$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: ib4TSwZ2KYNdMJu32WsE9UeXjA/vFOHhgGcqk3BpW40= Subject key identifier: E4:8F:79:03:60:F2:8A:5E:B5:9D:1E:4B:EF:C1:2B:61:FC:EA:96:49 Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0DD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0DD9 Signing time: Fri 18 Jul 2025 18:02:46 +0000 Manifest this update: Fri 18 Jul 2025 18:02:45 +0000 Manifest next update: Fri 25 Jul 2025 18:02:45 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: k7WADX5/FUB900M2M+BTn8TI+IRKx3jUoYwpSTPxu70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3545 (0xdd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: Jul 18 18:02:45 2025 GMT Not After : Jul 25 18:02:45 2025 GMT Subject: CN=687a8c46-7cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:7a:b2:66:31:a2:b8:db:40:68:cb:72:80: 5a:93:11:3f:77:4a:7f:50:bd:64:3b:7d:d4:6b:20: e8:b1:ea:73:25:71:52:40:0d:59:75:c4:8c:03:39: 5c:ff:1a:c5:6e:43:09:bf:fa:03:91:6e:5a:1e:d7: f3:6c:56:01:fd:de:f0:19:03:01:f9:8c:52:df:dd: 84:0a:81:81:d7:1b:0f:f5:6b:53:b5:3a:14:f5:d8: 47:5e:cc:9b:c9:06:e7:42:3f:eb:cb:7e:7b:66:90: 67:16:79:4b:37:24:0c:5a:28:9f:2f:9e:e4:64:8e: d6:40:a2:21:f3:12:86:16:f3:ff:95:c2:a0:c9:b5: 35:12:24:f0:ef:96:cb:be:2f:e5:3b:06:4f:e4:42: 1e:0d:e9:08:1f:ff:be:0e:5b:13:16:e5:02:90:a4: 58:f6:39:5a:58:16:84:f7:71:d9:41:39:22:d9:2b: c9:e6:6f:1a:f8:7f:08:f6:7c:cc:a7:4f:20:7f:0e: 1d:ba:da:a4:46:23:c0:5e:3b:bb:78:4a:1c:7d:66: a9:04:7b:a4:e6:43:03:31:b8:5c:ff:53:43:12:67: c4:58:38:af:44:24:cc:7c:bb:12:b7:5f:32:0c:7c: 8c:32:07:29:d5:37:da:c5:d0:a4:a2:f6:38:a7:cb: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8F:79:03:60:F2:8A:5E:B5:9D:1E:4B:EF:C1:2B:61:FC:EA:96:49 X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9c:ec:f2:0b:91:f5:d4:a0:41:44:c0:cb:82:28:db:1a:ca: 2c:87:72:e5:80:ab:47:2c:92:10:53:a5:d8:26:1c:a0:17:52: df:76:57:4f:3c:8a:39:e1:88:18:cd:87:98:32:54:da:46:5b: fe:a8:3f:b4:44:a9:41:fc:d4:5a:a9:b3:49:e9:9f:c3:94:2e: 9e:0d:6e:e4:8c:00:43:53:ae:1a:00:74:82:b5:bc:b1:80:11: b4:17:e0:bb:32:6e:5e:26:21:98:5e:af:bc:49:1a:48:09:d6: fd:52:d2:96:51:cc:ff:25:23:34:22:98:9e:74:63:72:2e:07: a8:15:c6:f4:95:05:d3:c9:31:74:58:4d:ab:5c:31:72:e7:31: 30:e3:41:08:4e:34:d2:c9:43:c6:86:52:6c:a6:ef:95:7e:90: 75:c5:2f:b5:91:a0:ee:e8:c5:30:45:d9:7a:c7:23:0d:4c:21: 2b:14:ba:46:9d:f7:b2:3f:7e:0e:eb:7d:ba:61:39:bd:3d:47: 39:8e:5a:13:a3:0b:44:45:97:c8:97:c1:2b:56:aa:93:d6:bc: dc:16:b7:e2:85:f5:c0:59:71:75:16:91:e7:15:e3:30:e0:0a: 95:65:b7:12:18:6c:c9:14:31:41:19:50:ee:b8:b6:00:30:36: b4:cd:b8:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjUwNzE4MTgwMjQ1WhcNMjUwNzI1MTgwMjQ1WjAYMRYwFAYD VQQDEw02ODdhOGM0Ni03Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kl6smYxorjbQGjLcoBakxE/d0p/UL1kO33UayDosepzJXFSQA1ZdcSMAzlc /xrFbkMJv/oDkW5aHtfzbFYB/d7wGQMB+YxS392ECoGB1xsP9WtTtToU9dhHXsyb yQbnQj/ry357ZpBnFnlLNyQMWiifL57kZI7WQKIh8xKGFvP/lcKgybU1EiTw75bL vi/lOwZP5EIeDekIH/++DlsTFuUCkKRY9jlaWBaE93HZQTki2SvJ5m8a+H8I9nzM p08gfw4dutqkRiPAXju7eEocfWapBHuk5kMDMbhc/1NDEmfEWDivRCTMfLsSt18y DHyMMgcp1TfaxdCkovY4p8ufYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSPeQNg 8opetZ0eS+/BK2H86pZJMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmnOzyC5H11KBBRMDLgijbGsosh3LlgKtHLJIQU6XYJhygF1LfdldP PIo54YgYzYeYMlTaRlv+qD+0RKlB/NRaqbNJ6Z/DlC6eDW7kjABDU64aAHSCtbyx gBG0F+C7Mm5eJiGYXq+8SRpICdb9UtKWUcz/JSM0IpiedGNyLgeoFcb0lQXTyTF0 WE2rXDFy5zEw40EITjTSyUPGhlJspu+VfpB1xS+1kaDu6MUwRdl6xyMNTCErFLpG nfeyP34O6326YTm9PUc5jloTowtERZfIl8ErVqqT1rzcFrfihfXAWXF1FpHnFeMw 4AqVZbcSGGzJFDFBGVDuuLYAMDa0zbiH -----END CERTIFICATE-----Generated at Sun Jul 20 10:38:10 2025 by rpki-client