$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: x3ALLF7ogbv87Ao9sUOsFwkp7tK/3fyjsfWrF+UQTeo= Subject key identifier: E6:0F:A2:84:C0:30:3B:9E:F5:DC:A9:99:61:8C:94:1D:95:2A:6D:3E Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 088A Signing time: Fri 08 Aug 2025 20:57:28 +0000 Manifest this update: Fri 08 Aug 2025 20:57:27 +0000 Manifest next update: Fri 15 Aug 2025 20:57:27 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: tbNUOFs+Kx/Q8lpwwJijYCqhJUyNQhZgZrC/DLO0JcA=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Aug 8 20:57:27 2025 GMT Not After : Aug 15 20:57:27 2025 GMT Subject: CN=689664b8-a01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:dc:89:44:86:cd:59:f7:46:42:bd:6a:2a: d9:84:b6:8e:f7:1d:17:a1:de:77:3a:8c:bc:01:c8: 31:a0:4d:9d:95:89:1f:af:2e:a7:8e:39:04:38:af: 23:93:1e:7e:4a:b6:b7:90:27:b6:3f:9b:1b:d9:26: c5:41:b7:3a:48:b7:18:a6:fd:bf:31:a0:56:13:be: 06:93:a6:24:df:2e:56:77:31:7d:7f:31:4d:05:6a: f9:2e:43:70:f0:c2:9e:88:a8:09:ef:b9:de:49:de: e0:f2:05:5f:00:55:b1:fc:83:f8:dd:81:74:48:53: 78:e3:97:f6:60:c5:29:c5:2c:8c:cc:ca:bf:d6:80: 5e:cb:05:40:6e:8b:87:55:ca:a7:51:d9:3e:9a:83: c5:5f:68:13:b5:05:e6:56:27:96:7d:b7:47:e9:8e: 6c:3b:29:87:f1:a6:0a:b4:82:bd:a8:53:41:83:03: 34:b2:89:1e:01:3f:55:3f:85:05:41:aa:83:f8:97: c0:06:60:af:11:35:70:14:9c:6b:ac:da:ff:42:32: ce:50:a7:44:e0:e0:0f:12:05:93:8f:6e:ca:40:fe: d1:b8:b4:b4:04:a0:2c:a8:6a:dd:ca:10:36:92:ff: 59:f3:27:e9:6d:8b:29:1a:a6:63:2c:62:27:f2:d9: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0F:A2:84:C0:30:3B:9E:F5:DC:A9:99:61:8C:94:1D:95:2A:6D:3E X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:b1:7c:ce:e7:3b:07:8f:9e:35:60:3b:58:12:bc:21:78: d6:1a:84:96:59:31:5a:f1:3f:4c:c3:9f:bb:6f:58:33:3e:29: d4:78:26:c5:0f:6a:76:b0:e7:99:e3:d3:6e:b9:db:21:8b:61: 01:ac:74:83:8f:91:39:8d:a7:ed:16:a4:6e:26:29:43:5d:1e: 14:45:c4:86:44:f7:86:26:05:b9:31:95:53:e2:e6:66:59:a8: 93:47:b3:5d:fb:9f:95:fe:09:3f:1b:a1:ab:43:85:4f:73:45: aa:78:43:7c:09:83:ee:27:43:7f:3f:02:a1:b9:ac:ab:f5:69: 11:59:1a:40:59:30:f3:70:c9:2b:ca:e4:32:18:af:55:41:9a: de:48:f3:67:38:9d:09:1b:17:d6:47:92:24:89:8c:37:7c:01: 56:50:5f:24:b2:5a:8c:9d:9c:a8:7b:3a:82:12:81:48:da:95: 9e:38:e7:cd:99:61:50:5b:b5:a7:4d:ae:f2:48:31:64:73:be: 39:62:c0:b0:8d:09:2f:88:9d:9a:ef:14:9e:a3:79:17:f1:27: d1:63:ed:76:dc:bb:da:3d:7c:cf:31:ee:52:2e:9f:8a:34:c7: c6:f4:ab:6f:3a:69:3b:b6:bd:1e:69:e0:ae:eb:97:db:6c:bf: 86:43:23:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwODA4MjA1NzI3WhcNMjUwODE1MjA1NzI3WjAYMRYwFAYD VQQDEw02ODk2NjRiOC1hMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6HciUSGzVn3RkK9airZhLaO9x0Xod53Ooy8AcgxoE2dlYkfry6njjkEOK8j kx5+Sra3kCe2P5sb2SbFQbc6SLcYpv2/MaBWE74Gk6Yk3y5WdzF9fzFNBWr5LkNw 8MKeiKgJ77neSd7g8gVfAFWx/IP43YF0SFN445f2YMUpxSyMzMq/1oBeywVAbouH VcqnUdk+moPFX2gTtQXmVieWfbdH6Y5sOymH8aYKtIK9qFNBgwM0sokeAT9VP4UF QaqD+JfABmCvETVwFJxrrNr/QjLOUKdE4OAPEgWTj27KQP7RuLS0BKAsqGrdyhA2 kv9Z8yfpbYspGqZjLGIn8tnjkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYPooTA MDue9dypmWGMlB2VKm0+MB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaLF8zuc7B4+eNWA7WBK8IXjWGoSWWTFa8T9Mw5+7b1gzPinUeCbF D2p2sOeZ49Nuudshi2EBrHSDj5E5jaftFqRuJilDXR4URcSGRPeGJgW5MZVT4uZm WaiTR7Nd+5+V/gk/G6GrQ4VPc0WqeEN8CYPuJ0N/PwKhuayr9WkRWRpAWTDzcMkr yuQyGK9VQZreSPNnOJ0JGxfWR5IkiYw3fAFWUF8kslqMnZyoezqCEoFI2pWeOOfN mWFQW7WnTa7ySDFkc745YsCwjQkviJ2a7xSeo3kX8SfRY+123LvaPXzPMe5SLp+K NMfG9KtvOmk7tr0eaeCu65fbbL+GQyMq -----END CERTIFICATE-----Generated at Sun Aug 10 18:19:12 2025 by rpki-client