$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: OCVOtjXnsaMoN3TsdzjFzSKdxmZsIeIDGgmqHhVPL0w= Subject key identifier: 07:7F:B6:58:41:A6:99:49:A1:6D:F9:B4:41:3A:6E:48:6C:EB:06:D1 Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 2D Signing time: Sat 09 Aug 2025 08:12:51 +0000 Manifest this update: Sat 09 Aug 2025 08:12:50 +0000 Manifest next update: Sat 16 Aug 2025 08:12:50 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: NrD7zdn6fFqk2jBwQM+ayH9BdF27FBZceWYOv4l1jqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Aug 9 08:12:50 2025 GMT Not After : Aug 16 08:12:50 2025 GMT Subject: CN=68970302-75fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:15:e5:68:5c:1b:58:8a:94:d2:37:d9:63: 8c:08:8b:e3:90:ab:57:cd:7e:fe:14:69:bd:e1:d9: d5:18:80:ba:b6:62:1d:11:de:6b:c9:18:83:ed:e7: d0:5d:44:47:66:27:88:8f:e3:59:6f:9a:78:d5:67: 00:4f:76:38:14:37:9a:b6:5b:f0:06:98:1e:f3:ee: df:e9:9d:f1:84:1f:9c:79:92:d7:36:00:10:05:f9: c0:c8:63:6c:b3:14:8b:e0:a0:5e:29:a4:b3:4d:78: 49:f3:68:f4:97:bf:86:7f:33:4b:52:4a:52:33:92: 14:85:95:40:32:e9:4e:bc:9b:02:ad:bf:3e:81:c9: b2:b9:46:20:23:a5:06:13:52:b2:e2:0d:c7:5b:90: 31:e9:57:8a:a8:d5:6d:1b:e7:d0:3e:f2:2d:c9:02: 8c:d8:d9:2c:fd:8c:58:23:23:5d:a2:bf:e2:bc:6d: 3d:0f:83:40:ce:b4:e0:4f:95:4a:66:2e:c5:82:9d: e4:c7:0a:b7:ad:51:4e:d3:1a:bc:e7:bd:bd:56:b1: f9:54:a0:02:6f:10:06:08:7c:22:b9:3f:f2:82:e6: 17:5e:fc:c7:5b:cd:38:19:de:91:27:ba:05:55:03: 44:c6:2e:0f:70:fa:fb:bf:e0:12:28:63:6e:ca:27: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7F:B6:58:41:A6:99:49:A1:6D:F9:B4:41:3A:6E:48:6C:EB:06:D1 X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1f:eb:89:0c:46:35:ea:15:e8:a4:5b:29:11:fa:e8:7d:0f: 03:d0:e4:cf:4c:36:f8:e1:32:0f:71:29:77:5f:25:9f:15:59: ec:4f:09:c7:2d:58:37:ea:7b:81:23:bd:97:9a:0b:6c:b3:7b: 6b:84:a8:41:6e:21:50:a6:fe:f3:e7:a6:32:f5:63:58:8a:44: 23:2d:28:f0:64:23:61:88:c2:07:10:40:75:99:9a:e0:77:85: bf:38:80:44:0f:b8:d9:64:2b:81:e1:52:91:5c:08:6b:07:58: cb:e9:19:22:15:e6:96:5c:4c:38:ea:d0:45:08:97:d1:38:d9: 07:50:f2:d2:fd:e3:59:b8:fc:7a:b3:f3:82:d1:c5:ee:2b:04: 3c:33:a5:5f:26:fd:ce:07:e9:a8:e7:55:a7:0b:a6:d7:7e:d6: 15:f6:ae:1d:95:20:05:36:e0:fc:43:65:c3:3b:d5:19:76:65: 20:de:53:b7:74:57:56:a7:0a:78:e1:bb:14:66:df:1e:23:84: 6c:95:02:3c:ed:b3:7c:db:d7:13:ce:a7:37:58:89:19:56:bd: d3:49:e6:b5:e0:50:34:6c:99:1a:a3:4b:48:1b:b9:8f:83:c3: a4:fc:4b:3d:a6:29:22:4c:6c:8f:d5:f9:b5:dd:7d:19:28:46: 3d:0e:31:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTA4MDkwODEyNTBaFw0yNTA4MTYwODEyNTBaMBgxFjAUBgNV BAMTDTY4OTcwMzAyLTc1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ChXlaFwbWIqU0jfZY4wIi+OQq1fNfv4Uab3h2dUYgLq2Yh0R3mvJGIPt59Bd REdmJ4iP41lvmnjVZwBPdjgUN5q2W/AGmB7z7t/pnfGEH5x5ktc2ABAF+cDIY2yz FIvgoF4ppLNNeEnzaPSXv4Z/M0tSSlIzkhSFlUAy6U68mwKtvz6BybK5RiAjpQYT UrLiDcdbkDHpV4qo1W0b59A+8i3JAozY2Sz9jFgjI12iv+K8bT0Pg0DOtOBPlUpm LsWCneTHCretUU7TGrznvb1WsflUoAJvEAYIfCK5P/KC5hde/MdbzTgZ3pEnugVV A0TGLg9w+vu/4BIoY27KJ4wBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB3+2WEGm mUmhbfm0QTpuSGzrBtEwHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEEf64kMRjXqFeikWykR+uh9DwPQ5M9MNvjhMg9xKXdfJZ8VWexPCcct WDfqe4EjvZeaC2yze2uEqEFuIVCm/vPnpjL1Y1iKRCMtKPBkI2GIwgcQQHWZmuB3 hb84gEQPuNlkK4HhUpFcCGsHWMvpGSIV5pZcTDjq0EUIl9E42QdQ8tL941m4/Hqz 84LRxe4rBDwzpV8m/c4H6ajnVacLptd+1hX2rh2VIAU24PxDZcM71Rl2ZSDeU7d0 V1anCnjhuxRm3x4jhGyVAjzts3zb1xPOpzdYiRlWvdNJ5rXgUDRsmRqjS0gbuY+D w6T8Sz2mKSJMbI/V+bXdfRkoRj0OMTU= -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:07 2025 by rpki-client