$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: wGvqMm5Gq/NVEq0r8dtgZ1Uxuejzcf1iSiAWGsLpdGM= Subject key identifier: F4:18:3A:6E:9E:36:B2:76:B2:05:2C:D6:F2:1E:87:27:1F:8C:43:6C Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 0925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 0924 Signing time: Sun 10 Aug 2025 20:15:35 +0000 Manifest this update: Sun 10 Aug 2025 20:15:34 +0000 Manifest next update: Sun 17 Aug 2025 20:15:34 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: TVL67DMkPxoqg1EpGU3twx8tB4Rr2ZRBsw0ppsoIbsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Aug 10 20:15:34 2025 GMT Not After : Aug 17 20:15:34 2025 GMT Subject: CN=6898fde7-8582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:0a:c4:3f:d3:12:46:f0:eb:9a:84:5e:c1: d9:ae:6e:6c:33:2a:46:81:fc:d2:c1:d6:04:e7:38: a8:4c:c7:09:6e:3a:98:9a:20:d7:77:3c:f8:6b:61: e3:31:25:a8:1f:70:b4:e0:f7:5f:a4:8f:46:5a:2b: b4:d0:1d:33:fc:2e:1a:e0:b8:43:6c:63:3e:fe:e9: eb:6a:9a:df:87:55:bb:9a:a1:f7:51:07:29:07:0b: 51:d5:29:52:24:6e:36:27:7d:5f:48:11:69:54:94: bd:57:59:92:d6:3c:f2:c7:7c:8d:44:e1:7a:2f:cd: a5:6f:40:ac:14:67:65:e2:61:ac:e6:21:ac:4d:a3: 60:73:86:93:b6:8a:68:82:97:01:1f:01:8d:8e:46: d5:47:10:68:73:0d:96:12:30:52:a3:03:72:a6:89: f8:47:d8:11:55:73:51:0d:39:65:1c:bd:fb:26:00: 7e:3d:3d:41:92:af:f8:fc:f9:73:a6:37:9a:6c:c8: 59:c4:4b:45:4d:f6:66:d7:00:c3:e5:59:6b:22:7e: 50:7c:69:cf:39:35:18:3e:1e:bc:a6:38:65:e0:12: 4e:84:37:e6:56:b0:0a:2b:d0:bf:fd:ac:c5:d8:0e: a4:25:72:34:14:4d:79:c8:55:92:de:d1:48:af:a0: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:3A:6E:9E:36:B2:76:B2:05:2C:D6:F2:1E:87:27:1F:8C:43:6C X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:09:a8:57:a4:90:c7:86:a1:45:b6:8c:01:ef:e1:45:12:85: 3f:72:5c:b8:a1:ae:5d:77:48:d1:fc:f7:fb:04:49:80:c9:1a: 8a:14:3e:28:e8:1c:77:06:92:96:ea:18:a1:d0:a2:06:6b:9e: b1:99:7e:f1:9d:b7:41:8f:e1:11:ff:c4:9c:d4:46:1e:34:bd: 3d:67:d0:66:05:ea:6c:7d:25:e6:4b:64:92:4e:1f:3f:37:8f: af:21:69:52:35:81:e5:99:c5:72:2e:f2:fe:2c:67:ea:0a:1c: 6a:b4:9c:41:3e:18:81:80:1d:b0:0c:2c:47:e9:ef:5f:a9:2c: 73:d5:94:6f:fe:da:b7:2e:45:b3:4c:2a:ec:72:01:8c:9f:c5: 54:70:4c:cc:2e:c6:b4:22:9c:61:ae:55:5b:4f:8d:4c:f5:44: 17:bd:a3:ca:99:a6:07:eb:91:c6:a0:07:e8:31:d5:8c:b3:20: 98:3e:71:ee:6d:6c:13:cc:ac:78:bf:60:5d:8d:8c:89:b9:82: e0:b1:13:11:72:bd:80:e6:ba:3c:4f:28:99:06:f8:d2:fd:2b: d4:27:bd:c0:25:5f:64:00:10:80:3b:6b:74:f0:3d:76:84:ca: 7d:27:83:c5:25:be:9d:d2:61:3c:4b:18:bd:37:58:f0:39:38: 05:d9:e1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUwODEwMjAxNTM0WhcNMjUwODE3MjAxNTM0WjAYMRYwFAYD VQQDEw02ODk4ZmRlNy04NTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI4KxD/TEkbw65qEXsHZrm5sMypGgfzSwdYE5zioTMcJbjqYmiDXdzz4a2Hj MSWoH3C04PdfpI9GWiu00B0z/C4a4LhDbGM+/unraprfh1W7mqH3UQcpBwtR1SlS JG42J31fSBFpVJS9V1mS1jzyx3yNROF6L82lb0CsFGdl4mGs5iGsTaNgc4aTtopo gpcBHwGNjkbVRxBocw2WEjBSowNypon4R9gRVXNRDTllHL37JgB+PT1Bkq/4/Plz pjeabMhZxEtFTfZm1wDD5VlrIn5QfGnPOTUYPh68pjhl4BJOhDfmVrAKK9C//azF 2A6kJXI0FE15yFWS3tFIr6DKbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQYOm6e NrJ2sgUs1vIehycfjENsMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7CahXpJDHhqFFtowB7+FFEoU/cly4oa5dd0jR/Pf7BEmAyRqKFD4o 6Bx3BpKW6hih0KIGa56xmX7xnbdBj+ER/8Sc1EYeNL09Z9BmBepsfSXmS2SSTh8/ N4+vIWlSNYHlmcVyLvL+LGfqChxqtJxBPhiBgB2wDCxH6e9fqSxz1ZRv/tq3LkWz TCrscgGMn8VUcEzMLsa0IpxhrlVbT41M9UQXvaPKmaYH65HGoAfoMdWMsyCYPnHu bWwTzKx4v2BdjYyJuYLgsRMRcr2A5ro8TyiZBvjS/SvUJ73AJV9kABCAO2t08D12 hMp9J4PFJb6d0mE8Sxi9N1jwOTgF2eF7 -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:40 2025 by rpki-client