$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: dnNKIBlFaKso5cFke5OxGhgt/BL4Hz2ZuRb83YqnRQw= Subject key identifier: 24:91:12:85:9D:12:50:36:47:35:4E:E8:0F:7B:75:3D:8E:7F:48:8B Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0C6D Signing time: Sun 10 Aug 2025 18:21:59 +0000 Manifest this update: Sun 10 Aug 2025 18:21:58 +0000 Manifest next update: Sun 17 Aug 2025 18:21:58 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: rMgyvCZpcIwaBhUEkV0MVWphx7WeY+nq5ADwwmS5EjU=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Aug 10 18:21:58 2025 GMT Not After : Aug 17 18:21:58 2025 GMT Subject: CN=6898e346-af4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:02:6f:83:07:53:ba:47:d7:9a:e4:49:3a: a8:e0:14:c8:ee:ea:d4:a9:2c:9e:f7:2b:c2:98:1c: 92:bb:ff:fd:80:09:a2:2e:80:32:88:d3:3c:0d:ed: ca:dd:aa:d2:41:8f:fd:c6:60:36:12:9a:d9:30:7c: e4:e6:91:99:82:30:56:3f:ef:1c:66:a2:d7:5c:83: 9e:0f:c8:2f:82:8b:08:92:7f:7f:1f:fa:47:33:13: 2c:78:75:34:50:e3:91:c5:91:a9:47:40:d9:b4:ad: b9:a8:b6:a2:e6:56:12:a6:29:ae:d2:cf:b7:5b:95: ca:70:74:fd:22:90:f9:af:57:3e:64:d8:31:ca:d2: ba:85:38:82:b5:78:6b:00:8d:da:70:57:80:f1:20: f4:be:74:74:3d:ee:42:c6:dc:bb:60:c8:88:f6:f5: 95:db:95:12:02:83:ce:0b:f9:a6:38:c3:27:39:d0: 7e:a7:20:21:71:7b:db:7d:04:93:57:9c:d5:81:df: 06:32:b0:bb:e2:70:21:9f:ab:80:35:3a:1b:a9:84: be:fe:a8:cf:23:b6:a5:cd:a2:1d:72:7a:ae:c7:1b: bb:2c:10:48:6d:0d:e2:df:b3:4c:42:2a:1e:75:a3: 7c:9c:68:1a:e2:2c:96:7e:25:7b:dc:34:6d:4f:39: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:12:85:9D:12:50:36:47:35:4E:E8:0F:7B:75:3D:8E:7F:48:8B X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:5d:fe:8f:b1:df:b5:b7:8a:b3:9c:52:24:0e:74:ff:ed:a5: 8a:79:8b:15:77:8a:7e:04:e0:e3:fc:07:d8:2e:d4:4e:c8:21: fb:84:71:3b:bf:df:6a:1b:f1:24:5f:dc:e5:b0:23:d7:de:c5: 3b:c6:24:8e:95:1e:74:f1:b2:d7:e7:9b:09:51:bc:95:23:a6: 27:dd:a1:02:06:44:50:5c:6d:c4:75:3e:3f:a5:1d:21:db:31: 0a:5a:78:c2:3e:ca:25:e5:75:40:16:7a:d7:15:35:e0:64:51: d1:8b:a0:31:c1:f2:6b:ed:5e:8a:df:7c:43:53:b4:13:ad:47: 86:7f:81:c4:9c:4b:60:b7:bd:5d:97:89:55:dd:c5:af:8c:39: f5:b1:2a:69:23:2d:0c:9a:de:9d:8f:6f:86:45:64:a9:88:5a: 5e:00:1b:85:6e:32:7f:ba:3a:d0:ef:3f:72:46:a0:25:6b:a7: 64:c4:e2:4a:14:db:39:ac:24:d4:80:e9:3b:0a:d8:4f:23:6b: 2e:b1:87:94:75:64:7b:f1:18:7c:9e:49:7a:74:ff:59:a5:a0: 7b:bd:83:d0:08:b5:d7:47:82:1f:d9:fe:bb:97:7a:74:9e:1f: e0:41:7e:72:80:b7:f1:60:a1:66:df:e5:71:7d:2f:c5:94:0c: 6c:18:19:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUwODEwMTgyMTU4WhcNMjUwODE3MTgyMTU4WjAYMRYwFAYD VQQDEw02ODk4ZTM0Ni1hZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkcCb4MHU7pH15rkSTqo4BTI7urUqSye9yvCmBySu//9gAmiLoAyiNM8De3K 3arSQY/9xmA2EprZMHzk5pGZgjBWP+8cZqLXXIOeD8gvgosIkn9/H/pHMxMseHU0 UOORxZGpR0DZtK25qLai5lYSpimu0s+3W5XKcHT9IpD5r1c+ZNgxytK6hTiCtXhr AI3acFeA8SD0vnR0Pe5Cxty7YMiI9vWV25USAoPOC/mmOMMnOdB+pyAhcXvbfQST V5zVgd8GMrC74nAhn6uANTobqYS+/qjPI7alzaIdcnquxxu7LBBIbQ3i37NMQioe daN8nGga4iyWfiV73DRtTzkYGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSREoWd ElA2RzVO6A97dT2Of0iLMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Xf6Psd+1t4qznFIkDnT/7aWKeYsVd4p+BODj/AfYLtROyCH7hHE7 v99qG/EkX9zlsCPX3sU7xiSOlR508bLX55sJUbyVI6Yn3aECBkRQXG3EdT4/pR0h 2zEKWnjCPsol5XVAFnrXFTXgZFHRi6AxwfJr7V6K33xDU7QTrUeGf4HEnEtgt71d l4lV3cWvjDn1sSppIy0Mmt6dj2+GRWSpiFpeABuFbjJ/ujrQ7z9yRqAla6dkxOJK FNs5rCTUgOk7CthPI2susYeUdWR78Rh8nkl6dP9ZpaB7vYPQCLXXR4If2f67l3p0 nh/gQX5ygLfxYKFm3+VxfS/FlAxsGBkb -----END CERTIFICATE-----Generated at Mon Aug 11 06:03:04 2025 by rpki-client