhYmi2RIGjNyfY2J611YyZU8CSIxPsWOdDHBpr+3+Wc3xRgiJkwz EOKGlA3yMBwJKdMiWKC2nuKJE12M1q0IXcaV3/eD2QQrNU61hBlHmtSdunW4H00v eAqzRM+pOwBxITvfalpiRogDI3/Lf10aFgOWn8DSor4RUvcbdnCGcjiDzawQMjTm X4WXR8zrpmJ15wx7sqddMX7m8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZojgUM YMU3aHmqzuUZw5Kb1IA5MB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnukEmjgIRmTn2DSKoXSR83aT0alyb8LjjhsXM9NHtVQlAf4ckovCg 3pBkyV/uEuWVmoXzM4W/gOdnDscK0gE8hNSF50VhjowYB+6he9R879qUvgXZOKFK ElhW9Tx+t+wo7gjN83Vm6K+ZDGprKd8U11e8A4l54Q0Ly2OXv0K5UqwEwe/Vqjvg XkmLabFKbwvSTXfL90xfoHt0EquPjnGmE8Mu55b3zfcmBDiyedBMDfD203/+k2KO kZxR9uIzhZmqtx+yZhd87m/BsfR7LwCGmXU0x2xxR9lKUXkYlqudOznPGS5ZIPlg i81LZeNfSVi3XubVmHSOwvnjEHc/QWNu -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:20 2025 by rpki-client