$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: vqL3+PHUvNI1PIzx6vKs55LhxdMxC+r1oxnbMhH1hYI= Subject key identifier: B3:F6:E1:8E:93:23:DA:33:F7:0E:0F:8D:2B:FF:26:F3:96:4F:79:94 Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 0834 Signing time: Tue 12 Aug 2025 21:04:21 +0000 Manifest this update: Tue 12 Aug 2025 21:04:21 +0000 Manifest next update: Tue 19 Aug 2025 21:04:21 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: CSyxqNIDysE60wdU5soEiRLaOPfZ1SxepLtYy6KtZWo=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: 3IT/DHgHOTxt9Nlos2eMFej/wQukcdeUZ7Fwjd2moXo=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: kspmrSQhYNZyQkjYuTLZdSrauXWbtL77w7yiIdCBODs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Aug 12 21:04:21 2025 GMT Not After : Aug 19 21:04:21 2025 GMT Subject: CN=689bac55-8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:45:5b:42:1c:45:bb:ef:0f:76:ec:9b:5b: 28:45:d6:da:fe:15:78:33:d8:56:bf:07:ad:0a:6d: 0d:0c:ef:ff:a6:50:b8:c2:80:38:6e:38:44:3a:41: 11:8c:02:74:39:85:e6:5b:06:6b:88:97:2b:19:5b: 51:2f:d0:73:94:9d:51:70:a6:e0:13:62:58:fd:ff: f5:54:65:79:12:79:4e:9a:c3:fc:22:fb:1c:d5:54: 1f:cb:e1:e8:9e:1a:59:8b:1e:ff:3f:01:b6:84:2a: 34:28:e4:25:3c:45:06:74:4b:3c:c3:4a:28:3b:35: c7:e8:9e:0d:9e:f0:16:bf:d7:85:a3:0e:ce:eb:b8: 5f:10:ad:42:70:ef:41:19:82:bf:24:57:5c:48:a6: fa:a4:1b:d0:27:fb:b8:b8:42:85:6f:1b:d8:ae:15: 3e:06:44:cf:4a:4f:81:02:df:15:49:c0:fc:60:9a: 02:2f:86:b3:71:3f:37:55:b3:b4:4c:bf:07:cd:31: bc:f0:a1:5d:d6:7f:26:7b:a3:79:7b:e1:66:7b:0f: c9:81:4b:e3:88:05:de:62:ea:98:74:98:35:7e:03: 92:9a:7c:df:f1:38:86:7e:c8:3c:9c:7c:8f:0f:36: c7:33:9d:56:e1:e9:e6:5e:ca:ba:9e:e3:b2:77:3c: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F6:E1:8E:93:23:DA:33:F7:0E:0F:8D:2B:FF:26:F3:96:4F:79:94 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:6e:c3:75:58:3a:9f:70:c5:14:14:e6:2a:9e:e3:bb:a7: 0c:44:12:7b:6d:2b:0a:7d:fb:13:ca:6c:24:1b:9b:59:ac:0a: 4a:73:1d:76:0d:7e:01:88:46:86:84:0c:64:db:cb:02:1d:46: d8:75:24:1a:b6:d1:27:e6:71:58:3e:d2:14:85:18:92:6c:0c: 69:b4:ec:aa:59:fb:02:06:c0:71:d1:8f:5b:46:8c:46:1f:62: 5b:c6:b2:1f:2b:e8:d1:52:9a:f8:ea:5c:7d:85:c4:70:71:91: cb:1e:d3:70:c6:63:db:d9:95:eb:d3:8a:75:12:db:85:c1:35: f7:68:01:68:ac:d1:69:5d:c4:c8:51:e4:61:c6:90:8a:7c:9a: 92:fd:c0:cb:9d:20:c8:fc:a4:fc:63:44:ea:ca:02:5f:f7:19: b0:0a:93:93:57:06:8e:67:c8:5c:11:1d:da:21:5d:bb:cb:ce: 28:fa:2b:70:c1:03:21:d1:1b:a5:49:14:6f:79:94:7c:2b:dc: be:e2:38:b4:ac:d5:22:86:5c:d8:cb:7b:e6:8d:2d:c8:bc:3b: 5d:0e:0f:e8:6b:19:27:51:1c:19:67:41:4f:2d:0c:73:31:60: 0c:77:a6:04:58:23:e1:a0:30:1a:92:72:05:13:8e:76:45:f0: a7:d4:c2:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUwODEyMjEwNDIxWhcNMjUwODE5MjEwNDIxWjAYMRYwFAYD VQQDEw02ODliYWM1NS04OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ElFW0IcRbvvD3bsm1soRdba/hV4M9hWvwetCm0NDO//plC4woA4bjhEOkER jAJ0OYXmWwZriJcrGVtRL9BzlJ1RcKbgE2JY/f/1VGV5EnlOmsP8Ivsc1VQfy+Ho nhpZix7/PwG2hCo0KOQlPEUGdEs8w0ooOzXH6J4NnvAWv9eFow7O67hfEK1CcO9B GYK/JFdcSKb6pBvQJ/u4uEKFbxvYrhU+BkTPSk+BAt8VScD8YJoCL4azcT83VbO0 TL8HzTG88KFd1n8me6N5e+Fmew/JgUvjiAXeYuqYdJg1fgOSmnzf8TiGfsg8nHyP DzbHM51W4enmXsq6nuOydzwvCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP24Y6T I9oz9w4PjSv/JvOWT3mUMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbq27DdVg6n3DFFBTmKp7ju6cMRBJ7bSsKffsTymwkG5tZrApKcx12 DX4BiEaGhAxk28sCHUbYdSQattEn5nFYPtIUhRiSbAxptOyqWfsCBsBx0Y9bRoxG H2JbxrIfK+jRUpr46lx9hcRwcZHLHtNwxmPb2ZXr04p1EtuFwTX3aAForNFpXcTI UeRhxpCKfJqS/cDLnSDI/KT8Y0TqygJf9xmwCpOTVwaOZ8hcER3aIV27y84o+itw wQMh0RulSRRveZR8K9y+4ji0rNUihlzYy3vmjS3IvDtdDg/oaxknURwZZ0FPLQxz MWAMd6YEWCPhoDAaknIFE452RfCn1MIk -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:31 2025 by rpki-client