$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: ycUN4mMpOgx4YpTBYw2vurPi9K1WuKYa4YZZBIEDo5c= Subject key identifier: 17:87:37:91:8C:22:A3:F3:83:CE:E7:9C:15:DB:9E:BF:B0:5F:D8:C0 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 59 Signing time: Thu 07 Aug 2025 07:47:57 +0000 Manifest this update: Thu 07 Aug 2025 07:47:57 +0000 Manifest next update: Thu 14 Aug 2025 07:47:57 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: IExLK0cBo8VdFXOFpG8XiKLM8CC3AEuY0WVIGMcMyc4=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Aug 7 07:47:57 2025 GMT Not After : Aug 14 07:47:57 2025 GMT Subject: CN=68945a2d-5559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:dc:fa:9c:77:1a:f2:62:9a:46:56:06:a4: 6c:bc:c3:5c:a5:04:4d:e4:d4:6f:5b:2a:c2:83:94: 18:67:2d:7b:a9:2e:3b:a9:93:c8:47:92:18:9a:17: d0:25:90:df:2b:4b:44:d4:ce:33:af:c5:23:46:63: 7e:91:a7:78:b2:4f:ac:e6:a6:f3:33:f0:19:73:5b: ad:3c:bb:0c:b5:a9:2d:04:58:f6:01:bf:39:83:1f: 5c:ab:0d:ae:1b:07:6d:81:08:ab:90:c3:27:7a:26: 6c:14:c9:71:46:31:fb:74:6f:d2:56:6f:a2:f2:ba: 45:cb:f7:cd:5c:87:91:58:a1:37:61:9f:03:59:05: dd:48:84:d0:e8:17:52:f9:19:cf:26:e8:d2:3a:58: 8b:ee:ca:82:43:77:a0:45:ec:27:4a:f8:3b:95:1b: b1:33:ad:a2:bf:c1:73:3f:1f:52:f6:74:e3:8e:b0: 84:9d:8a:b9:9b:e3:98:3d:98:df:99:5b:b6:41:dd: ac:07:31:8e:e5:0c:c9:09:01:85:c6:c0:39:a0:e8: ac:c0:86:2d:55:31:ef:fe:e0:e1:b6:0c:02:b0:55: 0f:67:ab:1a:3c:3d:14:3f:fa:47:06:7c:f4:bf:93: a7:02:ab:bd:a5:68:35:cd:0f:68:29:d5:0a:09:3e: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:87:37:91:8C:22:A3:F3:83:CE:E7:9C:15:DB:9E:BF:B0:5F:D8:C0 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b1:d3:13:e6:88:6b:f8:34:4d:5a:1b:55:05:3c:04:9b:b0: 1d:af:a1:a8:06:f0:2a:cd:33:74:11:a6:25:0a:86:92:37:ea: 41:2e:ec:c4:66:70:de:24:89:68:b6:fc:f3:2f:4f:5d:2e:46: 35:7a:55:11:57:27:ba:d8:17:21:cf:5c:72:24:26:5d:54:66: c3:74:48:7f:fd:84:c4:0d:4d:c1:e2:12:6e:0c:74:4e:42:f8: 9c:c6:4a:2b:07:b2:bc:6b:67:a6:47:c9:61:a8:4a:f1:fe:f6: 31:a8:e9:5e:89:d7:e8:5d:06:f3:26:a5:e1:18:30:68:56:8c: 86:cd:9b:7c:f6:59:c8:16:a2:75:84:df:2c:7c:1e:34:36:45: 3d:aa:a9:78:30:0c:db:5d:d0:21:2c:66:9b:75:9f:2a:6a:08: 70:9a:f3:0f:f8:3c:d5:e3:c4:d1:63:6e:64:31:a8:bc:00:88: ac:ba:25:6e:f1:a7:e1:63:cc:03:62:4d:cb:86:5d:c4:5e:db: ba:fb:df:f3:40:f1:67:64:a8:90:fa:16:f3:87:cf:fb:41:04: 7e:2d:77:c1:a3:4c:36:5d:a4:93:d8:52:21:65:8a:db:ca:78: 90:7f:93:23:e1:9a:7e:58:d9:b2:fe:98:64:e0:b3:8c:2c:4e: f2:ed:85:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA4MDcwNzQ3NTdaFw0yNTA4MTQwNzQ3NTdaMBgxFjAUBgNV BAMTDTY4OTQ1YTJkLTU1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvtNz6nHca8mKaRlYGpGy8w1ylBE3k1G9bKsKDlBhnLXupLjupk8hHkhiaF9Al kN8rS0TUzjOvxSNGY36Rp3iyT6zmpvMz8BlzW608uwy1qS0EWPYBvzmDH1yrDa4b B22BCKuQwyd6JmwUyXFGMft0b9JWb6LyukXL981ch5FYoTdhnwNZBd1IhNDoF1L5 Gc8m6NI6WIvuyoJDd6BF7CdK+DuVG7EzraK/wXM/H1L2dOOOsISdirmb45g9mN+Z W7ZB3awHMY7lDMkJAYXGwDmg6KzAhi1VMe/+4OG2DAKwVQ9nqxo8PRQ/+kcGfPS/ k6cCq72laDXND2gp1QoJPvSRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF4c3kYwi o/ODzuecFduev7Bf2MAwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHex0xPmiGv4NE1aG1UFPASbsB2voagG8CrNM3QRpiUKhpI36kEu7MRm cN4kiWi2/PMvT10uRjV6VRFXJ7rYFyHPXHIkJl1UZsN0SH/9hMQNTcHiEm4MdE5C +JzGSisHsrxrZ6ZHyWGoSvH+9jGo6V6J1+hdBvMmpeEYMGhWjIbNm3z2WcgWonWE 3yx8HjQ2RT2qqXgwDNtd0CEsZpt1nypqCHCa8w/4PNXjxNFjbmQxqLwAiKy6JW7x p+FjzANiTcuGXcRe27r73/NA8WdkqJD6FvOHz/tBBH4td8GjTDZdpJPYUiFlitvK eJB/kyPhmn5Y2bL+mGTgs4wsTvLthU0= -----END CERTIFICATE-----Generated at Sat Aug 9 02:49:53 2025 by rpki-client