$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: g97+xCh5FDoG/xg3Y5uRviiOGYiAJBKf0BpIyxz6Bvk= Subject key identifier: 19:D7:97:90:27:27:41:33:1F:5B:D6:5F:C3:4A:7A:10:5D:DD:C4:2D Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: C1 Signing time: Sat 09 Aug 2025 06:15:27 +0000 Manifest this update: Sat 09 Aug 2025 06:15:27 +0000 Manifest next update: Sat 16 Aug 2025 06:15:27 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: 6CCLUbP3lO8GFnHK74dzXYMsJvtW7fLW5JYxQEGGh0w=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Aug 9 06:15:27 2025 GMT Not After : Aug 16 06:15:27 2025 GMT Subject: CN=6896e77f-0bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:71:12:fa:9c:d5:e2:2d:f6:a4:d7:0d:a7: 68:fe:1a:64:46:32:83:48:d6:6a:9c:fd:04:03:f9: fe:7a:c1:2c:8c:76:c0:f6:10:90:37:9d:97:30:ae: b5:53:04:6e:58:bd:99:e1:4a:37:6f:8e:9d:04:89: 0a:49:72:b2:62:1c:d3:28:66:0a:a4:ce:52:b9:2d: 95:cb:3f:d2:29:7c:5e:70:65:32:59:be:ef:83:0b: cb:28:1f:e3:89:12:c9:08:01:b6:46:ef:11:73:90: 7a:8a:9b:f6:7e:86:4e:eb:1c:2d:db:cb:15:f3:e1: ca:2d:4c:49:0c:af:1e:20:af:ee:be:b4:19:00:b5: 98:23:2f:3f:e4:60:7e:4f:49:93:8e:f4:55:64:ae: 64:ac:ed:95:10:8c:72:0f:8c:f0:dd:ed:9d:e2:c1: 5f:52:f5:26:dc:99:48:3c:f6:f5:68:50:41:b8:2b: db:bf:38:fc:cf:93:ef:4c:3c:8d:51:fd:27:1a:37: 65:5f:23:a9:fe:12:b5:b6:74:ab:5c:d0:0a:6c:46: 15:15:da:8c:59:6d:49:e8:04:f9:c1:00:0c:66:98: 8d:8d:7d:46:e5:c0:6c:99:b6:bb:f9:97:2c:a4:cd: 55:e2:ca:73:f0:3c:e1:26:23:39:66:24:4d:a5:c2: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D7:97:90:27:27:41:33:1F:5B:D6:5F:C3:4A:7A:10:5D:DD:C4:2D X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f6:b4:54:28:3b:a7:c1:f5:a2:f3:b9:4a:df:60:df:35:9d: 23:16:c6:f8:25:23:63:67:8b:4e:0a:ec:94:81:a4:78:23:6d: 15:d9:e4:c8:06:4a:f3:fb:9e:3c:ad:84:93:f7:51:e7:00:93: d3:4e:49:6f:70:fc:9a:a1:2b:68:28:ee:31:36:52:07:41:1a: 15:57:e5:ce:c7:77:58:83:14:55:b7:35:ad:6b:e1:2f:63:3b: 18:19:05:33:f2:78:cc:94:d0:14:54:48:78:61:5e:f8:d3:f2: 30:88:66:23:1f:21:10:f0:8b:3a:01:57:b8:f3:6b:b1:cc:49: 43:5c:d2:e4:67:e3:fb:f9:09:3a:9c:bc:0c:32:a4:96:ae:9b: 71:e7:51:ca:cb:36:a2:c6:3d:9f:d2:ac:3f:22:3e:3d:16:95: 4e:1c:67:34:c3:94:3c:4d:b3:9f:a4:24:c6:a5:58:47:41:07: 10:fe:27:3e:ab:ef:b1:d3:57:1e:58:57:b3:82:c7:02:27:e1: 2d:c5:52:54:a4:43:47:d2:2f:eb:55:df:1e:36:03:e0:d0:5f: 67:0c:21:b7:3d:85:b2:3e:3f:39:0f:a5:f0:c4:73:83:49:fb: d2:4d:44:0e:58:64:a7:34:c6:92:25:e1:e6:67:ce:74:2a:e3: 85:ae:7e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUwODA5MDYxNTI3WhcNMjUwODE2MDYxNTI3WjAYMRYwFAYD VQQDEw02ODk2ZTc3Zi0wYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwlxEvqc1eIt9qTXDado/hpkRjKDSNZqnP0EA/n+esEsjHbA9hCQN52XMK61 UwRuWL2Z4Uo3b46dBIkKSXKyYhzTKGYKpM5SuS2Vyz/SKXxecGUyWb7vgwvLKB/j iRLJCAG2Ru8Rc5B6ipv2foZO6xwt28sV8+HKLUxJDK8eIK/uvrQZALWYIy8/5GB+ T0mTjvRVZK5krO2VEIxyD4zw3e2d4sFfUvUm3JlIPPb1aFBBuCvbvzj8z5PvTDyN Uf0nGjdlXyOp/hK1tnSrXNAKbEYVFdqMWW1J6AT5wQAMZpiNjX1G5cBsmba7+Zcs pM1V4spz8DzhJiM5ZiRNpcKADwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnXl5An J0EzH1vWX8NKehBd3cQtMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU9rRUKDunwfWi87lK32DfNZ0jFsb4JSNjZ4tOCuyUgaR4I20V2eTI Bkrz+548rYST91HnAJPTTklvcPyaoStoKO4xNlIHQRoVV+XOx3dYgxRVtzWta+Ev YzsYGQUz8njMlNAUVEh4YV740/IwiGYjHyEQ8Is6AVe482uxzElDXNLkZ+P7+Qk6 nLwMMqSWrptx51HKyzaixj2f0qw/Ij49FpVOHGc0w5Q8TbOfpCTGpVhHQQcQ/ic+ q++x01ceWFezgscCJ+EtxVJUpENH0i/rVd8eNgPg0F9nDCG3PYWyPj85D6XwxHOD SfvSTUQOWGSnNMaSJeHmZ850KuOFrn7e -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:02 2025 by rpki-client