$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: WPrQbmxM9pOhoeNWvuYsW9PcqOclqHUizGkfbKOOAbk= Subject key identifier: 4D:1C:06:A5:67:0A:91:16:85:B5:07:CD:2B:74:C6:15:E5:19:94:7E Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 081E Signing time: Fri 08 Aug 2025 21:13:43 +0000 Manifest this update: Fri 08 Aug 2025 21:13:43 +0000 Manifest next update: Fri 15 Aug 2025 21:13:43 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: xXPKsUp/dYCMW67df4t9kYFYYuCJMK2FoSwtoLFDce0=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Aug 8 21:13:43 2025 GMT Not After : Aug 15 21:13:43 2025 GMT Subject: CN=68966887-6964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:e9:ca:a7:4d:91:17:6e:b5:a2:20:7c:1d: 77:0f:d8:d6:a7:b7:b7:4d:13:b7:65:67:d8:a8:20: 85:9e:3d:33:54:86:a9:f6:91:6e:d8:14:f2:84:11: 7e:9f:08:d2:03:93:0d:5d:7f:68:e8:89:b0:ed:3f: c5:6a:87:cc:ea:3a:df:88:2a:3a:47:4f:e8:a9:d6: 08:09:fc:3a:84:a5:4a:7e:86:22:b0:fe:76:46:7d: 14:c9:83:fa:3a:3d:75:f3:da:ab:ca:ec:e1:85:ea: 66:c5:36:24:3f:53:d5:fd:42:c1:27:24:1e:56:52: 8b:cb:c0:39:8f:77:98:ee:76:3d:81:c4:79:db:df: dc:2c:df:8d:65:a4:28:ee:85:a8:a3:87:ad:ba:95: e6:3c:0e:b8:8c:48:48:26:01:8f:96:a6:ea:07:f4: 22:bf:b4:ff:77:83:ba:45:a4:5d:96:8f:c5:ce:53: c4:87:3d:f3:18:52:f7:de:bc:e4:80:1e:84:2a:e1: a9:63:d2:b1:98:b8:00:72:91:6e:1e:af:05:98:b5: d5:3d:e0:07:a6:af:f8:e0:35:0d:93:c6:93:7d:1a: df:27:8b:ae:45:fb:96:82:6c:38:6e:9d:7f:9c:67: d8:10:78:34:de:78:45:b6:b1:22:80:7c:c7:6e:e6: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:06:A5:67:0A:91:16:85:B5:07:CD:2B:74:C6:15:E5:19:94:7E X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:85:54:c9:37:23:81:89:3a:7c:66:8e:6a:8b:97:25:2f:95: 9b:be:c8:d2:87:11:81:df:b4:13:8b:9f:05:d4:96:1f:d3:52: 0b:6e:82:1f:b0:1b:2b:7b:ae:c5:62:98:5c:f5:17:be:83:d7: 7e:ab:b6:73:05:c2:d6:71:39:e3:9e:31:e1:21:2f:ab:e0:a5: 60:d6:5a:da:ee:45:64:ae:15:d3:82:1c:e3:b0:b6:93:65:85: f2:f3:92:e0:84:55:7a:ee:90:dd:3b:0f:52:bd:56:75:89:61: 0d:10:47:b1:3a:73:ce:45:8f:3d:0d:91:5c:04:ef:44:09:ce: 3f:08:e2:a1:7e:b1:3d:27:0a:bd:52:06:ed:de:90:ea:2a:45: 27:08:2e:d7:8a:8f:41:8a:38:25:46:8e:37:7b:55:13:95:80: 50:03:c7:09:d8:e0:32:00:99:47:0b:75:d2:5e:f3:3f:28:56: 49:82:b6:82:09:48:77:13:79:90:c3:45:7b:8f:60:54:03:64: 56:b5:f5:72:6f:2d:f3:68:f0:93:46:7b:66:ab:4a:3b:8e:6f: 5b:fa:fa:cd:23:c1:1d:29:2e:34:3b:02:05:ea:46:8f:13:24: 8d:3f:63:5e:c0:b4:fc:08:65:b0:94:93:87:0d:11:b1:33:b0: 00:32:48:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUwODA4MjExMzQzWhcNMjUwODE1MjExMzQzWjAYMRYwFAYD VQQDEw02ODk2Njg4Ny02OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sbpyqdNkRdutaIgfB13D9jWp7e3TRO3ZWfYqCCFnj0zVIap9pFu2BTyhBF+ nwjSA5MNXX9o6Imw7T/FaofM6jrfiCo6R0/oqdYICfw6hKVKfoYisP52Rn0UyYP6 Oj1189qryuzhhepmxTYkP1PV/ULBJyQeVlKLy8A5j3eY7nY9gcR529/cLN+NZaQo 7oWoo4etupXmPA64jEhIJgGPlqbqB/Qiv7T/d4O6RaRdlo/FzlPEhz3zGFL33rzk gB6EKuGpY9KxmLgAcpFuHq8FmLXVPeAHpq/44DUNk8aTfRrfJ4uuRfuWgmw4bp1/ nGfYEHg03nhFtrEigHzHbubOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0cBqVn CpEWhbUHzSt0xhXlGZR+MB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAahVTJNyOBiTp8Zo5qi5clL5WbvsjShxGB37QTi58F1JYf01ILboIf sBsre67FYphc9Re+g9d+q7ZzBcLWcTnjnjHhIS+r4KVg1lra7kVkrhXTghzjsLaT ZYXy85LghFV67pDdOw9SvVZ1iWENEEexOnPORY89DZFcBO9ECc4/COKhfrE9Jwq9 Ugbt3pDqKkUnCC7Xio9BijglRo43e1UTlYBQA8cJ2OAyAJlHC3XSXvM/KFZJgraC CUh3E3mQw0V7j2BUA2RWtfVyby3zaPCTRntmq0o7jm9b+vrNI8EdKS40OwIF6kaP EySNP2NewLT8CGWwlJOHDRGxM7AAMkhU -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:29 2025 by rpki-client