$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: eCsIxbrK9PkxiPI9twgNDJ+TvnQvCVFk0bFqgXBvIbs= Subject key identifier: CB:6A:A9:9C:63:11:C2:D5:C9:3C:62:4F:58:1B:49:01:0A:2F:63:AE Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: B0 Signing time: Mon 11 Aug 2025 06:16:16 +0000 Manifest this update: Mon 11 Aug 2025 06:16:16 +0000 Manifest next update: Mon 18 Aug 2025 06:16:16 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: 2p25QFahWW49o9IVAeYNAzaNbTjoIcGcycdRvqajBco=) 2: 0E89AC7651D911F0B26BF882C4F9AE02.roa (hash: nvv0oHQNlQesLC7oMYNtNrlkaktCwof5cKk9/EWjMoo=) 3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Aug 11 06:16:16 2025 GMT Not After : Aug 18 06:16:16 2025 GMT Subject: CN=68998ab0-61d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0e:79:02:d7:5b:50:79:e2:22:fb:62:1f:b4: 7a:23:5a:c0:6a:13:51:7c:a2:0b:29:11:46:37:f4: 1a:6d:f3:c3:fa:68:68:0e:4f:b2:01:e9:fa:9b:a8: a1:a5:17:49:07:30:99:f6:6a:24:91:f3:ad:56:b0: b6:30:a5:e1:40:e0:25:94:87:6a:6e:f2:90:e1:d3: 7e:f3:ff:7b:55:fc:5e:03:cb:8d:54:65:08:49:0c: ad:3b:00:6b:11:b0:0d:b2:14:04:6c:3f:ac:ed:62: 8f:0b:49:6f:fc:e0:85:11:00:71:7e:aa:07:3f:96: 52:84:4f:d3:1a:dc:34:55:92:5e:a2:f1:99:98:88: 0d:a5:f6:8b:bb:40:9a:31:c1:5e:05:06:07:c9:79: 9c:04:c7:db:19:23:c4:18:81:c2:be:97:48:93:5f: 89:ba:2b:23:c8:71:7a:31:13:bb:74:d3:94:9f:c6: f4:d7:ed:fb:43:87:84:c4:19:4d:5a:d7:87:7c:de: 8a:d7:aa:57:85:0c:03:0d:71:3c:4c:3e:98:48:71: b1:90:f6:d4:4f:48:3d:87:11:2b:00:4f:be:ca:4d: 40:84:fa:52:e5:1a:60:9c:0d:1f:c1:b5:60:e4:26: a4:88:f4:72:93:2b:dc:77:e0:d7:7b:2e:ee:d2:b5: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:A9:9C:63:11:C2:D5:C9:3C:62:4F:58:1B:49:01:0A:2F:63:AE X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b2:e3:76:2d:35:b3:a0:b5:84:00:2b:69:ec:f5:a5:d3:2b: 3b:7e:26:39:f1:5b:00:a1:a5:a2:ec:09:9e:a8:f5:87:82:e6: 29:3d:c9:c3:2d:dd:4f:5a:51:ef:41:7a:e5:c6:47:d1:02:c7: 98:8d:15:d8:bd:ed:b6:a4:6e:f6:02:48:d3:fa:bd:3f:9d:f2: 75:6a:cb:e6:0f:cd:51:36:43:ad:81:35:52:0e:70:d0:c6:bc: 80:5a:33:84:14:4e:c8:6f:25:e7:e4:82:19:4f:03:67:36:80: f1:47:4c:89:ac:e7:88:b0:89:66:86:ac:42:41:e2:a4:7a:58: 9b:1a:a1:3b:8b:af:d9:bd:b0:d6:5c:9c:72:d6:d3:76:7c:34: 54:7c:99:ac:ed:fa:ba:10:1f:49:13:b4:cf:a8:45:1b:bd:c2: c9:59:68:f9:d0:14:0d:98:2f:0a:c0:d0:bc:fb:40:a9:74:34: 26:97:c6:e7:7c:cb:4e:9c:ee:97:80:e9:68:1d:19:d4:77:2e: 01:ee:ea:b0:f6:33:74:7c:09:a2:3c:25:f5:25:ca:1f:2c:57: c3:da:e2:73:27:5e:51:0b:e4:fc:ec:d1:44:2f:9e:41:28:e0: cd:29:35:31:25:84:e2:1b:90:7f:40:ca:b8:5e:0c:a1:30:90: f4:9d:76:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUwODExMDYxNjE2WhcNMjUwODE4MDYxNjE2WjAYMRYwFAYD VQQDEw02ODk5OGFiMC02MWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Q55AtdbUHniIvtiH7R6I1rAahNRfKILKRFGN/QabfPD+mhoDk+yAen6m6ih pRdJBzCZ9mokkfOtVrC2MKXhQOAllIdqbvKQ4dN+8/97VfxeA8uNVGUISQytOwBr EbANshQEbD+s7WKPC0lv/OCFEQBxfqoHP5ZShE/TGtw0VZJeovGZmIgNpfaLu0Ca McFeBQYHyXmcBMfbGSPEGIHCvpdIk1+JuisjyHF6MRO7dNOUn8b01+37Q4eExBlN WteHfN6K16pXhQwDDXE8TD6YSHGxkPbUT0g9hxErAE++yk1AhPpS5RpgnA0fwbVg 5CakiPRykyvcd+DXey7u0rWTdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtqqZxj EcLVyTxiT1gbSQEKL2OuMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9suN2LTWzoLWEACtp7PWl0ys7fiY58VsAoaWi7AmeqPWHguYpPcnD Ld1PWlHvQXrlxkfRAseYjRXYve22pG72AkjT+r0/nfJ1asvmD81RNkOtgTVSDnDQ xryAWjOEFE7IbyXn5IIZTwNnNoDxR0yJrOeIsIlmhqxCQeKkelibGqE7i6/ZvbDW XJxy1tN2fDRUfJms7fq6EB9JE7TPqEUbvcLJWWj50BQNmC8KwNC8+0CpdDQml8bn fMtOnO6XgOloHRnUdy4B7uqw9jN0fAmiPCX1JcofLFfD2uJzJ15RC+T87NFEL55B KODNKTUxJYTiG5B/QMq4XgyhMJD0nXbR -----END CERTIFICATE-----Generated at Mon Aug 11 09:29:05 2025 by rpki-client