$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: CFtKWeFDQwn49N+wZO9xUcZzpRol95HFYYCpb+9Pjfg= Subject key identifier: 1D:43:D9:F0:6E:7F:66:84:E3:9B:24:29:54:81:21:A5:D5:1C:22:A9 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D2F Signing time: Sun 10 Aug 2025 16:06:53 +0000 Manifest this update: Sun 10 Aug 2025 16:06:52 +0000 Manifest next update: Sun 17 Aug 2025 16:06:52 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: MLo49z3eP/L7p314U8fwb2DBTPPi5ADfYccFlaZS17k=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7484 (0x1d3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Aug 10 16:06:52 2025 GMT Not After : Aug 17 16:06:52 2025 GMT Subject: CN=6898c39c-83e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:46:fa:af:8f:07:77:01:19:c6:bc:f1:72: 2e:d1:27:b8:0c:8e:ee:cf:de:a2:6e:16:da:ff:1e: ae:76:38:77:a9:ec:24:eb:7e:bc:56:8e:a6:ee:66: 65:bd:d2:51:7a:d2:13:5e:79:a2:62:5c:e9:fe:1e: 10:c7:c9:3c:01:a9:dd:a4:56:e2:6b:2d:a5:05:16: 11:dd:ee:79:7d:15:a6:67:84:53:00:42:19:67:ea: c9:c7:74:ff:5e:d0:c7:27:8b:11:65:41:9d:eb:19: 33:12:61:7a:b6:81:6c:54:45:8b:81:f9:a7:db:0c: 8d:e3:35:b6:73:4a:1f:0e:51:56:92:05:82:30:23: b0:cb:d0:d0:4f:8c:88:7b:71:96:e6:a6:53:3c:02: 34:c1:57:b4:ed:c8:ce:6d:04:c0:da:ee:ae:5d:de: ff:35:df:aa:a2:a0:5d:85:4a:d9:c5:21:11:ae:e7: 44:02:39:b5:ed:e7:aa:9c:50:19:e2:28:4e:8f:9d: f8:1d:9c:0a:ae:9a:0e:58:a0:de:40:a6:e6:1c:d3: c2:bd:bf:38:e4:f8:be:81:76:15:86:4f:b8:b7:c6: a6:c2:ee:22:9e:bf:86:3b:d8:a0:36:d0:ec:4d:93: 60:c8:ef:c6:72:50:05:28:5f:4b:66:45:b1:20:1c: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:D9:F0:6E:7F:66:84:E3:9B:24:29:54:81:21:A5:D5:1C:22:A9 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:4e:41:d6:89:09:d9:9c:bd:82:1d:60:58:89:a3:99:b0:81: f3:65:f0:7b:15:03:f7:b1:81:42:62:cd:35:c6:80:d5:19:d4: 0a:ca:a2:cd:4c:8e:54:59:58:ab:40:ff:b0:2d:92:7b:22:7b: 8b:e4:a8:67:9a:78:ca:53:84:9b:f0:77:0b:bb:f2:a8:1d:c5: d3:8e:96:4e:dc:fb:80:a7:4c:64:19:a0:e4:2d:e2:4e:b6:13: a5:06:e1:7a:3d:9f:9f:e6:7f:fa:39:4c:72:9c:80:71:2e:9d: e9:8f:6e:d8:ea:55:09:99:2b:1a:0f:78:06:0e:29:a3:73:10: d7:ba:e5:30:f0:71:e2:35:f6:fb:44:f9:b5:e1:de:76:b9:ea: ff:a6:57:f0:47:c2:b4:f9:fe:84:24:ff:d1:ae:79:e0:87:59: 03:39:7d:b2:70:ec:22:ca:44:89:f3:af:49:e6:c9:ed:60:7b: 12:70:b5:8b:28:a0:f5:3b:55:15:43:c9:df:ab:9c:fb:87:5f: 20:ba:74:5e:10:e8:aa:60:25:4b:b8:ae:7d:13:74:1c:78:00: 11:5f:9b:b7:8d:3c:83:bb:9c:b6:3a:bb:d3:01:12:97:7a:97: 7e:05:3e:07:f4:58:f5:86:56:b3:e1:cd:43:57:a7:af:04:b3: 46:4c:95:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwODEwMTYwNjUyWhcNMjUwODE3MTYwNjUyWjAYMRYwFAYD VQQDEw02ODk4YzM5Yy04M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RZG+q+PB3cBGca88XIu0Se4DI7uz96ibhba/x6udjh3qewk6368Vo6m7mZl vdJRetITXnmiYlzp/h4Qx8k8AandpFbiay2lBRYR3e55fRWmZ4RTAEIZZ+rJx3T/ XtDHJ4sRZUGd6xkzEmF6toFsVEWLgfmn2wyN4zW2c0ofDlFWkgWCMCOwy9DQT4yI e3GW5qZTPAI0wVe07cjObQTA2u6uXd7/Nd+qoqBdhUrZxSERrudEAjm17eeqnFAZ 4ihOj534HZwKrpoOWKDeQKbmHNPCvb845Pi+gXYVhk+4t8amwu4inr+GO9igNtDs TZNgyO/GclAFKF9LZkWxIByH6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1D2fBu f2aE45skKVSBIaXVHCKpMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAETkHWiQnZnL2CHWBYiaOZsIHzZfB7FQP3sYFCYs01xoDVGdQKyqLN TI5UWVirQP+wLZJ7InuL5KhnmnjKU4Sb8HcLu/KoHcXTjpZO3PuAp0xkGaDkLeJO thOlBuF6PZ+f5n/6OUxynIBxLp3pj27Y6lUJmSsaD3gGDimjcxDXuuUw8HHiNfb7 RPm14d52uer/plfwR8K0+f6EJP/Rrnngh1kDOX2ycOwiykSJ869J5sntYHsScLWL KKD1O1UVQ8nfq5z7h18gunReEOiqYCVLuK59E3QceAARX5u3jTyDu5y2OrvTARKX epd+BT4H9Fj1hlaz4c1DV6evBLNGTJU7 -----END CERTIFICATE-----Generated at Mon Aug 11 04:38:27 2025 by rpki-client