$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: yrsgD7zQ7om209chvOVEA03vfWx0ZGM4wye328wgki0= Subject key identifier: 3C:E2:26:AA:F9:1D:CA:06:D9:51:26:77:BA:E6:B4:94:78:76:C8:59 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 8C Signing time: Sat 09 Aug 2025 07:00:14 +0000 Manifest this update: Sat 09 Aug 2025 07:00:13 +0000 Manifest next update: Sat 16 Aug 2025 07:00:13 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: 64J1m/3ZZ2Zr26/yUyvhQeEVhPYnF1jG3UFxyn/QN6E=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Aug 9 07:00:13 2025 GMT Not After : Aug 16 07:00:13 2025 GMT Subject: CN=6896f1fd-cc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:69:d2:21:b6:4a:d6:46:5d:da:d8:e9:42: 7b:6c:12:39:80:67:2c:a9:3f:87:33:72:3c:70:54: fd:23:89:a3:d1:2d:27:77:5c:db:3f:7b:f0:b7:66: c8:ab:b3:f5:34:49:dc:00:25:09:0e:e8:d5:28:e1: 8d:ea:17:4d:11:7b:77:25:71:c6:cf:7a:c0:34:2d: 39:3e:a2:90:b2:0d:1e:99:27:86:37:f5:e2:61:ec: b6:9c:5f:71:23:c8:c9:10:3c:f6:ec:ad:72:a3:39: d7:d2:cb:55:72:e1:3c:71:07:97:de:de:2a:4e:f1: 85:78:fd:7d:0f:d5:42:d1:bf:c3:d2:dc:ad:12:59: 09:80:ff:a8:f9:1d:11:89:d8:2c:dc:50:a2:c8:89: 34:c1:eb:7a:e9:de:b4:ce:e4:b1:0a:ef:78:b3:15: d6:40:46:14:7a:ef:9c:af:a7:3d:9d:f2:c2:bf:6a: f1:dd:17:79:e2:ef:23:14:84:47:d6:76:0e:d8:cc: d5:1c:f9:78:74:79:de:f5:23:d0:5e:0d:38:24:b9: d2:0d:9b:1e:ff:d1:b6:a0:b8:4a:5b:9b:54:31:4a: e9:fc:70:cb:82:ea:1e:79:c3:96:e6:92:33:c0:c6: 93:58:3b:dc:b4:99:70:83:9a:74:d7:e5:68:6d:04: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E2:26:AA:F9:1D:CA:06:D9:51:26:77:BA:E6:B4:94:78:76:C8:59 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:82:25:c3:75:72:02:b3:38:d6:32:0a:ca:b0:50:79:0d:d6: 90:b3:1c:2e:43:88:fa:97:8a:0a:97:f2:49:4b:7e:17:82:7e: 3a:eb:75:77:4d:49:57:f0:4b:3a:e9:fc:ae:db:db:a1:2e:2f: f7:de:e9:a4:5b:95:e6:46:bb:da:ee:a0:88:c7:9d:87:f1:0a: c9:a6:d3:2f:5f:5b:d8:f6:d7:8b:40:10:a4:5a:0a:ee:c5:70: 91:12:45:bc:8c:df:2e:9f:99:1b:73:77:cd:90:a6:d3:a7:04: 91:63:25:ce:56:a8:9f:8d:cd:9d:59:37:65:cf:93:6d:ec:e0: 0d:5b:f0:88:ed:14:bb:61:85:54:80:16:d6:bf:06:e2:4d:44: 6f:2a:0a:dd:71:39:11:0d:b8:38:b8:a6:14:50:18:19:ee:c1: a4:6c:1a:eb:a6:8b:eb:e9:59:ae:66:c8:17:30:e2:88:4e:c4: 87:21:cd:67:f1:c1:5a:78:f4:95:f8:22:8b:dd:18:84:30:9b: 31:5a:2c:11:d1:79:f7:a2:c9:84:64:a6:91:7d:9a:7e:89:1a: 40:07:20:91:d7:73:94:6e:85:79:b6:a2:49:9e:54:6a:d8:f2: 42:4e:60:4c:1e:a5:98:ba:17:ca:e3:5d:69:fe:1b:3d:4c:43: ea:e8:01:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjUwODA5MDcwMDEzWhcNMjUwODE2MDcwMDEzWjAYMRYwFAYD VQQDEw02ODk2ZjFmZC1jYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Lhp0iG2StZGXdrY6UJ7bBI5gGcsqT+HM3I8cFT9I4mj0S0nd1zbP3vwt2bI q7P1NEncACUJDujVKOGN6hdNEXt3JXHGz3rANC05PqKQsg0emSeGN/XiYey2nF9x I8jJEDz27K1yoznX0stVcuE8cQeX3t4qTvGFeP19D9VC0b/D0tytElkJgP+o+R0R idgs3FCiyIk0wet66d60zuSxCu94sxXWQEYUeu+cr6c9nfLCv2rx3Rd54u8jFIRH 1nYO2MzVHPl4dHne9SPQXg04JLnSDZse/9G2oLhKW5tUMUrp/HDLguoeecOW5pIz wMaTWDvctJlwg5p01+VobQR2+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDziJqr5 HcoG2VEmd7rmtJR4dshZMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYgiXDdXICszjWMgrKsFB5DdaQsxwuQ4j6l4oKl/JJS34Xgn4663V3 TUlX8Es66fyu29uhLi/33umkW5XmRrva7qCIx52H8QrJptMvX1vY9teLQBCkWgru xXCREkW8jN8un5kbc3fNkKbTpwSRYyXOVqifjc2dWTdlz5Nt7OANW/CI7RS7YYVU gBbWvwbiTURvKgrdcTkRDbg4uKYUUBgZ7sGkbBrrpovr6VmuZsgXMOKITsSHIc1n 8cFaePSV+CKL3RiEMJsxWiwR0Xn3osmEZKaRfZp+iRpAByCR13OUboV5tqJJnlRq 2PJCTmBMHqWYuhfK411p/hs9TEPq6AFn -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:30 2025 by rpki-client