$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: NkleMP2auV8GwGQokfI6rvjpYArBka7At2b+ya+d4oI= Subject key identifier: B9:FF:34:BC:8E:A0:46:45:BF:53:C7:61:01:8D:3D:A7:8A:2E:59:74 Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 13EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 13E6 Signing time: Wed 06 Aug 2025 17:03:28 +0000 Manifest this update: Wed 06 Aug 2025 17:03:27 +0000 Manifest next update: Wed 13 Aug 2025 17:03:27 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: /BYWKDRgX362qGc+8PdqioBGuV7czBbOwE4wDRZ1xss=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: ttQKVIA3bhQ3yn0h9mDnukLDStF7uBzvZvWVyzWWSJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5102 (0x13ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Aug 6 17:03:27 2025 GMT Not After : Aug 13 17:03:27 2025 GMT Subject: CN=68938adf-9842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:96:f9:f5:31:db:e3:9a:16:56:31:48:be: a1:ce:d5:fc:7d:0b:bd:4a:c2:f1:3d:7d:1f:71:9a: a8:aa:b7:fa:80:70:b2:b5:44:8e:c8:45:81:14:ac: 73:d1:6c:0d:0a:2d:9b:ed:d9:b5:e0:2b:9c:5c:36: 57:18:e3:5c:01:bf:b6:0a:37:98:26:f3:41:c7:06: 3a:88:94:39:b1:cf:a6:6b:17:e4:4f:da:8a:69:e0: dd:09:23:d6:e7:c0:c6:f7:98:44:07:9b:bc:bf:08: 5d:3a:a3:3b:23:54:de:88:12:36:d3:ec:ef:ae:67: d0:be:00:50:a4:14:51:55:10:ea:20:8e:42:f4:b3: fb:b6:c1:1b:56:13:99:dd:7d:3d:49:45:f1:2e:55: 83:ff:64:9f:bd:76:09:11:7f:72:22:01:c0:be:ea: 1f:85:75:6d:21:58:49:fe:15:52:4a:28:e0:31:cd: fc:86:38:43:33:78:d6:18:80:cc:9a:7b:2e:c4:44: 51:61:8d:cf:8f:98:13:9f:d5:da:50:ea:f3:12:eb: 1b:87:fd:a8:08:62:79:60:05:59:71:43:c3:35:bb: 47:6a:90:d6:41:79:a9:25:8b:2a:9f:2a:0e:2c:82: 0e:2b:99:79:5d:ad:71:0c:9c:b8:56:07:fa:ca:17: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FF:34:BC:8E:A0:46:45:BF:53:C7:61:01:8D:3D:A7:8A:2E:59:74 X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:08:90:12:4a:4d:f8:4e:c2:02:b6:62:b7:a4:eb:0d:6e:14: 53:1b:01:0b:8f:2d:ab:bc:72:bb:83:ed:e0:45:69:0a:52:d9: df:d1:5c:0f:32:7b:6c:98:d4:a9:84:a0:d9:4a:56:1f:24:ee: 63:18:01:a4:4c:3c:c4:64:57:43:13:08:c1:ca:80:58:44:8c: 63:9e:12:3f:e5:05:39:29:0f:02:48:74:33:85:2c:99:3a:f4: 04:0a:cc:2b:25:42:76:65:2e:55:4a:62:20:ec:ab:2a:91:aa: ca:38:15:89:98:27:a1:e3:81:7e:b7:41:e1:e8:b9:69:44:70: f4:28:1e:e9:4a:d2:06:66:ee:17:9a:dd:21:88:f5:ef:f9:61: e7:09:f8:64:d4:6b:a4:64:f4:e4:9f:f6:93:57:1b:ab:34:86: 88:35:7d:6f:fa:28:ef:5a:20:28:0c:e3:9a:da:e0:2d:82:0a: fa:e1:36:31:c1:ad:80:cb:05:c6:4b:e7:7c:0c:e6:9c:fc:c3: ee:e8:b7:36:39:93:11:ee:c5:1e:09:8c:d4:eb:55:9e:3a:4a: dd:2e:51:e7:44:34:f7:76:d3:c9:48:a1:56:09:09:60:8b:85: 9c:49:69:72:37:3e:51:34:01:b3:c3:b0:6f:d2:64:ca:f3:69: 46:3a:73:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUwODA2MTcwMzI3WhcNMjUwODEzMTcwMzI3WjAYMRYwFAYD VQQDEw02ODkzOGFkZi05ODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspSW+fUx2+OaFlYxSL6hztX8fQu9SsLxPX0fcZqoqrf6gHCytUSOyEWBFKxz 0WwNCi2b7dm14CucXDZXGONcAb+2CjeYJvNBxwY6iJQ5sc+maxfkT9qKaeDdCSPW 58DG95hEB5u8vwhdOqM7I1TeiBI20+zvrmfQvgBQpBRRVRDqII5C9LP7tsEbVhOZ 3X09SUXxLlWD/2SfvXYJEX9yIgHAvuofhXVtIVhJ/hVSSijgMc38hjhDM3jWGIDM mnsuxERRYY3Pj5gTn9XaUOrzEusbh/2oCGJ5YAVZcUPDNbtHapDWQXmpJYsqnyoO LIIOK5l5Xa1xDJy4Vgf6yhdIEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn/NLyO oEZFv1PHYQGNPaeKLll0MB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5CJASSk34TsICtmK3pOsNbhRTGwELjy2rvHK7g+3gRWkKUtnf0VwP MntsmNSphKDZSlYfJO5jGAGkTDzEZFdDEwjByoBYRIxjnhI/5QU5KQ8CSHQzhSyZ OvQECswrJUJ2ZS5VSmIg7KsqkarKOBWJmCeh44F+t0Hh6LlpRHD0KB7pStIGZu4X mt0hiPXv+WHnCfhk1GukZPTkn/aTVxurNIaINX1v+ijvWiAoDOOa2uAtggr64TYx wa2AywXGS+d8DOac/MPu6Lc2OZMR7sUeCYzU61WeOkrdLlHnRDT3dtPJSKFWCQlg i4WcSWlyNz5RNAGzw7Bv0mTK82lGOnP/ -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:17 2025 by rpki-client