$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft File: aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json) Hash identifier: 1CoeeiWZDWjbdpm0I26URZ1AtloTf8XqZkTvoBSQkSY= Subject key identifier: D6:3E:5F:3B:60:16:29:63:62:77:04:5B:91:C3:1B:9C:84:28:C4:78 Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft Manifest number: 06B3 Signing time: Fri 08 Aug 2025 22:31:58 +0000 Manifest this update: Fri 08 Aug 2025 22:31:58 +0000 Manifest next update: Fri 15 Aug 2025 22:31:58 +0000 Files and hashes: 1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: cm3WcGP+itimmZid9UQr7Wkg9LkMt28fX8JUdNpzIqI=) 2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: qir+UT8zyDGjYz1YRKkq2v/pYcPeSxEZXiWVhwGwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Validity Not Before: Aug 8 22:31:58 2025 GMT Not After : Aug 15 22:31:58 2025 GMT Subject: CN=68967ade-e825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:30:d0:b3:66:25:0e:c5:73:60:fe:6d:c4: f1:33:49:3f:b7:10:ed:f9:14:23:eb:a8:d7:e3:3e: f7:0d:74:26:21:1f:36:e2:f9:0e:50:d5:9c:27:60: a2:c3:f0:66:70:ce:ef:c3:b2:c7:c6:97:6a:f7:29: a8:ad:3f:af:3a:ef:ce:8c:1d:23:be:a2:ae:3d:2b: 9e:ca:a9:0d:03:e4:1f:b8:c9:85:60:bb:28:c0:bb: 78:2d:9f:51:66:f0:b5:3c:44:b0:27:40:8c:84:35: 33:86:31:e5:cf:19:c0:b6:73:ae:d5:42:5a:4a:31: ba:5d:b8:17:a3:a5:23:3d:73:41:4b:ee:25:05:5f: 9e:12:3f:e8:99:0e:7a:17:32:28:a1:db:2d:f1:d9: 88:6a:c3:c5:e4:ee:af:cc:3f:49:57:55:f6:b8:64: 26:e2:5d:8c:7e:69:53:85:ea:ce:0f:66:53:04:ab: d8:f0:2d:bc:ee:d8:00:8c:e7:81:cf:eb:92:2b:e3: a3:db:8f:49:88:ec:43:d9:9b:78:fe:86:37:d7:9c: 75:0c:01:41:40:59:2f:9c:35:a9:a6:25:79:e3:17: 58:55:fe:e8:2b:4e:d8:09:ba:11:a8:60:f7:48:d6: 1f:e4:e1:02:c1:0f:1f:1b:7b:7b:9c:d7:da:f3:e5: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3E:5F:3B:60:16:29:63:62:77:04:5B:91:C3:1B:9C:84:28:C4:78 X509v3 Authority Key Identifier: keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:5c:8c:9c:ab:b1:5a:02:67:b7:d9:b1:20:47:f3:d4:2f:4a: 77:c7:0b:eb:33:34:bc:49:d9:6d:94:ac:cb:0a:25:60:7c:c1: b3:f2:8b:50:81:5a:82:5f:89:2d:f2:99:bc:e3:be:ce:d3:48: cf:6b:a3:2d:04:51:4b:98:56:a6:0d:bb:fe:af:8d:a1:26:33: 3c:b7:5f:e4:c5:55:eb:07:d1:4c:ce:72:b6:54:70:18:f2:16: c2:fd:80:80:9c:40:65:8f:32:24:6c:90:b3:91:d2:6e:42:d5: 81:e1:f9:54:e2:d7:8f:58:3d:22:c7:9e:22:80:00:ba:51:3f: 46:0e:98:f3:38:13:46:1c:ab:01:de:71:38:c8:c4:6a:63:40: ba:9c:21:5b:d4:c0:e5:67:5f:5a:f6:b7:80:94:83:91:04:fa: 95:b6:d8:f2:07:2d:35:ec:f7:2a:75:4d:18:8a:ec:6c:85:e1: cb:52:f9:d5:06:73:50:14:21:be:9e:69:da:31:95:fa:0d:08: 10:bf:34:89:e7:8b:fd:1e:3d:34:23:72:48:f9:03:73:20:4a: ed:5a:0d:4f:b0:6d:aa:f3:ca:27:74:ef:14:77:a9:5e:2e:34: 14:76:6e:9b:db:eb:b1:47:fe:48:07:fb:90:a4:3c:30:0b:2c: d5:0e:bd:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzRUUxMTAvBgNVBAUTKDY5NkFGMjNEOTMyOTVDMkY1RkRERjMyQTk1NTEzQjJE REJCRkNFMUIwHhcNMjUwODA4MjIzMTU4WhcNMjUwODE1MjIzMTU4WjAYMRYwFAYD VQQDEw02ODk2N2FkZS1lODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSsw0LNmJQ7Fc2D+bcTxM0k/txDt+RQj66jX4z73DXQmIR824vkOUNWcJ2Ci w/BmcM7vw7LHxpdq9ymorT+vOu/OjB0jvqKuPSueyqkNA+QfuMmFYLsowLt4LZ9R ZvC1PESwJ0CMhDUzhjHlzxnAtnOu1UJaSjG6XbgXo6UjPXNBS+4lBV+eEj/omQ56 FzIoodst8dmIasPF5O6vzD9JV1X2uGQm4l2MfmlTherOD2ZTBKvY8C287tgAjOeB z+uSK+Oj249JiOxD2Zt4/oY315x1DAFBQFkvnDWppiV54xdYVf7oK07YCboRqGD3 SNYf5OECwQ8fG3t7nNfa8+VcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY+Xztg FiljYncEW5HDG5yEKMR4MB8GA1UdIwQYMBaAFGlq8j2TKVwvX93zKpVROy3bv84b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNFRS81Qjk3QThCODcw MTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhDOWYzZk1xbFZFN0xkdV96 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcnlQWk1wWEM5ZjNmTXFsVkU3TGR1X3pocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNFRS81Qjk3QThCODcwMTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhD OWYzZk1xbFZFN0xkdV96aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZXIycq7FaAme32bEgR/PUL0p3xwvrMzS8SdltlKzLCiVgfMGz8otQ gVqCX4kt8pm8477O00jPa6MtBFFLmFamDbv+r42hJjM8t1/kxVXrB9FMznK2VHAY 8hbC/YCAnEBljzIkbJCzkdJuQtWB4flU4tePWD0ix54igAC6UT9GDpjzOBNGHKsB 3nE4yMRqY0C6nCFb1MDlZ19a9reAlIORBPqVttjyBy017PcqdU0YiuxsheHLUvnV BnNQFCG+nmnaMZX6DQgQvzSJ54v9Hj00I3JI+QNzIErtWg1PsG2q88ondO8Ud6le LjQUdm6b2+uxR/5IB/uQpDwwCyzVDr1c -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:05 2025 by rpki-client