$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: 5bzxz5RdOhyj9H5NjMRRUrWQnqgSqpkDCRz29gposCI= Subject key identifier: B6:1F:32:1D:84:F4:80:7F:39:38:E1:4A:22:90:68:A2:C9:43:2A:81 Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 02A3 Signing time: Thu 07 Aug 2025 02:09:14 +0000 Manifest this update: Thu 07 Aug 2025 02:09:14 +0000 Manifest next update: Thu 14 Aug 2025 02:09:14 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: 598pJrOQBRNdCZSlqywxYG6V7ri0WcAqQbGAGrz5w0g=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: nnR9EPSyG4Kq21NgPkJ1y+q1NVNPyw5fBJX9VgzqqTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Aug 7 02:09:14 2025 GMT Not After : Aug 14 02:09:14 2025 GMT Subject: CN=68940aca-9b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:c4:16:6f:22:3c:dd:17:96:61:77:ff:6e: 60:f4:41:09:c6:b5:59:a7:35:eb:e4:6f:37:73:49: 55:b7:d6:36:05:e5:4e:e3:01:ab:ff:40:e1:ae:8a: 8f:1a:12:de:44:09:e8:4e:67:66:29:73:c5:81:2d: 34:28:d8:3e:1b:aa:29:f8:6b:6e:12:f9:2e:43:01: b3:e4:59:29:a5:87:5a:f9:55:83:7a:ce:67:33:16: 43:db:ec:62:ba:78:9f:39:d4:d2:95:ac:6a:26:41: 04:88:0a:7c:b0:5d:25:9c:67:88:d2:ab:d3:5d:48: 9e:ed:47:13:c7:40:45:19:63:cd:94:00:86:c7:63: cc:f4:08:e2:c2:7c:a2:a0:fc:c7:f0:c2:9a:41:6d: e7:3d:71:06:41:6e:a4:94:0f:c8:5d:20:f1:f5:18: 98:10:70:f0:7d:bd:fd:53:a9:f5:1c:f3:13:c0:fa: e6:44:71:91:3f:a4:f0:df:dd:38:fe:8b:3b:02:b9: bb:7e:4a:50:01:9e:95:52:cb:b0:95:e1:c9:c4:94: f9:ff:19:b0:1d:a6:7f:c8:03:99:19:c5:bd:c4:01: 62:a7:b8:52:66:c8:6f:ee:3b:33:37:60:d6:a5:7f: 17:42:44:72:4a:13:11:1e:46:21:85:ae:b8:51:14: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:32:1D:84:F4:80:7F:39:38:E1:4A:22:90:68:A2:C9:43:2A:81 X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d4:3a:13:7c:47:c9:dc:5c:f7:ba:7b:fd:08:f9:37:72:b1: bc:26:ad:10:bb:23:ad:c4:b1:00:29:88:ae:50:0c:aa:42:da: 39:00:5b:83:fa:d5:d0:99:f7:ab:47:af:40:8e:11:fd:f2:70: f5:df:fb:9d:47:c0:01:70:3d:95:2d:30:f5:94:e4:d4:e7:98: bb:71:14:ed:5f:a8:b7:08:d9:90:8b:82:9d:e9:18:42:23:1a: fe:6e:18:ff:fa:f8:e6:5e:fd:bf:27:52:9a:8b:61:b2:5f:a2: c1:29:cb:37:bf:cd:9a:f7:c1:e0:2e:27:4b:81:e6:f4:09:67: 42:4d:3f:aa:ad:1c:aa:58:ab:dd:11:60:f5:b4:a9:5b:b5:6f: de:4e:88:2e:40:aa:33:6a:0a:3d:bd:19:ce:89:c4:b3:8f:46: d9:24:d8:bc:9c:e7:d6:28:19:5a:2a:93:ff:de:be:de:57:b9: 0b:cd:cb:29:53:ab:32:af:89:82:fd:09:02:a9:50:49:82:f8: 64:aa:15:7b:5c:1c:43:7b:ed:e6:b7:69:fc:74:aa:e1:ba:6d: 6e:3f:02:86:9e:88:6a:9b:58:a1:bb:36:fe:c5:d2:1c:14:b5: c5:a6:4f:b0:d3:e1:1d:f0:f1:d9:66:2f:02:b9:45:ab:6f:93: 3c:37:81:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUwODA3MDIwOTE0WhcNMjUwODE0MDIwOTE0WjAYMRYwFAYD VQQDEw02ODk0MGFjYS05YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSHEFm8iPN0XlmF3/25g9EEJxrVZpzXr5G83c0lVt9Y2BeVO4wGr/0DhroqP GhLeRAnoTmdmKXPFgS00KNg+G6op+GtuEvkuQwGz5FkppYda+VWDes5nMxZD2+xi unifOdTSlaxqJkEEiAp8sF0lnGeI0qvTXUie7UcTx0BFGWPNlACGx2PM9Ajiwnyi oPzH8MKaQW3nPXEGQW6klA/IXSDx9RiYEHDwfb39U6n1HPMTwPrmRHGRP6Tw3904 /os7Arm7fkpQAZ6VUsuwleHJxJT5/xmwHaZ/yAOZGcW9xAFip7hSZshv7jszN2DW pX8XQkRyShMRHkYhha64URRujQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYfMh2E 9IB/OTjhSiKQaKLJQyqBMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB1DoTfEfJ3Fz3unv9CPk3crG8Jq0QuyOtxLEAKYiuUAyqQto5AFuD +tXQmferR69AjhH98nD13/udR8ABcD2VLTD1lOTU55i7cRTtX6i3CNmQi4Kd6RhC Ixr+bhj/+vjmXv2/J1Kai2GyX6LBKcs3v82a98HgLidLgeb0CWdCTT+qrRyqWKvd EWD1tKlbtW/eToguQKozago9vRnOicSzj0bZJNi8nOfWKBlaKpP/3r7eV7kLzcsp U6syr4mC/QkCqVBJgvhkqhV7XBxDe+3mt2n8dKrhum1uPwKGnohqm1ihuzb+xdIc FLXFpk+w0+Ed8PHZZi8CuUWrb5M8N4G0 -----END CERTIFICATE-----Generated at Sat Aug 9 01:21:15 2025 by rpki-client