$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: d4wyJoTufeKUJs+7BFT8nuDWP24pE2TqlN4E+hHBpEg= Subject key identifier: 6F:A3:2B:3D:D9:86:B2:EA:EB:54:71:E7:7D:81:CB:00:D8:64:B5:3E Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 07A1 Signing time: Sun 10 Aug 2025 21:23:29 +0000 Manifest this update: Sun 10 Aug 2025 21:23:28 +0000 Manifest next update: Sun 17 Aug 2025 21:23:28 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: Xb5TucCq6g3IGxPPLyrufa0o8xkRHASHYudxO/4dD24=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Aug 10 21:23:28 2025 GMT Not After : Aug 17 21:23:28 2025 GMT Subject: CN=68990dd1-23cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:50:b2:db:f1:88:48:e7:28:ce:fa:e4:ae: c5:ac:41:dc:9d:17:76:53:c8:dd:1a:d8:f5:44:cf: 82:3c:66:2c:24:e0:4a:db:1b:ed:49:04:c1:ec:4f: 77:11:1d:86:b7:48:a8:6e:bf:5e:e4:8e:76:8a:41: 16:17:91:66:2b:95:b2:d1:37:64:18:4b:93:be:b4: 23:bd:e9:79:ea:33:24:9c:2e:14:b8:26:e4:e9:be: fa:a9:da:54:73:f8:2e:70:d5:7f:50:e4:4b:90:a7: 51:b9:cb:e8:bc:59:4f:93:ef:52:25:df:8b:a5:3f: 7a:2c:70:73:a1:56:5f:49:e1:8c:97:0a:06:e6:31: d5:8e:f9:46:d6:d5:f2:8f:5f:78:2d:9a:4d:5e:88: 38:6b:c4:72:59:85:4a:bd:a7:b2:85:e4:55:06:71: f7:5f:32:fa:12:d5:ca:65:be:c5:b6:37:70:27:41: e5:7e:6a:25:4c:28:81:93:77:da:c8:01:8e:4c:7c: 0c:47:67:57:fc:73:57:c5:5e:ca:aa:5b:3f:8e:c3: 5d:f2:a9:92:65:b1:a4:8a:37:2d:d0:b1:8c:c4:64: 0b:dc:bd:4e:46:93:1f:7c:85:87:5b:19:5b:5d:40: ea:47:97:8b:10:42:69:e5:cf:f6:70:50:78:95:f5: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A3:2B:3D:D9:86:B2:EA:EB:54:71:E7:7D:81:CB:00:D8:64:B5:3E X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:94:96:35:75:fb:34:37:0c:53:d2:fe:b3:bb:2f:f7:3b:7e: 48:7f:b2:01:65:b8:5b:6e:06:b7:70:cc:14:67:fa:dc:07:96: 0c:26:a7:ab:c4:24:ed:5d:1f:86:d5:24:24:b8:b0:fb:79:9a: 38:5a:99:81:65:ff:4f:b7:d4:4f:39:b4:48:38:16:c1:f5:66: 4c:f7:6d:3d:a9:ec:19:b6:50:87:30:e9:38:ca:50:59:c0:a3: 24:a9:72:00:df:54:ba:61:19:25:6b:86:0f:05:1e:c8:71:4c: e6:3b:02:8b:71:3c:00:e6:45:9b:a5:ee:8d:f2:63:28:72:93: 78:9d:5a:d5:d9:e1:f9:d1:68:58:e8:93:2f:42:6b:bb:57:1e: 89:d4:83:06:f5:d2:75:19:65:fd:17:03:24:f1:2e:a3:c9:3a: 3f:12:14:88:01:05:43:3f:61:bd:7c:f8:3b:4c:17:59:1e:df: fe:02:8a:5d:ed:42:e6:ef:9a:4d:62:3e:19:4b:9a:d7:f9:92: 25:ee:97:7f:c5:7f:92:fa:51:8e:9d:a3:d7:80:a1:06:15:d5: dc:8f:05:98:09:7d:bc:8e:b4:b2:c7:40:27:b3:a5:f8:ee:49: 1c:36:97:49:ab:4e:1a:d3:4f:a6:6e:a7:dd:83:d3:a2:05:0e: 5f:c8:84:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjUwODEwMjEyMzI4WhcNMjUwODE3MjEyMzI4WjAYMRYwFAYD VQQDEw02ODk5MGRkMS0yM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnpQstvxiEjnKM765K7FrEHcnRd2U8jdGtj1RM+CPGYsJOBK2xvtSQTB7E93 ER2Gt0iobr9e5I52ikEWF5FmK5Wy0TdkGEuTvrQjvel56jMknC4UuCbk6b76qdpU c/gucNV/UORLkKdRucvovFlPk+9SJd+LpT96LHBzoVZfSeGMlwoG5jHVjvlG1tXy j194LZpNXog4a8RyWYVKvaeyheRVBnH3XzL6EtXKZb7FtjdwJ0HlfmolTCiBk3fa yAGOTHwMR2dX/HNXxV7Kqls/jsNd8qmSZbGkijct0LGMxGQL3L1ORpMffIWHWxlb XUDqR5eLEEJp5c/2cFB4lfVfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+jKz3Z hrLq61Rx532BywDYZLU+MB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAglJY1dfs0NwxT0v6zuy/3O35If7IBZbhbbga3cMwUZ/rcB5YMJqer xCTtXR+G1SQkuLD7eZo4WpmBZf9Pt9RPObRIOBbB9WZM9209qewZtlCHMOk4ylBZ wKMkqXIA31S6YRkla4YPBR7IcUzmOwKLcTwA5kWbpe6N8mMocpN4nVrV2eH50WhY 6JMvQmu7Vx6J1IMG9dJ1GWX9FwMk8S6jyTo/EhSIAQVDP2G9fPg7TBdZHt/+Aopd 7ULm75pNYj4ZS5rX+ZIl7pd/xX+S+lGOnaPXgKEGFdXcjwWYCX28jrSyx0Ans6X4 7kkcNpdJq04a00+mbqfdg9OiBQ5fyIQS -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:06 2025 by rpki-client