$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: soVYQfee7X11XYiaY6X4cRQ7XmyCDjDfpD4vrQcaaGI= Subject key identifier: 43:1E:D6:78:AD:8B:C1:A3:E8:8C:64:D6:CD:FF:94:94:9F:6C:36:F0 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 08CE Signing time: Tue 12 Aug 2025 20:43:03 +0000 Manifest this update: Tue 12 Aug 2025 20:43:03 +0000 Manifest next update: Tue 19 Aug 2025 20:43:03 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: CTMTaKGWkfiGsG0b1sVsAlXWE07RCCh9qSFLK3ABVGc=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Aug 12 20:43:03 2025 GMT Not After : Aug 19 20:43:03 2025 GMT Subject: CN=689ba757-9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:22:ae:b7:6a:d9:63:fb:a0:04:9c:fa:70: 30:88:c1:7c:8a:32:c7:9c:f0:d6:f4:32:60:67:d1: d2:4b:b9:5e:7c:98:12:b2:47:0d:b2:cd:e4:d0:87: f9:7d:8e:f4:f8:ac:60:b2:23:35:8f:4a:98:b9:dc: f8:8e:82:54:75:68:0b:af:56:56:b1:c3:bb:02:69: db:45:47:c8:af:c8:94:88:05:83:3c:26:e9:0c:9c: f0:fc:7d:98:70:ef:88:83:7f:08:66:fa:d3:92:6b: 91:c4:c2:79:83:4c:ca:41:ef:19:af:7e:96:23:15: 3e:53:f1:e4:75:0b:86:20:b4:86:67:4d:3c:7c:34: d7:92:24:71:51:2f:fe:4d:b3:54:50:e3:3a:bc:e6: a7:2e:d5:10:be:20:f2:a0:9f:5f:16:28:fc:32:a0: 38:07:3a:11:c9:04:ab:67:4e:e9:92:26:88:2e:b8: 8f:c1:c9:7c:1c:2b:00:82:0b:75:ee:b2:83:ad:54: 07:19:b9:13:02:ea:c5:2c:52:6d:89:29:ab:df:aa: c2:b8:7f:33:c3:4c:60:a0:de:d3:c7:e6:2c:6d:66: 94:ec:75:ab:ed:a7:c0:75:50:53:69:f4:09:92:b7: 12:ea:7a:21:97:53:df:1c:98:56:61:98:a6:ca:41: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:D6:78:AD:8B:C1:A3:E8:8C:64:D6:CD:FF:94:94:9F:6C:36:F0 X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:3d:98:0c:3d:ba:f2:95:8d:a8:fe:c9:f2:05:7e:75:93: 1d:9a:4b:54:46:23:4a:19:2d:38:83:a2:ba:15:07:0c:2a:7d: 80:8c:71:9f:64:e2:8d:6f:f1:b1:77:a5:52:0d:99:26:44:27: da:0d:b3:4d:5d:fd:9d:a1:6c:43:ca:84:a7:88:8c:f6:80:28: 2a:93:dc:fd:b0:ae:a5:6e:c8:e0:2d:b7:12:36:81:84:3f:47: e8:a1:7b:48:0c:5a:26:f6:e0:18:a7:b0:fa:53:d0:f3:31:92: ef:9c:0a:67:04:e0:18:eb:37:b1:fc:fc:e9:c1:ce:3a:14:bf: d3:18:25:93:64:52:7f:19:70:dd:c7:26:4e:4c:64:1c:b9:18: 70:7d:a9:2f:22:7f:3f:77:dc:a7:7a:93:ef:ac:5f:cf:e2:86: ee:0d:1c:f9:7a:35:03:c7:63:f5:17:b2:2f:5b:2e:86:cc:7b: 24:39:57:ba:6e:17:24:01:a9:d5:4d:f9:91:51:9b:b0:39:25: 25:56:22:b5:6d:1d:32:61:35:cf:40:1c:f1:f8:84:1d:2a:22: f0:8f:d7:8b:df:79:7b:49:a4:4a:8b:80:0b:13:52:c3:f2:ba: a1:ee:57:43:07:26:ef:89:59:54:d7:7e:ab:40:51:f2:6c:d9: 9f:46:04:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjUwODEyMjA0MzAzWhcNMjUwODE5MjA0MzAzWjAYMRYwFAYD VQQDEw02ODliYTc1Ny05NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNMirrdq2WP7oASc+nAwiMF8ijLHnPDW9DJgZ9HSS7lefJgSskcNss3k0If5 fY70+KxgsiM1j0qYudz4joJUdWgLr1ZWscO7AmnbRUfIr8iUiAWDPCbpDJzw/H2Y cO+Ig38IZvrTkmuRxMJ5g0zKQe8Zr36WIxU+U/HkdQuGILSGZ008fDTXkiRxUS/+ TbNUUOM6vOanLtUQviDyoJ9fFij8MqA4BzoRyQSrZ07pkiaILriPwcl8HCsAggt1 7rKDrVQHGbkTAurFLFJtiSmr36rCuH8zw0xgoN7Tx+YsbWaU7HWr7afAdVBTafQJ krcS6nohl1PfHJhWYZimykHVZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMe1nit i8Gj6Ixk1s3/lJSfbDbwMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBfD2YDD268pWNqP7J8gV+dZMdmktURiNKGS04g6K6FQcMKn2AjHGf ZOKNb/Gxd6VSDZkmRCfaDbNNXf2doWxDyoSniIz2gCgqk9z9sK6lbsjgLbcSNoGE P0fooXtIDFom9uAYp7D6U9DzMZLvnApnBOAY6zex/Pzpwc46FL/TGCWTZFJ/GXDd xyZOTGQcuRhwfakvIn8/d9ynepPvrF/P4obuDRz5ejUDx2P1F7IvWy6GzHskOVe6 bhckAanVTfmRUZuwOSUlViK1bR0yYTXPQBzx+IQdKiLwj9eL33l7SaRKi4ALE1LD 8rqh7ldDBybviVlU136rQFHybNmfRgTn -----END CERTIFICATE-----Generated at Wed Aug 13 08:55:07 2025 by rpki-client