$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: EibQoDxBC+WVDE7Xsn7CcPQXq7k2Agz5L1NK+ucD6o8= Subject key identifier: B5:C6:3D:88:37:E1:5D:CB:70:E6:9C:E5:09:5B:76:C6:BB:D7:E8:59 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D7E Signing time: Sun 10 Aug 2025 15:28:01 +0000 Manifest this update: Sun 10 Aug 2025 15:28:01 +0000 Manifest next update: Sun 17 Aug 2025 15:28:01 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: zN+ckIY8hI8jpJkuOfQbrVscs6qwPFFbKv2Muw++dBQ=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11680 (0x2da0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Aug 10 15:28:01 2025 GMT Not After : Aug 17 15:28:01 2025 GMT Subject: CN=6898ba81-e1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:98:6e:0e:f2:f8:6a:4b:d6:65:5b:29:79: 42:9d:1e:f2:ba:37:d1:ae:f5:a5:9d:ad:6c:fb:82: 72:fc:d8:67:0f:26:aa:52:c6:9b:32:46:31:7d:b0: eb:21:80:40:f9:28:de:25:8c:6b:03:cd:3b:53:17: d5:44:a9:f0:38:83:17:00:15:41:3c:89:5e:51:0a: e8:29:7f:d6:60:bf:26:43:05:2c:ed:d4:78:da:72: 84:85:d6:06:00:57:c5:89:6a:ce:67:eb:cb:c4:cb: cd:b1:4a:2a:22:18:01:23:f7:83:7d:92:c0:ad:9b: 9f:eb:e7:c3:d8:57:f2:67:94:3b:c9:17:c8:fe:5c: 5b:63:7a:1f:90:7b:bf:5d:df:c2:d5:36:d0:15:ae: c7:97:2e:cb:6b:10:db:e4:12:ac:bf:de:0d:89:08: c6:aa:23:d3:60:a5:fc:04:64:5e:f2:4c:a0:55:57: db:ed:6c:d8:4d:0c:f0:22:00:a6:85:9b:51:ac:e4: d3:76:be:f4:27:e3:13:b0:59:db:7c:bf:f2:6a:2a: 28:6a:d9:8b:c4:14:a4:1a:16:6f:88:0a:62:30:2e: 9a:15:c2:5e:f7:2b:a6:be:76:27:fc:c7:69:9c:ff: 7d:22:55:ab:bb:6a:ff:fc:9e:99:ba:e6:4a:85:eb: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C6:3D:88:37:E1:5D:CB:70:E6:9C:E5:09:5B:76:C6:BB:D7:E8:59 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:5c:a6:d5:2d:90:b2:d3:a3:e3:35:1c:77:7f:dc:e0:67:bf: 19:2f:ba:c1:a1:99:d9:bc:80:16:b0:6c:0b:4e:8d:82:9c:33: f4:6f:1e:1f:ec:cd:a6:fe:33:bb:0d:6f:ec:00:1c:5d:83:62: 9e:50:7e:a8:28:85:31:51:3f:d7:6d:d0:32:f4:e8:ea:75:1b: 1e:88:2d:1a:0a:f3:ce:57:80:eb:33:e8:ad:ba:e3:ae:fc:b7: 3b:4e:0e:57:33:67:ca:7c:7a:58:5d:7c:0e:a5:91:84:2c:30: 0c:3f:36:9f:87:9e:a4:d5:a9:d5:04:20:4e:f4:d9:21:8c:54: 40:74:52:d7:49:b1:21:ea:15:17:c2:46:10:69:52:d6:04:f8: e3:9b:9a:6c:50:b6:43:6c:f7:c1:5c:ce:35:3f:c8:a8:1b:91: c5:50:0f:ae:6e:21:37:42:d7:84:01:fc:72:9e:d4:11:03:78: 2a:d3:68:17:2f:96:8a:bd:fd:0d:34:63:c5:be:41:b6:2d:51: 56:db:cd:c4:ee:57:e7:32:20:6b:9d:ab:17:34:92:6a:77:f9: f2:12:c3:a2:e5:8c:ab:c7:d3:7c:40:16:94:fa:4f:d0:19:37: ca:1a:3b:1e:c0:6c:e2:ea:2c:ed:1f:0d:9c:53:d6:70:4a:c7: 4b:ff:70:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwODEwMTUyODAxWhcNMjUwODE3MTUyODAxWjAYMRYwFAYD VQQDEw02ODk4YmE4MS1lMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4iYbg7y+GpL1mVbKXlCnR7yujfRrvWlna1s+4Jy/NhnDyaqUsabMkYxfbDr IYBA+SjeJYxrA807UxfVRKnwOIMXABVBPIleUQroKX/WYL8mQwUs7dR42nKEhdYG AFfFiWrOZ+vLxMvNsUoqIhgBI/eDfZLArZuf6+fD2FfyZ5Q7yRfI/lxbY3ofkHu/ Xd/C1TbQFa7Hly7LaxDb5BKsv94NiQjGqiPTYKX8BGRe8kygVVfb7WzYTQzwIgCm hZtRrOTTdr70J+MTsFnbfL/yaiooatmLxBSkGhZviApiMC6aFcJe9yumvnYn/Mdp nP99IlWru2r//J6ZuuZKhetl8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXGPYg3 4V3LcOac5Qlbdsa71+hZMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFXKbVLZCy06PjNRx3f9zgZ78ZL7rBoZnZvIAWsGwLTo2CnDP0bx4f 7M2m/jO7DW/sABxdg2KeUH6oKIUxUT/XbdAy9OjqdRseiC0aCvPOV4DrM+ituuOu /Lc7Tg5XM2fKfHpYXXwOpZGELDAMPzafh56k1anVBCBO9NkhjFRAdFLXSbEh6hUX wkYQaVLWBPjjm5psULZDbPfBXM41P8ioG5HFUA+ubiE3QteEAfxyntQRA3gq02gX L5aKvf0NNGPFvkG2LVFW283E7lfnMiBrnasXNJJqd/nyEsOi5Yyrx9N8QBaU+k/Q GTfKGjsewGzi6iztHw2cU9ZwSsdL/3A4 -----END CERTIFICATE-----Generated at Mon Aug 11 08:04:17 2025 by rpki-client