$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: vEDc1yGiBF2HAn3httywLnO8DejrEq6sMp4pgK8T5ns= Subject key identifier: D7:82:48:63:4A:F7:F2:E2:2E:87:19:A6:EE:67:8D:7D:E2:32:13:09 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 0296 Signing time: Sat 09 Aug 2025 02:08:49 +0000 Manifest this update: Sat 09 Aug 2025 02:08:48 +0000 Manifest next update: Sat 16 Aug 2025 02:08:48 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: hzuV25KRvAWSswAUNcX6YadLIZF8xWhY9Y7q2wYKSLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Aug 9 02:08:48 2025 GMT Not After : Aug 16 02:08:48 2025 GMT Subject: CN=6896adb0-685b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:c6:c6:95:36:26:6f:86:60:33:3e:85:18: 54:df:29:86:41:ad:43:09:67:bb:54:4d:70:f3:8b: 52:b9:5f:9e:e7:d4:91:5a:03:34:9a:de:df:90:ba: 00:a8:5c:bb:8c:33:f6:c5:73:a6:e2:37:47:9c:d4: 39:a1:f1:ba:9d:fd:35:43:6b:93:31:52:b9:59:77: 18:b8:50:6c:82:c2:8d:12:07:e0:14:b4:06:48:1c: 00:c1:b9:0e:a9:35:c9:95:46:99:1e:44:d7:29:81: 42:cb:d9:f3:78:ad:9d:88:02:d9:7c:be:02:e2:b2: ce:44:e2:da:01:13:b5:fe:00:2f:17:3b:2e:1b:0d: 5c:cb:18:88:e0:d5:69:17:38:11:6b:28:c1:21:c0: dc:36:c5:72:93:94:3f:2f:10:45:f6:3e:22:63:e9: 5b:70:6a:25:c5:50:fb:08:00:71:9a:f7:40:08:bf: 0f:fc:4a:70:7d:80:0c:fd:1e:62:ff:46:b6:5e:6d: c9:48:11:c8:41:6a:7e:83:6a:76:e8:9a:bb:be:ab: 5a:e3:6d:a6:a8:f8:db:e0:0a:3b:c6:42:f9:69:90: 5e:49:f9:24:47:5f:f0:95:ef:3b:a0:1b:52:d8:34: 23:53:a6:71:11:0b:31:08:d9:12:f9:72:65:ed:f1: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:82:48:63:4A:F7:F2:E2:2E:87:19:A6:EE:67:8D:7D:E2:32:13:09 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:49:e5:2a:22:d7:ff:11:30:2c:35:0c:6e:66:4d:41:09: b4:ea:85:0f:64:04:9d:cb:27:92:e6:18:d7:f5:c6:3e:62:e4: d6:b4:a8:e3:c8:1b:2f:cf:41:ed:c7:2c:8c:bc:97:30:5b:25: fc:7a:59:fe:0d:07:01:2e:cb:48:91:57:c9:d4:54:26:22:11: f1:18:06:03:83:7d:4a:6c:58:cd:8b:c4:da:1b:b3:09:5a:b8: 44:2d:1a:91:65:b8:fc:4b:ba:06:be:0f:c8:49:75:db:cf:16: e9:7a:d4:a6:ee:31:92:73:9b:95:0b:3e:4e:42:1e:3c:1d:e8: 5b:da:73:55:e8:ec:a9:28:01:9f:a7:a7:27:21:ad:f8:df:56: 33:d3:85:e6:70:39:74:5a:6c:1d:50:a9:a9:0c:40:3f:6b:0a: 8a:2e:d3:1e:a1:64:fd:b4:fd:01:87:b4:a1:6a:4c:b2:25:38: 43:4c:e9:56:fd:9f:40:d9:e8:a8:89:b5:8b:8d:a1:13:71:af: dc:bc:01:9b:b6:28:aa:85:5d:e5:fa:a1:2b:eb:d1:d5:63:e3: d7:4f:2b:ff:3c:80:c8:46:9b:50:77:39:bd:05:7a:80:77:83: f0:a7:1b:99:a8:bc:0e:8f:38:8e:8f:34:c7:9e:d4:66:cc:db: b4:5e:18:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUwODA5MDIwODQ4WhcNMjUwODE2MDIwODQ4WjAYMRYwFAYD VQQDEw02ODk2YWRiMC02ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOnGxpU2Jm+GYDM+hRhU3ymGQa1DCWe7VE1w84tSuV+e59SRWgM0mt7fkLoA qFy7jDP2xXOm4jdHnNQ5ofG6nf01Q2uTMVK5WXcYuFBsgsKNEgfgFLQGSBwAwbkO qTXJlUaZHkTXKYFCy9nzeK2diALZfL4C4rLOROLaARO1/gAvFzsuGw1cyxiI4NVp FzgRayjBIcDcNsVyk5Q/LxBF9j4iY+lbcGolxVD7CABxmvdACL8P/EpwfYAM/R5i /0a2Xm3JSBHIQWp+g2p26Jq7vqta422mqPjb4Ao7xkL5aZBeSfkkR1/wle87oBtS 2DQjU6ZxEQsxCNkS+XJl7fGyWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeCSGNK 9/LiLocZpu5njX3iMhMJMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBya0nlKiLX/xEwLDUMbmZNQQm06oUPZASdyyeS5hjX9cY+YuTWtKjj yBsvz0HtxyyMvJcwWyX8eln+DQcBLstIkVfJ1FQmIhHxGAYDg31KbFjNi8TaG7MJ WrhELRqRZbj8S7oGvg/ISXXbzxbpetSm7jGSc5uVCz5OQh48Hehb2nNV6OypKAGf p6cnIa3431Yz04XmcDl0WmwdUKmpDEA/awqKLtMeoWT9tP0Bh7ShakyyJThDTOlW /Z9A2eioibWLjaETca/cvAGbtiiqhV3l+qEr69HVY+PXTyv/PIDIRptQdzm9BXqA d4PwpxuZqLwOjziOjzTHntRmzNu0XhgY -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:21 2025 by rpki-client