$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: 7PPyTKqnoFefbdhdhv74B9wRiXjucF8HpN9eZhv4tYw= Subject key identifier: 0E:05:FC:BF:1C:B2:0C:AF:E3:94:B0:9C:BA:93:C1:FA:A8:3B:1C:38 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 0578 Signing time: Sun 10 Aug 2025 23:22:30 +0000 Manifest this update: Sun 10 Aug 2025 23:22:29 +0000 Manifest next update: Sun 17 Aug 2025 23:22:29 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: 9frOeiR5c0z1GX1Xr2Vln/5NPGWDbND37Kq61Fc/3ro=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Aug 10 23:22:29 2025 GMT Not After : Aug 17 23:22:29 2025 GMT Subject: CN=689929b5-521c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b0:5f:61:a3:8b:0d:0f:79:f8:cd:60:99:92: ba:74:45:98:cb:f3:76:bb:80:4b:e2:c6:ae:9c:b6: 1d:24:f8:2e:18:42:bd:e3:71:48:91:4d:e7:eb:0b: 8e:1c:53:0f:14:2b:52:57:e8:cc:ca:b7:6d:26:da: 72:24:20:ca:c2:6e:8f:17:9f:a1:ed:47:c0:91:92: 26:9c:5a:f6:8c:d2:cb:3c:56:8d:a4:12:d2:a8:bf: 8c:47:05:00:af:2b:88:fc:9c:7b:c9:39:ba:7f:2c: 06:af:43:f9:cb:23:0c:5f:bc:e9:4f:9f:73:3c:38: a8:30:6e:bf:55:79:23:ce:45:15:3a:a4:ea:83:a3: fc:74:28:52:bf:52:ee:93:47:ca:c2:c1:9f:33:f8: 39:b7:2e:15:5b:ea:ac:2f:c9:f5:76:6e:9d:f0:52: 94:7f:c2:35:ff:27:d4:3c:13:1b:0f:aa:c7:6c:ab: 9e:38:8b:19:56:42:93:db:b2:17:3d:ff:66:a9:76: 51:fc:26:db:d2:0e:4f:d6:72:82:79:7f:92:92:47: db:2d:0f:26:6f:a1:e4:c1:ba:0c:d4:52:77:37:92: 6e:9a:10:3f:a9:33:09:1a:09:c3:17:e4:d8:99:af: b8:87:f1:47:e5:89:51:a6:84:0c:bc:d6:91:0d:52: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:FC:BF:1C:B2:0C:AF:E3:94:B0:9C:BA:93:C1:FA:A8:3B:1C:38 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9a:ac:f5:70:1e:e5:92:b2:c9:2f:c5:95:fd:f3:f3:a5:34: 12:6b:c8:19:92:4f:27:4d:76:49:66:f3:34:22:ce:e7:47:98: e0:99:3b:78:ce:51:30:f4:f1:f1:1c:29:38:9e:1b:4b:84:d1: 8f:a1:f5:99:bb:c5:22:b4:38:ac:33:08:5a:00:fb:91:69:cc: e8:36:fb:06:f6:f6:b5:c6:23:05:02:95:93:d2:91:85:9e:a8: bd:c0:83:6d:87:df:b8:b4:44:37:31:89:2f:dd:28:80:94:b3: cf:cc:f9:4f:5d:60:d8:c8:d0:0c:2c:9f:84:39:77:ad:07:2a: e2:ad:27:94:56:26:1d:df:81:fc:51:34:0e:ae:7e:42:51:63: 97:6b:7a:08:1b:b5:d8:6a:8b:df:14:9c:0d:91:8e:fc:d1:2f: 76:3c:e8:ee:d6:19:b8:ec:bc:20:9e:17:ee:d7:e7:1e:9b:9e: 73:bb:64:70:d6:2c:ef:0e:46:12:1d:71:94:a0:6e:1f:b4:92: 0a:e1:e9:37:3d:e4:a9:4d:b1:4c:73:30:9c:71:9a:4a:6f:36: 47:e0:70:ee:74:72:bf:c8:fa:70:3c:3e:8b:a6:71:0f:3f:a2: 26:41:1a:e5:35:85:c4:2e:52:c9:b1:a7:3d:1c:ba:d2:14:ef: d9:5b:7f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwODEwMjMyMjI5WhcNMjUwODE3MjMyMjI5WjAYMRYwFAYD VQQDEw02ODk5MjliNS01MjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rBfYaOLDQ95+M1gmZK6dEWYy/N2u4BL4saunLYdJPguGEK943FIkU3n6wuO HFMPFCtSV+jMyrdtJtpyJCDKwm6PF5+h7UfAkZImnFr2jNLLPFaNpBLSqL+MRwUA ryuI/Jx7yTm6fywGr0P5yyMMX7zpT59zPDioMG6/VXkjzkUVOqTqg6P8dChSv1Lu k0fKwsGfM/g5ty4VW+qsL8n1dm6d8FKUf8I1/yfUPBMbD6rHbKueOIsZVkKT27IX Pf9mqXZR/Cbb0g5P1nKCeX+SkkfbLQ8mb6HkwboM1FJ3N5JumhA/qTMJGgnDF+TY ma+4h/FH5YlRpoQMvNaRDVKX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4F/L8c sgyv45SwnLqTwfqoOxw4MB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxmqz1cB7lkrLJL8WV/fPzpTQSa8gZkk8nTXZJZvM0Is7nR5jgmTt4 zlEw9PHxHCk4nhtLhNGPofWZu8UitDisMwhaAPuRaczoNvsG9va1xiMFApWT0pGF nqi9wINth9+4tEQ3MYkv3SiAlLPPzPlPXWDYyNAMLJ+EOXetByrirSeUViYd34H8 UTQOrn5CUWOXa3oIG7XYaovfFJwNkY780S92POju1hm47Lwgnhfu1+cem55zu2Rw 1izvDkYSHXGUoG4ftJIK4ek3PeSpTbFMczCccZpKbzZH4HDudHK/yPpwPD6LpnEP P6ImQRrlNYXELlLJsac9HLrSFO/ZW3/Z -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:25 2025 by rpki-client