$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: lA2EUL1HgZdXxlOoOlvtgehpgieFCTzhFp7CmYTLc+I= Subject key identifier: 3E:FB:1F:02:D6:65:7E:2C:6E:23:6C:B6:46:30:E1:AC:AC:53:6E:F9 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 023E Signing time: Mon 11 Aug 2025 02:07:30 +0000 Manifest this update: Mon 11 Aug 2025 02:07:29 +0000 Manifest next update: Mon 18 Aug 2025 02:07:29 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: Xoo0OZ5G0HVshNmVZYQFKTIbrZDbOhPchp68hhj8Kxk=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: 6NVu2HEI/2vQueP99wzaqxsinrZpCobkN5jNBib82oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Aug 11 02:07:29 2025 GMT Not After : Aug 18 02:07:29 2025 GMT Subject: CN=68995061-7739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:8f:62:a1:16:e5:0e:eb:6b:44:77:26:0a: 35:bf:65:07:7e:57:d0:a0:e9:e5:52:2c:78:e4:16: be:fb:07:8a:6b:dc:b5:87:0d:d3:c9:69:f9:0a:32: 0e:f2:50:90:64:29:b9:30:41:f3:b2:26:46:42:01: 02:6e:e1:fe:2f:f5:d6:f6:22:99:f6:ff:4d:ab:1a: 08:69:c7:ee:92:8e:b4:e4:23:8e:b6:42:f2:95:34: f8:ca:9c:ce:6a:9a:4e:3b:f1:45:bc:ca:ac:c2:3f: d0:81:cc:75:a1:b0:6b:a5:d2:23:b0:7b:5a:ba:60: ba:2f:1f:f5:b8:01:13:3b:7e:ad:3f:60:4f:cf:9d: e0:ff:89:bd:9a:76:70:64:37:9c:41:df:15:4a:06: e0:12:da:a2:c5:6e:37:f8:e4:7e:3b:8c:ed:ff:ce: 3d:ba:30:31:e3:7e:f2:ca:bf:b1:35:9f:88:5b:a9: 37:91:dd:3c:75:f4:cf:af:3a:46:45:6d:c7:2a:82: 11:98:ac:c4:d4:1b:7c:98:2c:b8:e7:f4:81:36:3e: 72:a1:bd:dd:ca:a3:78:f3:7e:10:a6:65:89:7f:44: d8:cb:a9:4d:a5:9a:ef:ae:d4:79:34:0f:1d:45:2b: f3:67:8f:3b:ef:41:21:51:ee:8e:d1:43:d6:86:c5: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FB:1F:02:D6:65:7E:2C:6E:23:6C:B6:46:30:E1:AC:AC:53:6E:F9 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:ee:40:d9:2f:43:82:49:fc:be:cb:d9:f3:12:40:78:c4: 40:2d:d6:b1:12:f8:61:6a:09:36:d6:66:13:9e:40:21:66:56: 72:bc:c1:57:44:8f:2d:35:3c:f7:85:b1:45:98:aa:cc:89:94: b7:5f:ae:35:48:7f:4e:7d:b6:c2:a0:f5:a7:ec:23:1b:2b:9c: 90:55:ca:8c:8a:6b:7b:2e:6a:12:5b:5d:75:c7:e4:1f:80:0b: 7a:4b:3b:e2:66:6a:df:6b:ae:30:2b:c1:41:e9:f0:f3:26:96: ca:4e:31:50:ad:23:09:b5:94:7a:a0:3f:5b:9d:be:dc:59:95: e7:74:97:71:f9:38:80:f0:99:d6:7b:fd:a1:65:1a:af:ad:6c: ea:92:5e:09:f1:d7:10:db:71:7e:6f:aa:eb:5c:ba:04:46:a2: 5b:80:34:31:52:86:81:36:86:fa:b7:d7:d5:91:a0:06:58:1c: f6:7f:1f:e1:08:92:a6:ce:c7:47:d9:f6:0c:32:8a:91:6f:3f: b4:eb:31:c8:81:7f:ea:26:d7:c1:a7:9b:83:80:fd:53:e9:78: b6:91:29:8f:a6:b9:a5:91:00:06:53:74:6a:4b:4c:85:5e:83: c6:7c:0a:85:9a:d0:37:15:6f:ae:ff:a6:cd:0a:10:8c:05:32: b2:4b:7e:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUwODExMDIwNzI5WhcNMjUwODE4MDIwNzI5WjAYMRYwFAYD VQQDEw02ODk5NTA2MS03NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gSPYqEW5Q7ra0R3Jgo1v2UHflfQoOnlUix45Ba++weKa9y1hw3TyWn5CjIO 8lCQZCm5MEHzsiZGQgECbuH+L/XW9iKZ9v9NqxoIacfuko605COOtkLylTT4ypzO appOO/FFvMqswj/Qgcx1obBrpdIjsHtaumC6Lx/1uAETO36tP2BPz53g/4m9mnZw ZDecQd8VSgbgEtqixW43+OR+O4zt/849ujAx437yyr+xNZ+IW6k3kd08dfTPrzpG RW3HKoIRmKzE1Bt8mCy45/SBNj5yob3dyqN4834QpmWJf0TYy6lNpZrvrtR5NA8d RSvzZ48770EhUe6O0UPWhsWxdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD77HwLW ZX4sbiNstkYw4aysU275MB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiXu5A2S9Dgkn8vsvZ8xJAeMRALdaxEvhhagk21mYTnkAhZlZyvMFX RI8tNTz3hbFFmKrMiZS3X641SH9OfbbCoPWn7CMbK5yQVcqMimt7LmoSW111x+Qf gAt6SzviZmrfa64wK8FB6fDzJpbKTjFQrSMJtZR6oD9bnb7cWZXndJdx+TiA8JnW e/2hZRqvrWzqkl4J8dcQ23F+b6rrXLoERqJbgDQxUoaBNob6t9fVkaAGWBz2fx/h CJKmzsdH2fYMMoqRbz+06zHIgX/qJtfBp5uDgP1T6Xi2kSmPprmlkQAGU3RqS0yF XoPGfAqFmtA3FW+u/6bNChCMBTKyS36d -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:47 2025 by rpki-client