$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: TEa4Q4DBRkjd1+9NRLSDKdAwg4g0pTJtvdpGbBHanSA= Subject key identifier: 7D:EC:29:0D:E3:F9:BE:BA:5B:A4:15:3C:28:3B:56:C7:D2:6D:28:49 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 71 Signing time: Sat 09 Aug 2025 07:21:08 +0000 Manifest this update: Sat 09 Aug 2025 07:21:08 +0000 Manifest next update: Sat 16 Aug 2025 07:21:08 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: UzQNCt/8/7cqfiui3mG0Y9CHlQmmSKGrTGT/bzhyZGQ=) 2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Aug 9 07:21:08 2025 GMT Not After : Aug 16 07:21:08 2025 GMT Subject: CN=6896f6e4-612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:8f:e2:b1:29:74:af:eb:0d:6a:e5:51:29: d6:f3:93:a5:b8:ec:3b:6d:54:2a:ce:be:a9:72:89: 88:76:5e:29:d2:45:cb:9d:af:d0:d0:47:7d:85:3f: a0:9a:37:aa:b5:78:5e:17:0d:6d:f6:86:22:f8:2a: 97:08:05:06:e8:22:1c:76:e0:b1:ed:97:d8:9f:f5: fc:84:ed:2c:cd:fe:1b:f1:ca:8f:f0:a5:65:56:e5: 68:9e:5f:d1:62:ec:b2:ca:80:03:2d:ad:3d:40:ac: c0:75:fc:6c:32:13:5d:e1:e4:d1:bd:51:d8:6c:1e: 2b:06:48:09:ab:12:d2:2e:af:ce:2c:cb:ab:c9:a1: dc:08:20:0d:e5:60:f2:df:9d:ed:94:79:b1:5f:fd: 27:34:33:5a:3e:34:48:2b:cd:c2:84:5c:34:cf:a4: fa:20:be:43:5e:fd:71:d2:5f:04:a0:3d:b9:87:4d: 70:d9:21:44:e4:c2:a2:45:a9:97:78:f7:7f:a3:5b: 07:b5:a0:df:69:6f:26:92:9f:cf:e2:eb:41:84:19: 89:41:07:13:e1:c0:36:2c:c4:22:f8:e7:6d:fc:e9: dd:68:5b:37:80:c1:1e:fe:c5:f6:a5:c8:e7:b3:5b: 82:36:66:22:c3:0f:cb:25:76:99:a2:86:3c:f6:a4: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EC:29:0D:E3:F9:BE:BA:5B:A4:15:3C:28:3B:56:C7:D2:6D:28:49 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0d:e4:b8:1f:ac:c4:47:e8:18:4e:19:fa:b3:34:67:c8:17: 51:90:3c:e0:4d:23:de:65:69:20:a2:2a:ce:19:62:aa:cf:47: 40:8d:90:da:89:69:01:f1:26:82:c8:1d:64:20:6c:5f:5a:51: f8:46:5c:2f:e0:87:e7:ac:9d:16:2b:92:c4:c7:4c:a0:55:3e: f0:71:10:1b:ad:39:73:92:01:15:13:5d:09:bb:4a:65:19:d2: 70:40:34:5d:cb:a8:aa:51:7b:17:6a:7c:4a:fd:37:0d:0c:a2: ce:18:95:62:2d:3b:5c:0a:16:8b:94:c8:61:06:7d:81:11:f2: 26:e9:85:94:21:f3:4e:23:49:4e:c9:0f:67:02:4b:38:53:85: 44:03:1f:0e:06:95:80:96:59:94:27:97:b0:51:20:b8:26:34: 15:f6:98:d5:67:35:85:5c:7e:22:69:79:df:f4:3a:7e:fb:dc: 6c:f1:ff:58:36:27:a2:39:22:9c:bc:a6:71:33:e6:dd:05:77: c9:15:d4:ce:a7:c1:6a:f3:40:85:10:5e:98:12:59:f4:4d:15: cc:7c:5f:47:0d:4d:77:37:5a:01:44:4c:07:71:cf:00:bb:bf: 4a:d2:5e:da:ae:d9:8d:e1:ad:11:ff:75:c0:35:e5:4a:60:bc: 75:80:fb:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUY0MzExMC8GA1UEBRMoNjRDRjUzMkM4RTIwQjE5NkQyNUJDN0NDN0U1OTMyNEY5 MzgxMzI3NTAeFw0yNTA4MDkwNzIxMDhaFw0yNTA4MTYwNzIxMDhaMBgxFjAUBgNV BAMTDTY4OTZmNmU0LTYxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw1o/isSl0r+sNauVRKdbzk6W47DttVCrOvqlyiYh2XinSRcudr9DQR32FP6Ca N6q1eF4XDW32hiL4KpcIBQboIhx24LHtl9if9fyE7SzN/hvxyo/wpWVW5WieX9Fi 7LLKgAMtrT1ArMB1/GwyE13h5NG9UdhsHisGSAmrEtIur84sy6vJodwIIA3lYPLf ne2UebFf/Sc0M1o+NEgrzcKEXDTPpPogvkNe/XHSXwSgPbmHTXDZIUTkwqJFqZd4 93+jWwe1oN9pbyaSn8/i60GEGYlBBxPhwDYsxCL452386d1oWzeAwR7+xfalyOez W4I2ZiLDD8sldpmihjz2pMSpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfewpDeP5 vrpbpBU8KDtWx9JtKEkwHwYDVR0jBBgwFoAUZM9TLI4gsZbSW8fMflkyT5OBMnUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RjQzLzU5OUZFQjQ0Q0JG NjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1u VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk05VExJNGdzWmJTVzhmTWZsa3lUNU9CTW5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RjQzLzU5OUZFQjQ0Q0JGNjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1pi U1c4Zk1mbGt5VDVPQk1uVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEIN5LgfrMRH6BhOGfqzNGfIF1GQPOBNI95laSCiKs4ZYqrPR0CNkNqJ aQHxJoLIHWQgbF9aUfhGXC/gh+esnRYrksTHTKBVPvBxEButOXOSARUTXQm7SmUZ 0nBANF3LqKpRexdqfEr9Nw0Mos4YlWItO1wKFouUyGEGfYER8ibphZQh804jSU7J D2cCSzhThUQDHw4GlYCWWZQnl7BRILgmNBX2mNVnNYVcfiJped/0On773Gzx/1g2 J6I5Ipy8pnEz5t0Fd8kV1M6nwWrzQIUQXpgSWfRNFcx8X0cNTXc3WgFETAdxzwC7 v0rSXtqu2Y3hrRH/dcA15UpgvHWA+/g= -----END CERTIFICATE-----Generated at Sun Aug 10 13:51:39 2025 by rpki-client