$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: EDi8ksHR2SVAuPYJjjPAzPii9kBgO5CjftXXu0TxcSA= Subject key identifier: C6:15:69:A0:3F:A0:64:C2:57:84:96:D0:19:22:E9:FC:3E:66:F2:B9 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 04AC Signing time: Sat 09 Aug 2025 00:26:05 +0000 Manifest this update: Sat 09 Aug 2025 00:26:04 +0000 Manifest next update: Sat 16 Aug 2025 00:26:04 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: 8QNVQFW4MvwLGCNkXnXbZ2J8huLvxHlaYQkMCPEgpUs=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Aug 9 00:26:04 2025 GMT Not After : Aug 16 00:26:04 2025 GMT Subject: CN=6896959c-3fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:88:9f:ef:53:8c:be:4a:1a:f6:57:12:56: 21:0a:41:96:99:c0:7d:fa:b0:a5:f1:fc:c8:48:81: f6:a6:e2:02:2c:c9:48:8d:34:01:c0:fd:f6:e6:eb: d8:6c:97:da:c6:08:4b:f2:de:04:86:5a:83:a5:5d: c3:d7:fb:38:e2:52:c1:5f:b4:e5:4e:e8:b3:57:e4: 56:ea:d0:4c:4e:94:93:fb:80:26:af:6a:d1:2d:a7: e8:b6:0a:6b:7b:22:74:53:3f:42:15:ab:c9:d2:e2: 59:98:4b:e5:63:bf:9c:fb:34:18:5d:7e:c2:c7:04: e5:6c:4b:7b:a3:77:06:1f:57:9b:a7:d5:f0:cc:1a: 7a:68:8c:59:5c:bd:8e:14:a5:8a:bb:5b:6c:63:96: c4:a0:0b:30:f7:86:d9:55:01:fd:57:6b:a7:a3:0e: 4b:86:73:8a:88:b4:2f:09:cf:b7:c7:04:a4:1a:d9: 39:85:60:b6:30:ca:c9:db:4b:34:d8:6d:a8:d7:25: 04:0d:2f:05:8b:17:c1:28:30:a5:47:30:e8:7b:b6: 57:1e:81:e1:74:be:5d:a8:25:26:a4:84:c7:76:53: 54:d3:fc:0e:04:de:d9:6a:ab:8b:0c:b5:67:c0:b1: 6c:02:66:8e:f3:2e:0e:5e:1c:3b:d8:a3:8a:ed:bf: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:15:69:A0:3F:A0:64:C2:57:84:96:D0:19:22:E9:FC:3E:66:F2:B9 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:05:0d:93:40:0c:bf:5e:0f:92:a5:e6:13:5c:8f:0a:5d:5e: 92:37:c8:c3:8a:6e:50:b9:c9:a0:ff:f0:f9:5d:7f:ce:2c:cb: 64:ef:74:66:d8:24:6e:70:1c:fb:0b:31:9a:16:40:50:df:31: fd:fc:80:d0:72:d6:90:0a:fa:84:18:51:7c:80:82:71:89:48: 2d:7c:fd:80:91:e6:dc:24:25:25:4e:38:68:64:e3:0a:6c:d5: 4d:a7:2b:56:e3:27:e5:5a:9b:b0:e8:cb:28:25:f8:b2:ff:3f: f7:ae:5a:c4:45:bf:19:ed:dd:1b:fd:9c:b9:19:e6:8d:a3:f7: 93:dc:6a:3f:87:2e:6d:ae:cb:98:bd:5b:f4:5c:7b:58:7c:b2: 2c:6b:15:af:0d:b8:7f:68:f4:52:37:37:eb:89:fd:06:35:91: a5:cc:d8:e9:a9:dd:28:04:db:e2:f4:b2:50:f6:c1:73:6d:a1: 43:d8:29:6a:95:46:53:3b:d1:37:81:35:bf:c4:04:e2:09:59: 28:76:c4:f2:fd:2c:be:f7:f1:29:c0:ff:b9:ef:ba:19:2d:7f: 5c:63:90:88:25:fc:f0:cd:8c:49:54:5d:36:33:0c:a5:c0:bc: 6f:e6:16:20:7b:75:04:db:3f:b9:f5:98:20:43:60:f8:5a:88: 79:cc:0a:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjUwODA5MDAyNjA0WhcNMjUwODE2MDAyNjA0WjAYMRYwFAYD VQQDEw02ODk2OTU5Yy0zZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuiIn+9TjL5KGvZXElYhCkGWmcB9+rCl8fzISIH2puICLMlIjTQBwP325uvY bJfaxghL8t4EhlqDpV3D1/s44lLBX7TlTuizV+RW6tBMTpST+4Amr2rRLafotgpr eyJ0Uz9CFavJ0uJZmEvlY7+c+zQYXX7CxwTlbEt7o3cGH1ebp9XwzBp6aIxZXL2O FKWKu1tsY5bEoAsw94bZVQH9V2unow5LhnOKiLQvCc+3xwSkGtk5hWC2MMrJ20s0 2G2o1yUEDS8FixfBKDClRzDoe7ZXHoHhdL5dqCUmpITHdlNU0/wOBN7ZaquLDLVn wLFsAmaO8y4OXhw72KOK7b8WVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYVaaA/ oGTCV4SW0Bki6fw+ZvK5MB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtBQ2TQAy/Xg+SpeYTXI8KXV6SN8jDim5Qucmg//D5XX/OLMtk73Rm 2CRucBz7CzGaFkBQ3zH9/IDQctaQCvqEGFF8gIJxiUgtfP2AkebcJCUlTjhoZOMK bNVNpytW4yflWpuw6MsoJfiy/z/3rlrERb8Z7d0b/Zy5GeaNo/eT3Go/hy5trsuY vVv0XHtYfLIsaxWvDbh/aPRSNzfrif0GNZGlzNjpqd0oBNvi9LJQ9sFzbaFD2Clq lUZTO9E3gTW/xATiCVkodsTy/Sy+9/EpwP+577oZLX9cY5CIJfzwzYxJVF02Mwyl wLxv5hYge3UE2z+59ZggQ2D4Woh5zAoo -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:33 2025 by rpki-client