$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: pEkyY6JE2ZlqL3MhUYR/7SafRr3awLTPzorWohcrmOA= Subject key identifier: 3A:97:10:AC:B3:46:14:6C:AD:A3:B5:A4:03:4A:47:F2:47:F7:E9:39 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 0656 Signing time: Fri 08 Aug 2025 23:00:22 +0000 Manifest this update: Fri 08 Aug 2025 23:00:21 +0000 Manifest next update: Fri 15 Aug 2025 23:00:21 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: EkCI4XxYYf8K/RC6qj19a+6sxpVXJL844sJRh7OA5kA=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Aug 8 23:00:21 2025 GMT Not After : Aug 15 23:00:21 2025 GMT Subject: CN=68968186-75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:93:47:54:1f:03:1d:08:21:a6:65:83:af: 06:ab:9d:d4:67:1a:16:58:98:29:38:d6:19:cd:4f: a6:bc:07:49:5b:fe:67:5e:cc:a3:69:5c:7e:08:ef: 4c:7b:7a:f0:26:35:f7:cc:5e:ef:58:b2:dc:14:10: 4f:df:20:c4:9f:64:10:ea:68:f2:80:5f:c4:d7:cb: 3e:d0:6a:f6:3d:d0:71:fd:af:50:8e:d4:d5:89:1b: 28:d4:49:48:41:68:8d:e9:82:ee:9a:9f:cd:e3:d3: 15:e1:e9:00:f1:3d:de:ab:c7:ef:17:62:13:9b:88: ea:8e:6a:50:b7:f8:45:ea:3f:5e:35:8e:a6:4f:53: 8b:da:d9:f9:e2:76:3f:2b:0d:fd:b8:95:50:83:22: 6d:05:32:e4:0c:4c:15:76:fb:2e:2d:42:3b:b6:c6: 3a:f0:72:4e:4c:0f:cb:8e:c8:f1:54:db:59:52:e5: 7f:7a:e6:23:f7:ba:90:5b:f2:36:f7:95:99:39:76: fe:c2:e5:6a:6a:d2:3b:ad:5d:0d:ff:8e:65:a0:ec: c8:06:7a:c2:94:80:0c:9c:ba:58:bd:c1:3e:f7:75: ea:1b:77:d0:ac:cd:65:3f:67:9f:bc:e7:67:84:15: 22:f2:11:13:1c:07:4e:f5:0f:d1:b2:85:6e:1f:be: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:10:AC:B3:46:14:6C:AD:A3:B5:A4:03:4A:47:F2:47:F7:E9:39 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:62:bc:0f:05:9e:ed:f0:0e:1c:83:7d:3e:6c:c3:4f:0e:29: 82:54:75:c7:fc:cf:06:18:be:e3:b2:e1:51:cf:d8:8b:bd:63: f2:d8:d7:49:15:64:49:f8:df:60:e3:cd:d6:ff:71:e0:84:08: 3a:56:e5:0c:55:6f:e0:a4:30:28:46:f8:82:a4:a8:c6:b9:62: e0:35:75:69:b0:3d:72:a7:fc:71:09:3d:a1:38:7b:ef:54:02: 02:91:fd:4d:bb:a4:5c:3e:4d:06:79:5b:21:3d:11:33:db:e3: d0:29:0d:c8:58:46:85:76:21:a5:5a:26:52:3d:b2:93:79:65: b8:5c:1f:81:1f:dd:26:d0:ce:d3:36:45:e9:8f:1d:f4:bb:4a: 15:cc:5d:90:2b:2b:9d:ac:fc:58:53:1f:43:ff:49:57:7e:40: 5e:c0:0a:0d:ca:50:f8:2d:3e:c1:d0:b7:ba:71:fd:52:38:83: 51:5d:1e:d3:b9:83:de:d7:64:a7:c7:e3:dc:bf:0c:b2:c2:38: 77:4c:e4:92:b5:7c:38:8f:fe:0a:e9:b3:89:c1:92:a3:75:14: f4:64:90:65:1d:fd:29:c1:3a:11:46:e8:c7:d8:24:b2:af:36: 31:8c:b1:08:8b:fc:bb:d1:02:03:78:bc:7d:23:bf:fc:ed:44: 59:7c:08:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUwODA4MjMwMDIxWhcNMjUwODE1MjMwMDIxWjAYMRYwFAYD VQQDEw02ODk2ODE4Ni03NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/CTR1QfAx0IIaZlg68Gq53UZxoWWJgpONYZzU+mvAdJW/5nXsyjaVx+CO9M e3rwJjX3zF7vWLLcFBBP3yDEn2QQ6mjygF/E18s+0Gr2PdBx/a9QjtTViRso1ElI QWiN6YLump/N49MV4ekA8T3eq8fvF2ITm4jqjmpQt/hF6j9eNY6mT1OL2tn54nY/ Kw39uJVQgyJtBTLkDEwVdvsuLUI7tsY68HJOTA/LjsjxVNtZUuV/euYj97qQW/I2 95WZOXb+wuVqatI7rV0N/45loOzIBnrClIAMnLpYvcE+93XqG3fQrM1lP2efvOdn hBUi8hETHAdO9Q/RsoVuH77LuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqXEKyz RhRsraO1pANKR/JH9+k5MB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3YrwPBZ7t8A4cg30+bMNPDimCVHXH/M8GGL7jsuFRz9iLvWPy2NdJ FWRJ+N9g483W/3HghAg6VuUMVW/gpDAoRviCpKjGuWLgNXVpsD1yp/xxCT2hOHvv VAICkf1Nu6RcPk0GeVshPREz2+PQKQ3IWEaFdiGlWiZSPbKTeWW4XB+BH90m0M7T NkXpjx30u0oVzF2QKyudrPxYUx9D/0lXfkBewAoNylD4LT7B0Le6cf1SOINRXR7T uYPe12Snx+Pcvwyywjh3TOSStXw4j/4K6bOJwZKjdRT0ZJBlHf0pwToRRujH2CSy rzYxjLEIi/y70QIDeLx9I7/87URZfAhb -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:58 2025 by rpki-client