$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: 6dMAsDrC4SO99p3ohwY+0bYuR3AyaUnbwk/ybl8hAI4= Subject key identifier: AF:3E:3B:CE:86:B8:9C:14:AF:B8:7F:04:AF:39:65:33:1C:6A:BC:65 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 3D Signing time: Tue 05 Aug 2025 08:09:07 +0000 Manifest this update: Tue 05 Aug 2025 08:09:07 +0000 Manifest next update: Tue 12 Aug 2025 08:09:07 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: uT1dVWIjbCqNFgwBilDGPr66mgO5VpXmQSawNOSnCxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Aug 5 08:09:07 2025 GMT Not After : Aug 12 08:09:07 2025 GMT Subject: CN=6891bc23-6e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:35:60:21:56:42:47:87:c1:ee:3d:f4:ca: 19:bc:0a:b4:bd:1f:e1:a9:25:b8:6a:65:90:47:13: 15:4d:7d:e2:3f:98:2b:36:b8:f5:86:1a:78:88:10: bb:9c:bf:6b:27:2c:bd:ad:f6:ac:6d:1e:b6:a6:83: f9:f2:52:7e:b9:81:30:b9:51:b0:bc:ae:5d:7d:e3: ab:a0:ef:0f:b7:6f:3f:d0:35:9f:b3:cf:c3:91:ca: 9c:d2:6b:4b:aa:c1:13:17:87:d4:78:60:e0:b7:17: f5:93:4c:a3:53:5e:a5:c0:7f:25:36:2b:f7:bd:71: 16:c5:d3:9b:2f:d9:6d:da:a9:6f:cc:a1:09:4e:d6: 63:5d:49:c1:11:ca:cf:c6:10:57:53:ce:2f:57:0a: 99:50:78:2d:24:59:f0:db:07:ea:49:5d:e5:70:db: 45:6b:71:1e:d0:7f:8f:d2:aa:77:e3:84:27:7b:8f: c4:e7:d7:00:d5:e2:b2:11:da:26:96:48:c6:3e:54: b6:68:55:c1:74:73:6f:e7:af:8a:48:a9:37:c7:04: fa:7d:81:a6:c3:2d:99:b7:37:84:c0:20:1f:9d:eb: 10:74:ee:8c:4a:bb:ed:f2:e8:07:b5:87:cb:51:b5: d3:12:b3:41:4e:42:7c:9e:25:6c:fd:6f:4b:23:a4: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3E:3B:CE:86:B8:9C:14:AF:B8:7F:04:AF:39:65:33:1C:6A:BC:65 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3e:7d:ff:29:07:7e:b3:0a:a7:1d:36:79:1d:ac:5d:d8:f4: 92:43:fd:56:fb:ef:55:83:15:83:fc:30:9c:b9:20:05:ec:22: 08:91:b9:2d:63:7d:9a:37:1d:66:ad:5f:66:4c:3f:0b:4c:16: c6:e0:38:aa:26:9b:e8:36:63:e5:9c:8f:a1:11:0f:41:8c:cb: d8:cf:d8:cf:4c:dd:6f:f3:81:d6:b2:93:65:50:43:e4:dc:43: 8a:a9:8a:05:b7:52:45:49:16:36:bc:40:94:04:9b:46:e4:05: bb:86:ac:c8:82:67:59:03:da:5e:da:e1:8c:b5:2a:2f:10:40: e1:2a:92:c1:74:48:9d:e1:02:6a:6b:35:bc:7f:a0:25:26:60: 53:f1:43:fb:0a:63:45:4b:3a:e7:b1:59:c2:11:d2:69:77:99: 00:ae:00:1b:eb:2a:47:76:0b:8d:48:13:3e:f3:db:df:85:55: de:44:06:47:b6:a8:22:b8:4c:db:20:1a:38:0d:88:b6:46:00: 5e:e6:0b:d6:ca:98:99:c8:db:3d:ea:95:a1:a1:85:d1:03:47: 28:90:02:35:fa:42:3a:58:54:27:39:cb:85:ac:bb:6e:d5:e4: 52:19:90:af:d0:fa:1a:9e:98:9a:fc:97:fd:12:72:ff:70:47: 04:c6:35:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTA4MDUwODA5MDdaFw0yNTA4MTIwODA5MDdaMBgxFjAUBgNV BAMTDTY4OTFiYzIzLTZlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQConzVgIVZCR4fB7j30yhm8CrS9H+GpJbhqZZBHExVNfeI/mCs2uPWGGniIELuc v2snLL2t9qxtHramg/nyUn65gTC5UbC8rl1946ug7w+3bz/QNZ+zz8ORypzSa0uq wRMXh9R4YOC3F/WTTKNTXqXAfyU2K/e9cRbF05sv2W3aqW/MoQlO1mNdScERys/G EFdTzi9XCplQeC0kWfDbB+pJXeVw20VrcR7Qf4/SqnfjhCd7j8Tn1wDV4rIR2iaW SMY+VLZoVcF0c2/nr4pIqTfHBPp9gabDLZm3N4TAIB+d6xB07oxKu+3y6Ae1h8tR tdMSs0FOQnyeJWz9b0sjpPcDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrz47zoa4 nBSvuH8ErzllMxxqvGUwHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAg+ff8pB36zCqcdNnkdrF3Y9JJD/Vb771WDFYP8MJy5IAXsIgiRuS1j fZo3HWatX2ZMPwtMFsbgOKomm+g2Y+Wcj6ERD0GMy9jP2M9M3W/zgdayk2VQQ+Tc Q4qpigW3UkVJFja8QJQEm0bkBbuGrMiCZ1kD2l7a4Yy1Ki8QQOEqksF0SJ3hAmpr Nbx/oCUmYFPxQ/sKY0VLOuexWcIR0ml3mQCuABvrKkd2C41IEz7z29+FVd5EBke2 qCK4TNsgGjgNiLZGAF7mC9bKmJnI2z3qlaGhhdEDRyiQAjX6QjpYVCc5y4Wsu27V 5FIZkK/Q+hqemJr8l/0Scv9wRwTGNfM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:09 2025 by rpki-client