$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: Zacf6p/bNTacRQVasI8yTV2jK1mrv1kdoK7wwM7zFR8= Subject key identifier: EA:71:A0:4D:F0:8F:79:BB:0B:76:62:11:A9:E7:C4:BE:16:7B:6F:13 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 2469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 244A Signing time: Tue 12 Aug 2025 15:52:14 +0000 Manifest this update: Tue 12 Aug 2025 15:52:14 +0000 Manifest next update: Tue 19 Aug 2025 15:52:14 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: pMuEJM18gfWxzZsoZPGiWI/Bn+x3FGkbKjzSWcEpyno=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: FG0kBNgcXB2ccIKTcUxFDt6fNDa7To3h1nclZ9D+gJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9321 (0x2469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Aug 12 15:52:14 2025 GMT Not After : Aug 19 15:52:14 2025 GMT Subject: CN=689b632e-d515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:d7:8c:26:c0:76:08:eb:be:b4:6a:47:2f: a7:8f:e5:e5:75:84:27:c8:5a:b0:65:d0:dd:34:ae: a7:48:84:81:86:53:12:06:a6:de:44:da:6e:79:a4: 32:e9:85:5b:32:b3:f9:70:7e:8a:f1:6f:47:71:b9: 54:e7:03:7d:2d:7c:03:f6:f7:86:80:cc:08:b9:38: b1:52:d4:e4:da:12:b1:eb:9c:43:46:eb:79:b1:1b: 36:fe:4c:04:ad:8b:40:89:1a:d1:65:2b:14:90:9d: 60:1f:0d:84:d7:1f:8d:5f:c3:0d:b6:8e:c0:61:5d: 44:2c:54:16:56:90:0b:4b:e2:19:c6:5f:13:5e:95: 9c:f7:d8:ee:5f:24:0c:33:d6:55:17:b6:97:2d:05: 32:da:93:31:d3:06:9f:b2:75:70:11:98:8b:c7:15: 50:30:93:a7:b6:37:66:a4:32:a2:d1:97:b8:de:5d: cc:70:8f:37:a8:f1:f9:5c:d9:f9:12:02:a8:7f:75: da:ec:2b:d5:98:db:63:53:b3:50:52:ef:e3:90:78: d7:8e:e2:1d:18:03:64:b2:bb:c6:58:ef:76:64:5d: 13:76:be:f0:cb:1e:fe:55:3a:90:f2:8b:93:36:62: c1:4a:69:1b:65:2e:16:bd:45:ef:e7:32:c4:00:ce: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:A0:4D:F0:8F:79:BB:0B:76:62:11:A9:E7:C4:BE:16:7B:6F:13 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:38:24:71:0c:9a:72:15:62:30:47:04:c0:3a:94:14:bd:93: ac:5c:a6:4f:5e:cf:b4:8a:f8:92:16:52:57:36:2d:ce:80:63: 2f:fe:0f:68:b6:e6:de:66:97:be:11:7a:4c:0c:10:65:36:45: 6b:1c:c6:cb:d4:6c:bb:22:6a:d5:e7:32:1c:92:75:37:64:89: bc:b8:be:d4:80:48:3c:ad:1d:ba:7e:84:dc:f2:df:0b:4b:01: f8:b3:3a:3a:74:9f:80:9e:32:ab:ac:ac:a7:dd:7b:d4:8f:2f: a1:8c:1e:42:87:7c:64:fc:ec:67:45:9b:6e:6d:32:20:ad:63: bc:94:07:f8:d0:bb:f7:75:40:bc:a0:2c:4e:ac:e3:86:f4:96: d1:13:23:4d:de:af:3c:ca:f5:ff:b5:3f:94:a2:74:3b:13:00: 85:fa:6c:24:62:db:ce:f4:61:b1:c8:41:af:fe:d8:51:d1:1c: 2f:24:9b:cf:2b:20:1a:f8:99:50:d0:82:92:4f:c3:ba:29:62: c0:f4:d0:db:26:47:e8:79:78:19:09:63:8c:fc:80:fd:ad:9d: e4:d2:48:1b:29:4d:60:b2:8c:6a:cd:fe:35:39:00:b2:f0:a3: a1:cb:bf:3d:b7:de:ef:02:ee:dd:da:06:67:d4:33:de:22:0e: 43:fd:37:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwODEyMTU1MjE0WhcNMjUwODE5MTU1MjE0WjAYMRYwFAYD VQQDEw02ODliNjMyZS1kNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGDXjCbAdgjrvrRqRy+nj+XldYQnyFqwZdDdNK6nSISBhlMSBqbeRNpueaQy 6YVbMrP5cH6K8W9HcblU5wN9LXwD9veGgMwIuTixUtTk2hKx65xDRut5sRs2/kwE rYtAiRrRZSsUkJ1gHw2E1x+NX8MNto7AYV1ELFQWVpALS+IZxl8TXpWc99juXyQM M9ZVF7aXLQUy2pMx0wafsnVwEZiLxxVQMJOntjdmpDKi0Ze43l3McI83qPH5XNn5 EgKof3Xa7CvVmNtjU7NQUu/jkHjXjuIdGANksrvGWO92ZF0Tdr7wyx7+VTqQ8ouT NmLBSmkbZS4WvUXv5zLEAM5ujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpxoE3w j3m7C3ZiEannxL4We28TMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABOCRxDJpyFWIwRwTAOpQUvZOsXKZPXs+0iviSFlJXNi3OgGMv/g9o tubeZpe+EXpMDBBlNkVrHMbL1Gy7ImrV5zIcknU3ZIm8uL7UgEg8rR26foTc8t8L SwH4szo6dJ+AnjKrrKyn3XvUjy+hjB5Ch3xk/OxnRZtubTIgrWO8lAf40Lv3dUC8 oCxOrOOG9JbREyNN3q88yvX/tT+UonQ7EwCF+mwkYtvO9GGxyEGv/thR0RwvJJvP KyAa+JlQ0IKST8O6KWLA9NDbJkfoeXgZCWOM/ID9rZ3k0kgbKU1gsoxqzf41OQCy 8KOhy789t97vAu7d2gZn1DPeIg5D/TfP -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:28 2025 by rpki-client