$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: fCkaP3/P29mUT0Ruv5hyV3si33yelbgZYoQx8Axxilo= Subject key identifier: 64:E6:C5:55:19:1D:F4:E8:4F:55:C8:D2:BA:6F:09:B4:4F:7E:12:43 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 09E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 09DD Signing time: Fri 08 Aug 2025 20:14:07 +0000 Manifest this update: Fri 08 Aug 2025 20:14:07 +0000 Manifest next update: Fri 15 Aug 2025 20:14:07 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: 5T+KafLXrMboQebic7bM7tOsthwxJpkds3ov5Y4cNLo=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Aug 8 20:14:07 2025 GMT Not After : Aug 15 20:14:07 2025 GMT Subject: CN=68965a8f-33fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:c7:56:2a:cf:a7:be:96:e6:5d:89:c2:88: 03:14:c4:33:f1:01:ba:66:15:ec:0a:64:17:9c:26: 66:03:b1:e8:f1:34:0d:e8:f8:d0:b0:ba:a7:b2:bc: 7f:9c:c7:a9:fa:4c:20:a7:8a:70:9c:a7:c1:9e:b9: 63:c6:63:16:5f:fe:be:34:48:59:f3:3f:ef:c2:4a: 44:2e:fe:b9:0d:e5:0a:b3:dc:a2:64:d9:18:a0:96: d4:76:32:4a:77:ee:ee:52:2d:c3:01:e6:60:69:1f: 8b:52:af:bf:21:8a:0f:61:16:6b:cc:62:29:b8:17: 0b:69:15:3f:0c:06:f6:ca:45:49:82:09:70:c1:0b: 5e:36:f6:d4:9a:0a:12:c5:f6:13:8f:47:4e:26:26: 9c:df:63:b0:0d:77:22:a2:a7:f4:1d:ce:b3:69:10: 59:ae:10:3d:d0:28:80:9e:80:ea:1d:d5:2a:e4:ae: 9f:84:de:e3:6b:f5:f5:24:99:db:41:cd:12:ff:27: 00:1d:1e:28:0b:f3:95:bd:85:8d:f4:1b:a5:9f:22: c2:3c:f8:b1:64:b4:d6:fc:ec:d7:7c:c7:28:45:07: 15:58:ff:d4:44:77:7b:c7:11:b8:cd:d9:a9:d8:c8: a6:fc:2d:d7:df:6b:d5:73:27:27:26:0f:5a:70:59: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E6:C5:55:19:1D:F4:E8:4F:55:C8:D2:BA:6F:09:B4:4F:7E:12:43 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:00:9f:38:26:c1:46:82:d6:e3:4d:83:c9:8b:dd:56:6f:64: f4:c2:92:b0:98:b0:fe:30:79:ba:0c:5b:7c:2a:ec:1c:0f:e8: e4:2d:91:40:27:5d:b0:4c:2c:ef:7e:f4:73:7a:b3:d6:02:c4: e7:ca:3d:20:34:91:f5:97:e6:13:d8:3c:e6:74:cd:c0:38:d4: 3e:4d:35:a9:8b:ca:c9:8f:04:76:e6:b6:09:25:a1:1b:6b:7e: 31:90:29:7a:f3:65:cd:df:7a:ad:0f:d1:b8:5f:9c:6c:34:e5: 9c:23:3b:50:f1:58:c2:25:45:bb:80:65:d5:e8:cf:41:6f:40: e3:e6:52:6d:ce:1e:d6:ea:ee:fb:aa:26:ef:d4:7d:17:ae:49: 36:82:98:c9:23:e4:00:9a:f7:f4:75:0d:dd:56:59:7b:a8:b4: bf:bf:7b:e4:e8:67:ec:77:e4:43:c1:0d:b5:dd:2e:31:a1:6f: 8c:42:f2:08:35:c2:39:f9:d3:5b:eb:2e:6c:35:4d:ce:a0:42: e3:c7:3d:5d:ff:26:f3:6c:4d:1d:8e:c3:cb:78:fa:0d:d3:88: e4:53:1b:d7:e4:c8:a9:0d:c7:00:cb:de:72:d6:86:18:58:f3: 08:99:85:8f:bb:1e:a4:d0:33:1a:a4:01:d7:8f:d8:17:c1:c5: a8:ff:08:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjUwODA4MjAxNDA3WhcNMjUwODE1MjAxNDA3WjAYMRYwFAYD VQQDEw02ODk2NWE4Zi0zM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYjHVirPp76W5l2JwogDFMQz8QG6ZhXsCmQXnCZmA7Ho8TQN6PjQsLqnsrx/ nMep+kwgp4pwnKfBnrljxmMWX/6+NEhZ8z/vwkpELv65DeUKs9yiZNkYoJbUdjJK d+7uUi3DAeZgaR+LUq+/IYoPYRZrzGIpuBcLaRU/DAb2ykVJgglwwQteNvbUmgoS xfYTj0dOJiac32OwDXcioqf0Hc6zaRBZrhA90CiAnoDqHdUq5K6fhN7ja/X1JJnb Qc0S/ycAHR4oC/OVvYWN9BulnyLCPPixZLTW/OzXfMcoRQcVWP/URHd7xxG4zdmp 2Mim/C3X32vVcycnJg9acFlU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTmxVUZ HfToT1XI0rpvCbRPfhJDMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFAJ84JsFGgtbjTYPJi91Wb2T0wpKwmLD+MHm6DFt8KuwcD+jkLZFA J12wTCzvfvRzerPWAsTnyj0gNJH1l+YT2DzmdM3AONQ+TTWpi8rJjwR25rYJJaEb a34xkCl682XN33qtD9G4X5xsNOWcIztQ8VjCJUW7gGXV6M9Bb0Dj5lJtzh7W6u77 qibv1H0Xrkk2gpjJI+QAmvf0dQ3dVll7qLS/v3vk6Gfsd+RDwQ213S4xoW+MQvII NcI5+dNb6y5sNU3OoELjxz1d/ybzbE0djsPLePoN04jkUxvX5MipDccAy95y1oYY WPMImYWPux6k0DMapAHXj9gXwcWo/wjP -----END CERTIFICATE-----Generated at Sat Aug 9 01:06:08 2025 by rpki-client