$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: SamldJK5ufQginSVG5aEJDfQw/oS7BA8xAE4RMcVlG0= Subject key identifier: BA:22:67:1F:0F:C5:A8:36:C6:D6:10:4A:6A:3D:0F:0A:41:65:34:82 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0A15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0A0D Signing time: Fri 08 Aug 2025 20:08:55 +0000 Manifest this update: Fri 08 Aug 2025 20:08:54 +0000 Manifest next update: Fri 15 Aug 2025 20:08:54 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: BVkMOULKPg5pOpjEkP9Q33bb+E7C2O9fzYtP8BXkPn8=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Aug 8 20:08:54 2025 GMT Not After : Aug 15 20:08:54 2025 GMT Subject: CN=68965957-b3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:f3:3e:7d:51:f0:c8:91:c3:96:e5:78:54: 9c:49:2f:65:c2:51:d3:72:b4:0e:cd:9c:88:02:40: 00:d5:60:91:cd:8c:ce:43:7d:b7:68:ae:2d:1b:38: 87:65:62:46:ff:b8:56:02:33:c2:2d:92:1f:62:6e: fd:9f:44:f7:47:29:d8:fd:ad:e4:8e:13:e8:b4:5c: 5e:9c:e2:5d:18:56:53:bd:79:ac:c3:48:36:c5:1b: bd:71:c7:57:42:5b:fb:2b:bc:f0:40:d9:32:14:0e: a5:f8:ca:61:d2:72:fa:d8:54:d8:fe:4f:3d:71:07: 82:87:28:10:ab:cc:7b:79:21:64:a9:6f:19:98:1c: 83:f9:f0:26:51:e8:44:b3:e4:aa:f9:a8:1b:49:9a: b2:cb:51:f8:0b:3e:30:71:78:7c:f2:d0:64:a8:a1: d0:99:5c:b9:4b:c0:80:ea:77:59:12:c2:b2:ab:00: 74:05:d7:f0:a5:6c:b9:85:22:f0:21:af:04:74:53: f8:10:c9:04:48:b0:35:6e:ac:5c:ef:03:81:64:be: ed:f6:90:67:56:59:af:17:03:ce:ad:dc:c7:24:74: 18:cf:6d:5b:8f:5d:60:60:96:82:21:22:42:28:37: 80:f9:80:e6:11:ed:ec:80:0b:79:2e:ea:68:ff:bf: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:22:67:1F:0F:C5:A8:36:C6:D6:10:4A:6A:3D:0F:0A:41:65:34:82 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f4:57:84:6f:a2:81:80:bf:87:33:22:91:3c:bc:1d:d1:1b: 45:fd:11:54:3f:c7:d5:77:bb:dc:6c:04:72:fb:f1:60:e8:6c: 7c:46:6b:64:1d:09:89:22:1b:80:f6:a7:2e:7d:5f:fa:3a:a9: f9:d7:a1:d2:87:e5:5b:6e:9e:84:73:3b:58:c7:a0:d1:1c:6f: c8:28:e6:06:01:42:a5:5b:ed:ac:33:0f:99:c5:54:81:ce:ab: db:c3:1d:04:d3:3e:ff:71:54:28:90:e7:bb:b8:5a:ff:2a:9f: 8a:4b:9c:55:f9:15:19:c0:d0:86:9f:51:6e:ed:65:fd:d6:72: cd:52:07:66:30:0b:2e:1f:f7:d7:18:33:56:78:68:e2:eb:d2: 77:7f:f5:9e:6b:c1:5e:c2:e0:13:b5:58:46:1d:67:29:a2:41: ad:2c:6a:f6:de:48:00:aa:88:39:c0:d2:d2:0c:3c:f8:51:39: 73:cb:ad:76:ab:f9:41:2c:5b:88:c9:5f:00:1c:7d:fc:75:99: d9:ad:bc:bb:25:fd:90:04:10:89:b5:39:4c:7c:1a:26:ae:3c: 6f:7a:90:c6:bc:88:7e:e4:cd:24:2c:dd:32:00:be:34:7c:26: 1f:c6:2c:cd:2d:2b:97:b1:e6:d5:ed:9e:7b:28:cf:e9:00:d8: 42:9a:84:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUwODA4MjAwODU0WhcNMjUwODE1MjAwODU0WjAYMRYwFAYD VQQDEw02ODk2NTk1Ny1iM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/jzPn1R8MiRw5bleFScSS9lwlHTcrQOzZyIAkAA1WCRzYzOQ323aK4tGziH ZWJG/7hWAjPCLZIfYm79n0T3RynY/a3kjhPotFxenOJdGFZTvXmsw0g2xRu9ccdX Qlv7K7zwQNkyFA6l+Mph0nL62FTY/k89cQeChygQq8x7eSFkqW8ZmByD+fAmUehE s+Sq+agbSZqyy1H4Cz4wcXh88tBkqKHQmVy5S8CA6ndZEsKyqwB0BdfwpWy5hSLw Ia8EdFP4EMkESLA1bqxc7wOBZL7t9pBnVlmvFwPOrdzHJHQYz21bj11gYJaCISJC KDeA+YDmEe3sgAt5Lupo/79uyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoiZx8P xag2xtYQSmo9DwpBZTSCMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV9FeEb6KBgL+HMyKRPLwd0RtF/RFUP8fVd7vcbARy+/Fg6Gx8Rmtk HQmJIhuA9qcufV/6Oqn516HSh+Vbbp6EcztYx6DRHG/IKOYGAUKlW+2sMw+ZxVSB zqvbwx0E0z7/cVQokOe7uFr/Kp+KS5xV+RUZwNCGn1Fu7WX91nLNUgdmMAsuH/fX GDNWeGji69J3f/Wea8FewuATtVhGHWcpokGtLGr23kgAqog5wNLSDDz4UTlzy612 q/lBLFuIyV8AHH38dZnZrby7Jf2QBBCJtTlMfBomrjxvepDGvIh+5M0kLN0yAL40 fCYfxizNLSuXsebV7Z57KM/pANhCmoRw -----END CERTIFICATE-----Generated at Sat Aug 9 02:54:27 2025 by rpki-client