$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: 89j7TmFoLILSVTIzU+zVK/bxQ8/Ql+nvuQjq+b+g+ZM= Subject key identifier: E1:EF:9D:ED:66:D5:F0:DE:14:18:86:7A:54:C4:1C:E9:59:47:70:BB Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 017C Signing time: Sat 09 Aug 2025 04:04:22 +0000 Manifest this update: Sat 09 Aug 2025 04:04:21 +0000 Manifest next update: Sat 16 Aug 2025 04:04:21 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: 2qmcBAPIHHjsEXJadelKsXebf9ShY8YN2o6MrOURH7w=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Aug 9 04:04:21 2025 GMT Not After : Aug 16 04:04:21 2025 GMT Subject: CN=6896c8c5-e159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:b2:95:ac:c6:e9:ab:7f:aa:1a:ef:f5:39: 5b:42:bc:5b:53:4b:75:22:c1:43:f7:c5:44:3a:cd: cd:ae:62:6c:85:19:74:ca:aa:61:6f:62:69:ae:ed: 63:37:fd:56:75:ed:5a:d5:24:4f:cd:44:d7:32:8b: 96:89:b1:d4:97:79:4c:8a:81:5f:ae:fb:30:5f:1e: 2a:b7:25:95:2d:5b:f6:2e:b1:3a:01:b7:4b:17:f9: 56:ee:29:79:80:19:e3:dd:5b:b3:4e:1f:40:a2:63: 9a:12:05:dd:7a:c6:2f:d6:c3:4d:a1:be:cf:43:46: f9:c4:34:75:a3:d6:61:66:d6:28:90:d8:ed:3d:46: 80:4e:3b:bb:97:5e:c9:b5:37:f2:97:59:cf:90:0d: e5:20:7c:c4:d3:82:d3:d4:5b:55:64:39:29:a2:4e: 47:93:d5:b7:49:6c:49:2d:80:96:b8:b4:2f:9d:f9: 08:4e:63:c2:5f:56:5d:3d:26:54:df:1f:ff:92:d5: 72:d3:78:57:e9:fa:56:cb:c2:8c:6b:cf:9c:f6:d4: 89:45:d0:db:a9:f4:50:c9:e6:a2:ae:26:33:24:db: 05:37:bb:ff:5c:a4:24:52:d0:d2:21:c3:ad:a2:c4: df:d9:aa:ea:5b:29:b0:a4:a4:78:3c:ea:09:a0:d5: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:9D:ED:66:D5:F0:DE:14:18:86:7A:54:C4:1C:E9:59:47:70:BB X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3d:83:f9:32:c3:cf:0d:86:a4:89:84:18:77:26:b7:10:b4: 80:f2:d7:6c:74:d7:c0:8c:84:7f:dd:e0:cf:b6:10:77:92:68: bc:61:85:ef:27:86:8a:6b:2e:2a:3f:ac:c9:4f:3c:7d:f7:e0: 40:2e:e2:db:13:3d:a9:f3:3d:28:ce:15:19:c1:ed:c7:47:6f: 41:dd:84:a2:cb:17:17:5c:08:69:06:6b:b7:43:b6:cb:66:72: ba:f7:31:7d:f8:8e:c8:69:5f:36:c0:8e:fe:39:87:12:1a:25: 59:f5:58:66:93:d9:68:1e:d4:f5:da:fd:7f:67:05:64:e6:d6: 86:ee:40:10:7d:cc:a2:85:e1:20:1e:d1:ca:53:f4:86:4b:99: ca:15:ff:c8:3e:1b:99:06:32:53:69:d2:14:6d:4c:49:b7:ba: 4c:7b:30:22:31:31:e8:4b:bb:75:8a:c7:34:44:21:f2:fd:61: b6:bb:7b:fb:66:22:55:81:69:f5:9b:35:8f:5e:60:8c:b5:da: 39:ff:e7:91:56:23:52:ae:6d:06:68:2e:37:fd:07:27:40:1f: c5:b4:83:9a:73:ca:ba:73:c0:2f:6f:4d:ab:ed:69:50:fa:73: 3e:b5:e1:6c:cb:d3:99:b3:8f:fb:5e:9e:38:78:a5:1a:f2:69: 2a:45:d9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwODA5MDQwNDIxWhcNMjUwODE2MDQwNDIxWjAYMRYwFAYD VQQDEw02ODk2YzhjNS1lMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq+ylazG6at/qhrv9TlbQrxbU0t1IsFD98VEOs3NrmJshRl0yqphb2Jpru1j N/1Wde1a1SRPzUTXMouWibHUl3lMioFfrvswXx4qtyWVLVv2LrE6AbdLF/lW7il5 gBnj3VuzTh9AomOaEgXdesYv1sNNob7PQ0b5xDR1o9ZhZtYokNjtPUaATju7l17J tTfyl1nPkA3lIHzE04LT1FtVZDkpok5Hk9W3SWxJLYCWuLQvnfkITmPCX1ZdPSZU 3x//ktVy03hX6fpWy8KMa8+c9tSJRdDbqfRQyeairiYzJNsFN7v/XKQkUtDSIcOt osTf2arqWymwpKR4POoJoNV10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHvne1m 1fDeFBiGelTEHOlZR3C7MB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADPYP5MsPPDYakiYQYdya3ELSA8tdsdNfAjIR/3eDPthB3kmi8YYXv J4aKay4qP6zJTzx99+BALuLbEz2p8z0ozhUZwe3HR29B3YSiyxcXXAhpBmu3Q7bL ZnK69zF9+I7IaV82wI7+OYcSGiVZ9Vhmk9loHtT12v1/ZwVk5taG7kAQfcyiheEg HtHKU/SGS5nKFf/IPhuZBjJTadIUbUxJt7pMezAiMTHoS7t1isc0RCHy/WG2u3v7 ZiJVgWn1mzWPXmCMtdo5/+eRViNSrm0GaC43/QcnQB/FtIOac8q6c8Avb02r7WlQ +nM+teFsy9OZs4/7Xp44eKUa8mkqRdm1 -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:11 2025 by rpki-client