$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: R1BMzBDzpX+1oVUXJQcs18S93/blLaVCYkwV5t5E/XM= Subject key identifier: 43:FC:22:27:59:A9:F6:E5:50:5E:C2:E6:3F:ED:9D:4B:3E:16:C3:F9 Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 0205 Signing time: Tue 05 Aug 2025 02:44:23 +0000 Manifest this update: Tue 05 Aug 2025 02:44:23 +0000 Manifest next update: Tue 12 Aug 2025 02:44:23 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: 35WCwANAXZq2jixVIlFol6ekUFVCIyBCAuGvheR6jmY=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: X2hAsppM/jRjKRsLmyjCzm5Ax50DSNDAipyDKhugtZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Aug 5 02:44:23 2025 GMT Not After : Aug 12 02:44:23 2025 GMT Subject: CN=68917007-93b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:3c:b3:56:e6:c5:0c:b3:b6:df:af:5c:d2: e9:99:c4:5e:ec:87:21:93:5e:e0:31:54:b5:06:37: 7b:8f:86:be:ce:e7:fb:5f:e1:10:ba:76:4c:f3:65: 24:db:7c:f1:15:42:f7:f2:15:fc:04:82:bb:96:57: 9c:6d:1f:02:b9:40:0f:94:72:b3:c4:6e:8b:18:a8: 4d:72:70:bf:c4:fd:be:3a:8e:d1:a3:3b:c2:65:82: c2:a7:e6:9f:7a:1b:85:2f:19:68:ba:92:c9:5c:ee: 34:c1:bf:20:23:b2:4d:33:5f:e3:56:90:62:19:27: 1e:17:aa:71:fe:a2:1c:a6:06:ff:14:70:81:3b:9a: 9a:09:e6:34:78:81:53:0c:13:bf:53:a6:33:4e:60: 17:72:be:50:56:d4:6d:11:4b:50:4b:1f:83:fc:a2: 06:23:ba:7e:5c:39:76:40:82:6d:e1:4e:09:96:75: dc:d5:fe:5e:1e:48:2f:a5:db:93:30:c7:41:76:7f: b9:dc:b4:ae:ba:16:21:b8:12:0b:ad:6e:92:7c:86: a9:eb:5a:7d:f9:a7:d4:0a:dc:f0:9b:ec:9f:4b:60: ff:6c:af:5b:91:49:f0:df:e4:a0:4d:4e:dc:5e:6e: 6a:5c:6b:7e:ad:82:12:33:af:77:a1:e8:78:f8:83: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FC:22:27:59:A9:F6:E5:50:5E:C2:E6:3F:ED:9D:4B:3E:16:C3:F9 X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d3:cf:a4:d6:76:a8:62:4c:5b:a8:7f:04:8e:1e:ac:d3:f9: 79:e0:ea:a4:2d:4b:9f:f2:f8:14:a9:fe:a5:67:20:8c:5f:96: 08:a3:9a:e1:43:c2:a3:c2:c8:0a:62:74:13:86:d3:27:3f:47: f3:c4:30:6b:92:f7:7c:bf:0c:1b:ec:8a:c4:bb:b7:54:f2:bb: 13:34:10:e1:09:b3:fc:00:fc:29:c6:73:b4:29:e6:28:de:f5: 70:2a:ba:3b:79:ac:46:bc:3d:cb:d2:c2:65:21:69:f5:85:71: de:8c:c2:a8:02:0f:e0:36:3d:60:d4:52:6a:1c:36:f6:99:a4: 9b:1c:0c:1a:e3:ca:b5:51:c4:7d:43:cc:c0:67:1a:35:70:81: 01:47:ca:b4:5b:f9:02:99:2b:48:33:3a:64:ce:6a:76:14:ec: 78:92:f4:97:14:bf:16:29:db:0a:33:7c:68:9f:4c:e8:56:08: 36:4c:df:67:be:e9:89:6f:c7:d9:c9:21:e7:3e:40:a0:7a:95: aa:9e:38:c1:0e:15:bd:af:40:5d:73:46:f2:02:c2:e3:b0:af: a3:12:9a:8b:c6:02:49:a5:c9:ad:e0:de:a6:90:6d:5a:27:db: 46:0b:15:62:e6:29:03:32:8f:51:96:b0:ef:17:f3:10:80:b8: d1:2e:9c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjUwODA1MDI0NDIzWhcNMjUwODEyMDI0NDIzWjAYMRYwFAYD VQQDEw02ODkxNzAwNy05M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8w8s1bmxQyztt+vXNLpmcRe7Ichk17gMVS1Bjd7j4a+zuf7X+EQunZM82Uk 23zxFUL38hX8BIK7llecbR8CuUAPlHKzxG6LGKhNcnC/xP2+Oo7RozvCZYLCp+af ehuFLxloupLJXO40wb8gI7JNM1/jVpBiGSceF6px/qIcpgb/FHCBO5qaCeY0eIFT DBO/U6YzTmAXcr5QVtRtEUtQSx+D/KIGI7p+XDl2QIJt4U4JlnXc1f5eHkgvpduT MMdBdn+53LSuuhYhuBILrW6SfIap61p9+afUCtzwm+yfS2D/bK9bkUnw3+SgTU7c Xm5qXGt+rYISM693oeh4+INvMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP8IidZ qfblUF7C5j/tnUs+FsP5MB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk08+k1naoYkxbqH8Ejh6s0/l54OqkLUuf8vgUqf6lZyCMX5YIo5rh Q8KjwsgKYnQThtMnP0fzxDBrkvd8vwwb7IrEu7dU8rsTNBDhCbP8APwpxnO0KeYo 3vVwKro7eaxGvD3L0sJlIWn1hXHejMKoAg/gNj1g1FJqHDb2maSbHAwa48q1UcR9 Q8zAZxo1cIEBR8q0W/kCmStIMzpkzmp2FOx4kvSXFL8WKdsKM3xon0zoVgg2TN9n vumJb8fZySHnPkCgepWqnjjBDhW9r0Bdc0byAsLjsK+jEpqLxgJJpcmt4N6mkG1a J9tGCxVi5ikDMo9RlrDvF/MQgLjRLpyG -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:30 2025 by rpki-client