$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: FG8LgYLYvbOuwZeI1I/S24rRZAM0jEhvh3re5rgI2k0= Subject key identifier: 25:16:C9:8C:7A:B2:88:E4:01:33:34:E5:51:5F:75:AB:63:8E:5D:54 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0CCB Signing time: Mon 04 Aug 2025 18:19:05 +0000 Manifest this update: Mon 04 Aug 2025 18:19:04 +0000 Manifest next update: Mon 11 Aug 2025 18:19:04 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: li+PxeuoE9QCaJ8f8YuTW6nn1ZGY+3Sun9OB7CUzbDs=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: +d8JTMdE/OZF41ywsfLWbdDiFe60dYPx5jzZe3nPzII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Aug 4 18:19:04 2025 GMT Not After : Aug 11 18:19:04 2025 GMT Subject: CN=6890f998-65f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:13:6d:5f:d2:05:4b:c7:4a:7e:49:d0:4d: 6b:dd:fb:4b:b6:79:e6:99:0c:48:65:8f:42:6d:de: fd:1d:83:c3:4f:4f:45:e6:cb:ea:63:5b:84:6c:d3: 9c:91:26:53:d5:8f:9d:a9:2d:45:46:89:63:74:eb: 4c:ea:cc:1f:c7:77:0f:af:99:2b:13:a4:34:a2:58: d8:f6:5c:f7:65:95:06:33:f2:7c:bc:56:f7:bc:8c: 46:49:62:9c:9e:43:49:7b:2f:68:55:dd:7f:ba:9f: 4c:3c:75:49:db:24:ad:a1:b6:1a:b7:b0:a1:66:99: 07:3d:57:4f:29:2e:4b:9d:6e:fe:18:29:3a:0f:e6: 2e:4d:d6:1c:f2:52:0c:cf:10:b6:da:d0:2c:4a:ef: e9:d0:71:de:f3:15:8e:3a:80:9c:87:8a:75:63:3c: 8e:64:16:aa:34:08:42:20:11:2c:44:bb:0b:9d:ae: 78:f6:76:e2:85:2e:49:53:c5:38:0e:05:87:b2:bc: 64:33:b5:09:d5:a8:28:38:35:c5:24:6f:09:aa:23: d8:d7:1c:bf:2a:d7:5b:d8:5f:4f:7e:95:87:53:f8: 93:c9:de:08:a2:35:d8:5c:fd:ad:3b:21:8a:93:58: 83:d8:e7:88:a2:fc:1d:91:eb:a4:5d:e2:91:a5:6d: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:16:C9:8C:7A:B2:88:E4:01:33:34:E5:51:5F:75:AB:63:8E:5D:54 X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:2b:8e:40:85:ff:32:0a:db:4b:8e:50:df:4c:a2:74:2d:78: 15:62:b1:0f:3f:58:b0:ec:a5:f6:58:54:cc:26:b5:7d:97:17: 62:8b:33:ce:af:0f:53:09:eb:56:e1:d7:df:e0:c3:6b:be:07: 16:65:cb:76:35:ea:51:aa:69:80:87:93:28:54:48:94:8a:95: a0:61:d6:10:07:35:fd:a4:cf:7f:cc:ee:0b:17:f7:90:53:a5: 71:e8:a5:cd:15:a7:0c:26:60:6c:d8:fd:7d:af:f2:2a:cb:3a: a5:8c:aa:af:54:75:83:41:e8:d7:43:6d:2a:b5:42:54:91:f4: 6d:e0:b6:da:41:bf:16:b9:33:74:9a:f8:71:01:5b:1a:22:f8: e8:8d:27:38:dd:0b:3d:dd:54:48:ad:a9:8d:c1:bc:8c:30:24: ee:b3:e3:61:e1:f8:cf:38:e9:85:f9:87:29:27:c8:98:69:30: d8:d8:c1:e8:e6:0e:1f:2c:a4:7a:8f:85:12:9b:3b:00:8e:2b: 75:f6:b8:87:62:75:fe:00:b3:80:dc:f3:ac:f8:5e:ea:4a:2e: b2:a1:4b:2a:6e:86:81:63:83:9a:d5:f3:4c:00:be:64:cf:c1: c7:08:24:0b:b1:ae:0b:02:93:b5:30:1e:ba:f4:e1:ea:0a:b6: 80:c5:20:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUwODA0MTgxOTA0WhcNMjUwODExMTgxOTA0WjAYMRYwFAYD VQQDEw02ODkwZjk5OC02NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAQTbV/SBUvHSn5J0E1r3ftLtnnmmQxIZY9Cbd79HYPDT09F5svqY1uEbNOc kSZT1Y+dqS1FRoljdOtM6swfx3cPr5krE6Q0oljY9lz3ZZUGM/J8vFb3vIxGSWKc nkNJey9oVd1/up9MPHVJ2yStobYat7ChZpkHPVdPKS5LnW7+GCk6D+YuTdYc8lIM zxC22tAsSu/p0HHe8xWOOoCch4p1YzyOZBaqNAhCIBEsRLsLna549nbihS5JU8U4 DgWHsrxkM7UJ1agoODXFJG8JqiPY1xy/Ktdb2F9PfpWHU/iTyd4IojXYXP2tOyGK k1iD2OeIovwdkeukXeKRpW2ljQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUWyYx6 sojkATM05VFfdatjjl1UMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxK45Ahf8yCttLjlDfTKJ0LXgVYrEPP1iw7KX2WFTMJrV9lxdiizPO rw9TCetW4dff4MNrvgcWZct2NepRqmmAh5MoVEiUipWgYdYQBzX9pM9/zO4LF/eQ U6Vx6KXNFacMJmBs2P19r/IqyzqljKqvVHWDQejXQ20qtUJUkfRt4LbaQb8WuTN0 mvhxAVsaIvjojSc43Qs93VRIramNwbyMMCTus+Nh4fjPOOmF+YcpJ8iYaTDY2MHo 5g4fLKR6j4USmzsAjit19riHYnX+ALOA3POs+F7qSi6yoUsqboaBY4Oa1fNMAL5k z8HHCCQLsa4LApO1MB669OHqCraAxSCZ -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:46 2025 by rpki-client