$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft File: rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json) Hash identifier: J0AoPj5E56AAzSCgmaiyW/6vBEZ0GEzRArnrWEFAeVw= Subject key identifier: DC:A1:31:B2:5A:C8:3E:12:A0:18:80:AE:A8:FC:B8:D6:59:8E:8B:9C Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4 Certificate issuer: /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft Manifest number: 01CB Signing time: Mon 11 Aug 2025 03:01:16 +0000 Manifest this update: Mon 11 Aug 2025 03:01:15 +0000 Manifest next update: Mon 18 Aug 2025 03:01:15 +0000 Files and hashes: 1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: IWKaqiKVmdWTJGl9zJbp1ae+rE3tb9r+rIeaNyI+7g8=) 2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: vSHKTbzD9NgaWK1i6zEOW6JvGbxTv8WMHXlFOUXaG78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167427, serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4 Validity Not Before: Aug 11 03:01:15 2025 GMT Not After : Aug 18 03:01:15 2025 GMT Subject: CN=68995cfb-51bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:06:c7:5e:26:e3:1a:5d:50:9c:7e:40:db: 93:28:e3:53:d9:55:48:68:17:87:c0:61:35:16:cd: 07:b1:74:dc:ee:8b:68:a7:f0:e8:90:7c:b2:fc:3b: 09:17:01:74:5e:c9:99:ff:8d:fd:9c:cc:bc:92:a2: dd:c9:59:dc:77:d8:b6:71:f7:65:d0:dd:f0:06:90: 71:5e:0a:3b:38:67:e5:32:5e:73:23:fd:8f:c5:58: 93:c0:dc:72:a4:f5:7a:4d:f3:7c:e2:8c:52:ac:74: 8f:96:50:8b:80:77:58:d9:d1:b8:77:13:5e:72:80: 08:8c:59:42:88:61:53:fc:00:6d:aa:17:54:e6:b6: da:9e:fc:dc:ba:a0:5d:a5:a2:0d:81:0f:37:be:b3: 37:dc:a6:40:1c:41:95:7c:d0:e9:4c:16:be:2a:7f: 3c:21:9c:2e:81:e1:75:85:d8:ab:13:52:94:6d:5e: 1c:75:a2:15:55:73:4c:d2:00:47:fb:d8:ad:0e:ae: a5:31:88:d3:17:84:4f:58:8e:16:9f:25:23:90:7d: 26:15:d3:24:37:dd:17:e5:d8:c8:93:72:c6:72:b1: 20:10:6b:e9:56:31:ca:13:c0:8d:a9:4d:19:29:11: 6e:af:45:dd:1e:17:a5:02:b7:68:fe:08:0b:8d:86: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A1:31:B2:5A:C8:3E:12:A0:18:80:AE:A8:FC:B8:D6:59:8E:8B:9C X509v3 Authority Key Identifier: keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ab:a4:f1:98:b6:bf:15:87:f9:93:d8:0b:8e:32:31:1e:fd: d4:60:4b:b4:24:13:52:95:cb:de:40:a6:2c:a1:35:65:2f:e8: bc:38:88:f5:a5:0f:b0:ad:b0:4d:e5:22:de:d5:7c:f1:e0:c5: bf:f2:f6:a9:8d:21:88:b4:29:20:35:f3:88:d3:a5:34:7e:20: 6d:c1:70:df:bc:e0:0f:aa:fe:60:a9:fd:ae:19:fa:11:eb:65: 1d:a8:b8:e9:11:60:e5:7e:bc:8e:66:e9:7f:e7:e1:38:38:5f: b9:01:26:01:fc:e1:5b:49:26:f7:83:c3:f9:59:f9:f5:49:ff: 39:db:11:84:f9:71:fe:a2:15:bd:b8:63:6a:7d:e4:55:ce:ac: c0:03:c4:46:d1:88:ef:32:0a:ec:03:62:ef:39:60:a1:50:06: 7b:a1:ef:16:02:04:61:13:96:49:2e:02:c6:28:71:02:8f:8a: c0:4f:89:0c:ae:f8:5f:64:8a:23:97:61:11:c3:01:b9:6f:ee: c3:92:a7:32:83:85:0c:02:d9:75:05:fc:f2:fb:dc:60:79:74: ae:61:d2:17:3f:72:26:65:32:99:4b:60:8c:4e:1b:57:e7:61: a9:da:c1:22:24:30:03:66:a2:65:f9:a1:62:f7:e8:b6:2f:ad: 12:de:8d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc0MjcxMTAvBgNVBAUTKEFEOTUxNURGOTVCRkQ0RjhFREZGNUQ4Q0JEMkFCNEI5 QkQ4NEY4QTQwHhcNMjUwODExMDMwMTE1WhcNMjUwODE4MDMwMTE1WjAYMRYwFAYD VQQDEw02ODk5NWNmYi01MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/UGx14m4xpdUJx+QNuTKONT2VVIaBeHwGE1Fs0HsXTc7otop/DokHyy/DsJ FwF0XsmZ/439nMy8kqLdyVncd9i2cfdl0N3wBpBxXgo7OGflMl5zI/2PxViTwNxy pPV6TfN84oxSrHSPllCLgHdY2dG4dxNecoAIjFlCiGFT/ABtqhdU5rbanvzcuqBd paINgQ83vrM33KZAHEGVfNDpTBa+Kn88IZwugeF1hdirE1KUbV4cdaIVVXNM0gBH +9itDq6lMYjTF4RPWI4WnyUjkH0mFdMkN90X5djIk3LGcrEgEGvpVjHKE8CNqU0Z KRFur0XdHhelArdo/ggLjYZK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyhMbJa yD4SoBiArqj8uNZZjoucMB8GA1UdIwQYMBaAFK2VFd+Vv9T47f9djL0qtLm9hPik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzQyNy82QUI5MUZGNkJE ODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQanRfMTJNdlNxMHViMkUt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JaVVYzNVdfMVBqdF8xMk12U3EwdWIyRS1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzQyNy82QUI5MUZGNkJEODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQ anRfMTJNdlNxMHViMkUtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvq6TxmLa/FYf5k9gLjjIxHv3UYEu0JBNSlcveQKYsoTVlL+i8OIj1 pQ+wrbBN5SLe1Xzx4MW/8vapjSGItCkgNfOI06U0fiBtwXDfvOAPqv5gqf2uGfoR 62UdqLjpEWDlfryOZul/5+E4OF+5ASYB/OFbSSb3g8P5Wfn1Sf852xGE+XH+ohW9 uGNqfeRVzqzAA8RG0YjvMgrsA2LvOWChUAZ7oe8WAgRhE5ZJLgLGKHECj4rAT4kM rvhfZIojl2ERwwG5b+7Dkqcyg4UMAtl1Bfzy+9xgeXSuYdIXP3ImZTKZS2CMThtX 52Gp2sEiJDADZqJl+aFi9+i2L60S3o25 -----END CERTIFICATE-----Generated at Tue Aug 12 14:35:03 2025 by rpki-client