$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: e2W6LaH8VcUXL5QjCz9jxzA7uWFDXMa5v7DGYbr+KF0= Subject key identifier: FB:8E:60:F1:16:DA:D9:55:1B:4E:97:E4:57:D8:25:38:D3:AD:4D:8A Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: EE Signing time: Mon 11 Aug 2025 05:46:48 +0000 Manifest this update: Mon 11 Aug 2025 05:46:48 +0000 Manifest next update: Mon 18 Aug 2025 05:46:48 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: qoF8QqDyCKBV8ATcSHEKikvo0sMJdGGlDWWp9LI8fgo=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Aug 11 05:46:48 2025 GMT Not After : Aug 18 05:46:48 2025 GMT Subject: CN=689983c8-7f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:eb:28:57:88:d5:88:db:f1:f8:c4:fa:2c: a9:b9:c9:a2:f4:a8:e7:8e:39:4d:79:3a:bf:69:15: 2e:1d:99:06:b4:44:b4:de:cc:85:15:ba:25:98:ff: 76:36:e2:b1:be:90:3a:3f:ac:c4:13:79:44:93:08: b4:d5:27:ae:2e:ee:1d:88:87:c0:01:f6:23:03:eb: 44:86:2d:4c:ec:55:b0:8e:8f:48:0d:3c:98:c8:a8: bc:ad:09:d1:ff:d8:a0:c8:9c:7c:5e:75:b2:e5:01: 18:8c:61:f2:9b:41:fe:ff:fe:91:2f:7c:d6:69:9f: a9:55:c1:08:7c:f1:d0:4b:55:e0:44:c4:14:98:dc: a2:5e:7b:df:4f:2f:62:e7:fa:44:58:71:71:41:65: 16:cd:1d:a4:7f:ce:0e:1e:55:ab:c5:83:48:14:48: 16:bb:e7:7e:4f:0c:99:6c:7c:60:0d:2f:54:4f:09: 51:16:55:71:84:8b:b4:51:6e:03:f0:17:6a:9a:bd: 3f:29:51:c6:73:a8:61:35:db:1b:57:3c:13:71:fd: c2:3b:21:a8:0d:e2:43:1d:71:03:39:16:83:ca:de: 54:5a:34:e5:93:ed:27:1f:db:25:fe:fb:9c:ba:80: 68:09:a2:e9:93:7f:18:7b:df:19:56:4c:4c:fc:e0: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:60:F1:16:DA:D9:55:1B:4E:97:E4:57:D8:25:38:D3:AD:4D:8A X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e7:9c:01:c5:46:2e:cd:0b:8e:52:ed:6f:9a:e7:41:14:34: 73:29:df:52:75:ad:74:b9:92:38:b8:d1:3e:35:56:c2:da:7c: b4:a2:59:27:a7:6f:b3:e0:68:19:31:f6:8d:38:cd:fd:de:c0: fb:0e:4a:4b:3d:73:31:d7:71:8f:ec:14:fb:70:7e:69:c5:1f: d9:c6:83:d1:9f:40:b3:a9:95:6b:57:e3:0b:f4:65:0a:a2:ed: af:3f:36:01:39:ae:4d:be:1d:9e:cb:73:a2:ed:c7:6e:f9:54: b8:f7:c6:2e:b1:2c:f4:c8:fd:56:10:18:5f:a2:da:ff:9f:fb: c9:de:ea:39:bf:ee:f8:01:12:a8:52:80:76:90:ce:36:05:65: 3e:a5:70:c9:8a:ec:dc:88:b7:32:8f:17:58:1a:ab:2f:bc:2f: d3:dd:d4:c1:f2:8c:8d:c8:9e:c4:6f:16:f8:4f:61:13:c6:ab: 82:94:a3:d0:46:7d:53:38:74:c9:d8:0c:29:46:ec:e9:71:f5: 1e:b3:8c:0f:2f:6e:78:b8:c5:ba:c1:13:4b:bb:8f:c7:9f:cf: 9b:f0:21:cf:8c:61:d6:40:4e:26:c7:7e:19:5f:27:6b:84:93: df:7b:8e:19:1a:21:34:33:17:53:aa:9c:28:89:8f:6d:c5:21: 9a:05:e2:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwODExMDU0NjQ4WhcNMjUwODE4MDU0NjQ4WjAYMRYwFAYD VQQDEw02ODk5ODNjOC03ZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDDrKFeI1Yjb8fjE+iypucmi9KjnjjlNeTq/aRUuHZkGtES03syFFbolmP92 NuKxvpA6P6zEE3lEkwi01SeuLu4diIfAAfYjA+tEhi1M7FWwjo9IDTyYyKi8rQnR /9igyJx8XnWy5QEYjGHym0H+//6RL3zWaZ+pVcEIfPHQS1XgRMQUmNyiXnvfTy9i 5/pEWHFxQWUWzR2kf84OHlWrxYNIFEgWu+d+TwyZbHxgDS9UTwlRFlVxhIu0UW4D 8Bdqmr0/KVHGc6hhNdsbVzwTcf3COyGoDeJDHXEDORaDyt5UWjTlk+0nH9sl/vuc uoBoCaLpk38Ye98ZVkxM/OBaJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuOYPEW 2tlVG06X5FfYJTjTrU2KMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj55wBxUYuzQuOUu1vmudBFDRzKd9Sda10uZI4uNE+NVbC2ny0olkn p2+z4GgZMfaNOM393sD7DkpLPXMx13GP7BT7cH5pxR/ZxoPRn0CzqZVrV+ML9GUK ou2vPzYBOa5Nvh2ey3Oi7cdu+VS498YusSz0yP1WEBhfotr/n/vJ3uo5v+74ARKo UoB2kM42BWU+pXDJiuzciLcyjxdYGqsvvC/T3dTB8oyNyJ7Ebxb4T2ETxquClKPQ Rn1TOHTJ2AwpRuzpcfUes4wPL254uMW6wRNLu4/Hn8+b8CHPjGHWQE4mx34ZXydr hJPfe44ZGiE0MxdTqpwoiY9txSGaBeLM -----END CERTIFICATE-----Generated at Tue Aug 12 14:02:06 2025 by rpki-client