$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: 5HkFajehJcNp8k4GxNDH+S/69ocZLsm8rcdBhEPD2Lc= Subject key identifier: C7:45:67:0D:51:0F:D1:AB:0E:29:DD:C1:F8:87:A3:EC:A7:5D:70:4A Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 0660 Signing time: Fri 18 Jul 2025 22:51:13 +0000 Manifest this update: Fri 18 Jul 2025 22:51:13 +0000 Manifest next update: Fri 25 Jul 2025 22:51:13 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: h1u+8kuw1NhOpu6I3P7qVq2pjV4dP7MuEWf3q5/wOqs=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Jul 18 22:51:13 2025 GMT Not After : Jul 25 22:51:13 2025 GMT Subject: CN=687acfe1-35d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:0e:47:f7:1b:8f:a4:22:d6:65:55:6e:6a: eb:36:c6:48:9a:b9:2b:14:7a:3f:9c:8c:2d:6c:a9: 84:5c:63:cc:75:2d:2e:94:72:a0:fa:d2:83:c0:f5: 1b:d9:32:f6:c6:32:6d:13:0e:dd:75:b5:19:29:01: 06:66:57:df:76:2a:7a:03:a1:62:8f:f6:91:f6:64: 4c:58:8f:bc:a3:ac:02:9c:51:02:e2:68:22:06:bd: 66:cc:28:da:94:53:22:eb:96:9f:9a:ab:e2:85:35: a4:14:d7:3e:57:19:7f:43:63:3f:a6:5a:39:23:97: c4:84:ca:d9:f3:c4:5e:ec:a7:41:b0:42:49:1c:8d: 87:d6:8b:24:8d:03:cd:16:1f:b1:93:f5:47:44:ec: ca:46:3d:2c:a1:96:c3:0e:04:c8:0f:bf:f2:99:34: bc:8e:96:32:a6:ec:0d:6f:d6:a3:5e:c2:64:fe:40: c8:46:47:99:e9:ec:dc:bc:5f:92:ab:f6:e9:fe:e5: 0f:cc:8f:37:c3:c1:1c:88:b5:16:ad:9e:61:83:61: 12:7c:e3:00:ea:57:5a:41:dd:69:42:5c:e0:ce:72: ad:59:c6:68:bf:b5:a0:a9:75:36:2b:ae:cb:71:0e: 39:05:f1:44:76:5c:f5:16:73:50:57:0a:f6:f3:cc: 81:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:45:67:0D:51:0F:D1:AB:0E:29:DD:C1:F8:87:A3:EC:A7:5D:70:4A X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:50:a0:23:cb:27:9e:3a:3d:bd:3d:40:78:2b:36:c8:c5:95: 1f:b3:6e:73:68:f9:b0:30:d3:55:89:b1:1b:26:3b:9c:00:be: 4b:ee:de:78:58:d3:46:ed:f4:8a:10:80:d3:7b:30:37:c9:96: 28:97:c0:e2:e8:ea:91:7f:48:18:da:cb:5d:b6:8f:d6:32:83: a7:27:c9:b1:1b:39:90:0c:4d:ea:6b:45:26:9b:31:cc:b5:37: 60:19:48:08:5e:e2:3f:c1:ee:ee:42:75:fd:0a:64:3d:13:f2: 3d:cc:f5:12:ed:62:a1:80:13:6c:f9:24:43:97:01:78:55:14: f6:6e:60:eb:95:55:79:1c:60:18:44:3d:aa:e5:3c:37:6a:4b: e2:68:e7:40:b9:c4:3c:78:8b:5e:87:69:a1:50:84:bc:dd:19: 2f:92:57:4e:43:46:82:c6:52:52:87:22:82:4c:c7:f9:31:cb: 0a:f0:58:71:32:57:6e:71:f4:18:3a:43:ea:b0:ff:a3:03:fb: 46:46:2d:b1:98:07:0c:18:53:6c:a1:15:60:4c:a0:34:95:41: 72:17:d9:72:43:98:2e:98:f3:d7:55:34:73:73:4b:ff:1e:8e: 2c:3d:7c:13:2f:1f:02:95:75:42:04:54:55:a1:a5:bb:5b:3c: dc:9e:f9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjUwNzE4MjI1MTEzWhcNMjUwNzI1MjI1MTEzWjAYMRYwFAYD VQQDEw02ODdhY2ZlMS0zNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNoOR/cbj6Qi1mVVbmrrNsZImrkrFHo/nIwtbKmEXGPMdS0ulHKg+tKDwPUb 2TL2xjJtEw7ddbUZKQEGZlffdip6A6Fij/aR9mRMWI+8o6wCnFEC4mgiBr1mzCja lFMi65afmqvihTWkFNc+Vxl/Q2M/plo5I5fEhMrZ88Re7KdBsEJJHI2H1oskjQPN Fh+xk/VHROzKRj0soZbDDgTID7/ymTS8jpYypuwNb9ajXsJk/kDIRkeZ6ezcvF+S q/bp/uUPzI83w8EciLUWrZ5hg2ESfOMA6ldaQd1pQlzgznKtWcZov7WgqXU2K67L cQ45BfFEdlz1FnNQVwr288yByQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdFZw1R D9GrDindwfiHo+ynXXBKMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnUKAjyyeeOj29PUB4KzbIxZUfs25zaPmwMNNVibEbJjucAL5L7t54 WNNG7fSKEIDTezA3yZYol8Di6OqRf0gY2stdto/WMoOnJ8mxGzmQDE3qa0UmmzHM tTdgGUgIXuI/we7uQnX9CmQ9E/I9zPUS7WKhgBNs+SRDlwF4VRT2bmDrlVV5HGAY RD2q5Tw3akviaOdAucQ8eIteh2mhUIS83RkvkldOQ0aCxlJShyKCTMf5McsK8Fhx MlducfQYOkPqsP+jA/tGRi2xmAcMGFNsoRVgTKA0lUFyF9lyQ5gumPPXVTRzc0v/ Ho4sPXwTLx8ClXVCBFRVoaW7Wzzcnvlt -----END CERTIFICATE-----Generated at Sun Jul 20 14:08:56 2025 by rpki-client