$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json) Hash identifier: lcp3Q/mR+QcXPgOoyc1udh3lgRiIB/K1IijK/ve5nCc= Subject key identifier: 59:CD:36:96:49:A4:17:F4:33:DB:1A:BE:28:1B:AE:73:5D:C9:D5:69 Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft Manifest number: 0165 Signing time: Sat 09 Aug 2025 04:17:53 +0000 Manifest this update: Sat 09 Aug 2025 04:17:52 +0000 Manifest next update: Sat 16 Aug 2025 04:17:52 +0000 Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: Sl/tbeQm8uah0Bs2wfT9dQHVf+ekHM17Ksh75TCDk6k=) 2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: F6++iy8cEbKQfe1Q/Aey0VLsmUU4uYp21N+gDBYbdrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAD4, serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Validity Not Before: Aug 9 04:17:52 2025 GMT Not After : Aug 16 04:17:52 2025 GMT Subject: CN=6896cbf0-29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:ce:0e:3d:31:3f:12:ca:ef:0d:9c:69:d2: 18:fd:e5:e9:44:1c:55:a4:4e:42:17:47:80:02:c7: 6a:0d:6d:ef:84:8a:78:91:8b:85:47:d7:d6:6f:ca: 79:10:68:fc:3d:ad:2f:47:6a:84:6b:8b:75:34:98: c6:42:cb:e3:61:a6:42:4e:66:e2:c6:c0:8d:a4:e7: 6e:16:af:b3:d1:6c:08:8d:c2:12:74:e4:23:25:a5: ea:e7:5a:24:bb:ea:96:a7:e1:9e:4b:0e:25:87:3b: 8f:36:f3:ea:be:da:e6:b5:3c:9e:92:89:cb:e2:d1: 76:ce:e4:ab:08:85:13:9e:83:87:5a:e2:11:2f:a5: 26:bf:4b:e6:f3:0c:36:da:17:78:56:a1:68:16:28: 34:38:57:0b:f3:dc:0b:aa:e8:a6:a8:ff:82:fe:8f: 4f:78:5c:d6:e1:86:0e:e3:70:35:e0:d7:1a:a6:77: 75:2b:f8:35:a9:e9:2a:1a:d8:58:6d:87:9e:37:11: 33:90:68:0f:02:7e:81:8d:43:73:b5:b7:a1:52:91: c3:69:09:1d:93:f5:08:a0:00:a7:da:52:48:cb:28: a8:16:2e:5c:a8:7f:b7:36:22:5d:e6:10:39:a4:1b: 7c:4f:fd:c8:14:3a:07:41:22:4f:04:b9:75:2f:bc: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:36:96:49:A4:17:F4:33:DB:1A:BE:28:1B:AE:73:5D:C9:D5:69 X509v3 Authority Key Identifier: keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b5:86:3f:2e:5f:da:fd:aa:c6:cf:83:f6:be:aa:6f:71:ca: 61:da:31:fd:f3:2d:8a:7c:c9:c8:d8:f4:18:08:8a:00:e5:73: 19:5c:a4:d5:f7:19:a8:1e:39:d8:3f:d3:e5:d5:1b:81:29:38: d2:1f:53:12:41:72:32:90:6d:93:7c:c0:6d:0f:53:1e:4f:ca: e3:c0:c4:e1:6c:0f:82:62:96:fd:2a:4c:a9:b8:65:32:77:ab: 25:1c:a8:c7:bd:5f:a7:0b:a6:09:6c:cb:86:21:1a:00:db:b0: ba:69:41:99:e4:6e:32:b6:ed:e3:2b:f0:69:4d:46:fb:fe:3d: df:96:1d:07:e6:47:2e:aa:4b:63:c0:4e:a0:87:f5:64:64:66: 17:b7:b5:3a:16:7f:b2:35:8c:cb:7e:b9:66:9b:ce:21:ff:4d: 67:bc:97:fb:07:26:45:06:11:28:e0:9b:6f:e3:66:9a:08:97: ff:de:ea:3f:98:c2:2e:58:94:c9:f1:cd:db:03:3c:ea:8f:4b: ea:8a:1c:99:d1:aa:fe:ca:ae:f1:8f:a7:6e:92:9d:b8:ef:11: c2:70:63:0b:a9:1d:56:90:9f:25:82:91:4a:46:64:aa:e0:b3: f0:65:c3:ff:85:07:7a:5e:46:1a:52:8b:42:fc:8b:33:e4:1f: 16:1c:a3:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBRDQxMTAvBgNVBAUTKENGNDc2NjQyODA0RkNGRjlENzA5Mjg5NjM1ODM1NUQ1 QUMwMEVBNzMwHhcNMjUwODA5MDQxNzUyWhcNMjUwODE2MDQxNzUyWjAYMRYwFAYD VQQDEw02ODk2Y2JmMC0yOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSbODj0xPxLK7w2cadIY/eXpRBxVpE5CF0eAAsdqDW3vhIp4kYuFR9fWb8p5 EGj8Pa0vR2qEa4t1NJjGQsvjYaZCTmbixsCNpOduFq+z0WwIjcISdOQjJaXq51ok u+qWp+GeSw4lhzuPNvPqvtrmtTyekonL4tF2zuSrCIUTnoOHWuIRL6Umv0vm8ww2 2hd4VqFoFig0OFcL89wLquimqP+C/o9PeFzW4YYO43A14Ncapnd1K/g1qekqGthY bYeeNxEzkGgPAn6BjUNztbehUpHDaQkdk/UIoACn2lJIyyioFi5cqH+3NiJd5hA5 pBt8T/3IFDoHQSJPBLl1L7wO6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnNNpZJ pBf0M9savigbrnNdydVpMB8GA1UdIwQYMBaAFM9HZkKAT8/51wkoljWDVdWsAOpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFENC8wREQ4Rjc5RTUx QkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpfblhDU2lXTllOVjFhd0E2 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owZG1Rb0JQel9uWENTaVdOWU5WMWF3QTZuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFENC8wREQ4Rjc5RTUxQkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpf blhDU2lXTllOVjFhd0E2bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAtYY/Ll/a/arGz4P2vqpvccph2jH98y2KfMnI2PQYCIoA5XMZXKTV 9xmoHjnYP9Pl1RuBKTjSH1MSQXIykG2TfMBtD1MeT8rjwMThbA+CYpb9KkypuGUy d6slHKjHvV+nC6YJbMuGIRoA27C6aUGZ5G4ytu3jK/BpTUb7/j3flh0H5kcuqktj wE6gh/VkZGYXt7U6Fn+yNYzLfrlmm84h/01nvJf7ByZFBhEo4Jtv42aaCJf/3uo/ mMIuWJTJ8c3bAzzqj0vqihyZ0ar+yq7xj6dukp247xHCcGMLqR1WkJ8lgpFKRmSq 4LPwZcP/hQd6XkYaUotC/Isz5B8WHKNm -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:29 2025 by rpki-client