$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: o0jtqqspkqsnyXyp/js3BpmlFS4u8zfAb+cdK0H/rgU= Subject key identifier: EE:94:27:24:7B:B8:6C:07:70:11:2B:7A:9D:B0:01:F7:3D:24:88:5A Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: D6 Signing time: Wed 23 Jul 2025 05:54:32 +0000 Manifest this update: Wed 23 Jul 2025 05:54:32 +0000 Manifest next update: Wed 30 Jul 2025 05:54:32 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: qEYUoQNFMYX8Am4JFD9AorQxwL5ltloJR1UljQPciTg=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Jul 23 05:54:32 2025 GMT Not After : Jul 30 05:54:32 2025 GMT Subject: CN=68807918-2a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d3:3b:c3:91:77:14:2e:ea:f7:6a:fc:c6:cc: 4e:d2:c5:11:3f:b6:81:a6:21:38:b3:a9:f7:54:85: 55:d3:b8:6b:f2:44:fa:7e:95:06:0f:f5:90:c3:82: ae:e4:62:86:ed:11:07:12:75:2d:bf:8a:77:1d:56: c1:aa:f8:35:5a:c9:fc:91:6f:c9:9e:d6:cb:c4:81: f3:70:2a:73:be:fd:49:51:db:24:4e:85:23:94:be: 15:69:76:bc:52:f0:7b:6d:9b:81:64:50:19:a5:cc: fe:07:97:99:3f:48:fb:e3:c5:78:a4:fa:07:63:49: 26:db:df:24:ca:28:b7:01:de:d1:37:3b:c9:a0:54: f5:53:67:81:8f:fd:60:82:3f:d5:33:21:6c:13:cc: ae:b3:13:46:4d:b8:a3:52:ab:54:6c:ef:e3:90:9f: fb:82:db:03:fc:3c:ea:2d:4a:f8:e1:05:b7:d9:c9: f3:e7:37:db:ae:7b:53:65:ea:c6:2e:cd:71:0f:69: ab:6a:39:79:d0:0e:2b:f1:0b:49:f6:23:ea:6e:9b: ff:94:ab:58:2f:8d:05:00:df:91:8d:e4:8e:36:b2: c7:25:9c:f3:c7:64:93:78:b6:70:76:df:cf:d0:b5: 4c:b0:da:02:4f:41:53:9e:fb:62:09:b8:6a:c0:cb: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:94:27:24:7B:B8:6C:07:70:11:2B:7A:9D:B0:01:F7:3D:24:88:5A X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f4:d0:d9:76:21:2b:6c:61:1e:ae:c0:9a:ed:ee:2d:6e:fb: dd:b0:8b:49:08:d4:e1:ed:f2:07:c5:18:fa:04:40:49:89:9b: d1:fa:f4:08:33:d3:9d:25:f6:71:6d:e0:65:cf:57:51:63:88: cf:b0:f6:bf:8a:e0:1a:50:ca:38:2b:5e:ce:4c:03:96:90:b7: 76:e0:87:96:e9:3d:92:12:6e:50:be:61:2f:2a:68:f7:86:3c: 64:88:e9:57:bd:46:85:64:e5:c9:21:6f:b5:7f:b2:0a:2c:99: 0d:41:6d:5f:89:3b:c4:ed:0f:2c:14:fe:d8:c9:fb:0e:90:a3: 9d:f7:d1:23:17:53:87:0c:77:ab:c5:15:39:20:f6:30:ac:fb: 92:42:95:33:1d:59:97:4b:a3:1c:fa:04:f9:0d:35:24:16:54: 78:71:c7:b1:31:97:ab:c9:66:b8:b2:ef:29:84:83:c4:32:f7: 0b:da:c3:05:34:78:b5:67:ec:23:35:5b:18:45:56:1f:47:50: 0d:ed:9a:40:b0:09:8e:72:27:9e:1a:1d:38:ae:45:f6:10:31: d0:cd:3e:f8:6e:56:07:15:37:67:c4:8c:d6:5d:b1:25:b6:64: 8b:4a:9b:d4:e1:b1:bf:df:af:5b:1a:90:91:2c:65:86:72:27: 80:ba:88:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNzIzMDU1NDMyWhcNMjUwNzMwMDU1NDMyWjAYMRYwFAYD VQQDEw02ODgwNzkxOC0yYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NM7w5F3FC7q92r8xsxO0sURP7aBpiE4s6n3VIVV07hr8kT6fpUGD/WQw4Ku 5GKG7REHEnUtv4p3HVbBqvg1Wsn8kW/JntbLxIHzcCpzvv1JUdskToUjlL4VaXa8 UvB7bZuBZFAZpcz+B5eZP0j748V4pPoHY0km298kyii3Ad7RNzvJoFT1U2eBj/1g gj/VMyFsE8yusxNGTbijUqtUbO/jkJ/7gtsD/DzqLUr44QW32cnz5zfbrntTZerG Ls1xD2mrajl50A4r8QtJ9iPqbpv/lKtYL40FAN+RjeSONrLHJZzzx2STeLZwdt/P 0LVMsNoCT0FTnvtiCbhqwMvoqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6UJyR7 uGwHcBErep2wAfc9JIhaMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP9NDZdiErbGEersCa7e4tbvvdsItJCNTh7fIHxRj6BEBJiZvR+vQI M9OdJfZxbeBlz1dRY4jPsPa/iuAaUMo4K17OTAOWkLd24IeW6T2SEm5QvmEvKmj3 hjxkiOlXvUaFZOXJIW+1f7IKLJkNQW1fiTvE7Q8sFP7YyfsOkKOd99EjF1OHDHer xRU5IPYwrPuSQpUzHVmXS6Mc+gT5DTUkFlR4ccexMZeryWa4su8phIPEMvcL2sMF NHi1Z+wjNVsYRVYfR1AN7ZpAsAmOcieeGh04rkX2EDHQzT74blYHFTdnxIzWXbEl tmSLSpvU4bG/369bGpCRLGWGcieAuoj7 -----END CERTIFICATE-----Generated at Wed Jul 23 12:21:21 2025 by rpki-client