$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: 2sbsP9hjmWCi4gBbIrBbiJm3HZbGDbpF2WecoLuXbY0= Subject key identifier: 5D:B2:AE:A7:4F:83:1A:E8:BA:62:6F:21:5D:6B:A1:B1:37:D4:D4:56 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: D3 Signing time: Tue 05 Aug 2025 06:05:29 +0000 Manifest this update: Tue 05 Aug 2025 06:05:29 +0000 Manifest next update: Tue 12 Aug 2025 06:05:29 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: nMce2x/SW1cqXQn/0tyvwpday0X1KxuS6cQy+xAsrzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Aug 5 06:05:29 2025 GMT Not After : Aug 12 06:05:29 2025 GMT Subject: CN=68919f29-448e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:a5:77:54:d8:72:43:c6:f2:eb:3a:5c:3c: 4b:46:1b:77:88:d0:0e:06:44:f0:40:d2:fd:0d:9a: 1a:b1:33:8b:4a:cb:c3:f0:de:53:36:7f:23:8f:ac: 28:98:20:32:fd:63:16:2a:35:4c:d9:54:7f:01:a8: 3a:b3:be:ca:89:9c:ea:dc:dd:77:bf:f8:9d:f1:51: bf:ee:7e:50:62:0d:88:37:a4:9d:e5:8e:4b:7c:fb: d1:b1:4f:af:69:b2:76:c6:7f:f8:0a:0e:ef:bb:93: 6c:50:86:2c:82:09:9e:e6:14:a6:40:68:e0:33:bd: fe:0c:59:30:0a:de:ac:91:56:d3:85:26:9b:c0:cd: 4b:a8:09:b1:80:d9:c7:f0:4f:eb:b1:f1:47:67:b0: 2c:e3:45:82:77:13:a5:1b:45:f8:39:fe:5f:19:92: d0:91:f2:4b:57:ae:6e:25:7d:6d:03:40:38:87:0c: 18:63:8d:2a:e0:f9:a7:17:d3:7c:24:76:d5:08:94: 2b:d4:86:d6:4a:a3:01:0f:f4:2f:04:22:93:44:18: 29:06:9b:56:07:1a:6b:85:2d:8f:90:a9:01:5f:b8: 0d:b2:a3:a1:dd:7e:56:1b:e2:84:bd:e3:d9:0e:b4: 0b:a2:28:09:9f:8b:b1:0b:a8:8c:7e:4a:28:3e:bb: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:AE:A7:4F:83:1A:E8:BA:62:6F:21:5D:6B:A1:B1:37:D4:D4:56 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:99:40:1f:6b:6c:18:79:fd:64:af:60:38:2d:0f:cb:ec:4e: 93:ca:ba:5a:68:29:bc:8d:09:17:9a:9c:53:84:13:e1:e3:40: 92:66:9f:65:af:f5:5b:a1:40:42:49:cd:3d:37:15:01:eb:03: 37:09:56:8e:eb:d1:b2:a5:f0:e1:9c:d7:48:0c:79:d9:c0:b0: 58:72:41:b9:9d:b8:1b:df:c5:26:77:39:8b:59:01:61:4e:fa: 58:c7:14:cf:ca:07:25:b0:45:30:c8:63:ee:6e:24:80:f4:40: 9c:19:28:3a:33:3a:7b:75:92:0e:75:ce:d8:bd:95:a9:b8:f9: 17:ac:79:07:4f:d2:86:86:6f:a9:1c:ba:09:75:93:3e:2b:50: 34:38:dc:25:e4:4c:01:36:62:8a:12:a2:b0:7b:79:9e:39:ff: 55:81:ac:93:61:c9:95:5c:15:29:c0:0f:b6:5f:6d:7b:53:3c: a8:0f:80:ed:a8:e7:83:33:66:44:21:8b:69:b6:99:fd:3b:6c: 50:e5:f2:2f:0f:36:2c:71:01:ca:b9:1c:94:02:1b:e9:af:92: eb:d3:13:24:20:38:41:f9:86:8d:0e:f7:a5:e6:7c:31:af:fc: 70:cd:fd:33:da:5f:72:0c:d6:79:68:67:3d:e9:c5:05:24:30: 06:49:16:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUwODA1MDYwNTI5WhcNMjUwODEyMDYwNTI5WjAYMRYwFAYD VQQDEw02ODkxOWYyOS00NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvf+ld1TYckPG8us6XDxLRht3iNAOBkTwQNL9DZoasTOLSsvD8N5TNn8jj6wo mCAy/WMWKjVM2VR/Aag6s77KiZzq3N13v/id8VG/7n5QYg2IN6Sd5Y5LfPvRsU+v abJ2xn/4Cg7vu5NsUIYsggme5hSmQGjgM73+DFkwCt6skVbThSabwM1LqAmxgNnH 8E/rsfFHZ7As40WCdxOlG0X4Of5fGZLQkfJLV65uJX1tA0A4hwwYY40q4PmnF9N8 JHbVCJQr1IbWSqMBD/QvBCKTRBgpBptWBxprhS2PkKkBX7gNsqOh3X5WG+KEvePZ DrQLoigJn4uxC6iMfkooPrvrcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2yrqdP gxroumJvIV1robE31NRWMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAmUAfa2wYef1kr2A4LQ/L7E6TyrpaaCm8jQkXmpxThBPh40CSZp9l r/VboUBCSc09NxUB6wM3CVaO69GypfDhnNdIDHnZwLBYckG5nbgb38UmdzmLWQFh TvpYxxTPygclsEUwyGPubiSA9ECcGSg6Mzp7dZIOdc7YvZWpuPkXrHkHT9KGhm+p HLoJdZM+K1A0ONwl5EwBNmKKEqKwe3meOf9VgayTYcmVXBUpwA+2X217UzyoD4Dt qOeDM2ZEIYtptpn9O2xQ5fIvDzYscQHKuRyUAhvpr5Lr0xMkIDhB+YaNDvel5nwx r/xwzf0z2l9yDNZ5aGc96cUFJDAGSRY3 -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:40 2025 by rpki-client