$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: mJxqGeTEA3WRNuK5jJQz+kBsO566QWH4JDdK3+fvBHo= Subject key identifier: 60:83:43:4E:9D:C9:80:6A:80:2E:F8:2D:CD:4D:EC:B4:F4:F5:1F:E9 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 245C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 243D Signing time: Fri 18 Jul 2025 15:54:24 +0000 Manifest this update: Fri 18 Jul 2025 15:54:23 +0000 Manifest next update: Fri 25 Jul 2025 15:54:23 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: bEPll6MKNujnTyKWQsQ11eHCyXjyd094ikXWe+mpMDg=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: FG0kBNgcXB2ccIKTcUxFDt6fNDa7To3h1nclZ9D+gJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9308 (0x245c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Jul 18 15:54:23 2025 GMT Not After : Jul 25 15:54:23 2025 GMT Subject: CN=687a6e2f-1bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:f4:77:b5:07:a1:ee:2b:4c:9c:f6:bf:6f: 9f:cd:45:11:e4:5a:56:a7:a6:e6:59:2c:b5:d8:98: e0:61:82:f4:6c:91:f2:bb:81:f7:37:d7:4f:26:7e: 0c:61:04:9e:7f:11:91:94:c9:99:9a:85:8a:e5:f6: 5f:a9:54:de:9a:a3:7a:d3:06:9c:06:12:df:6a:6e: 31:6a:c7:94:d0:64:37:96:59:80:bd:d7:88:0f:ed: 13:f2:44:59:d2:e4:fd:5d:57:64:57:78:f7:08:96: cc:a7:8a:be:64:e5:2c:d8:37:e5:df:28:06:ad:b6: e6:6f:41:17:ab:7f:ed:e0:74:06:cf:ea:5a:38:cd: 01:4e:81:82:ff:57:d3:4c:57:4d:e5:7d:1a:ad:e9: 07:8e:8f:84:95:ba:49:60:d6:ab:24:3e:b3:e6:1f: 61:a3:89:fd:e5:00:6a:26:f4:e2:d3:e1:cb:fd:60: 74:a5:60:dc:68:c9:e8:7a:ee:cd:77:3a:1e:b3:9b: 0c:7d:8d:12:71:15:a2:ba:34:99:52:14:a3:1f:48: 74:d8:03:0c:6e:64:17:fb:d5:6b:9f:4b:75:9a:7b: 84:96:86:a2:f7:b2:64:66:e0:d2:f1:63:d7:d4:1e: cc:90:13:f6:5a:06:41:d9:eb:6e:34:41:50:48:d2: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:83:43:4E:9D:C9:80:6A:80:2E:F8:2D:CD:4D:EC:B4:F4:F5:1F:E9 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:03:25:c0:26:f5:0e:c9:75:a6:80:a2:b2:f9:2c:1f:f5:ea: f4:d4:1e:82:3d:9a:5c:78:f0:86:c6:96:38:0e:13:da:51:8b: b9:ac:fe:a1:bd:71:0f:09:b9:1d:26:ed:70:15:77:59:b6:40: 8a:fb:52:72:ec:02:76:b6:55:3f:17:b6:8c:97:a6:bb:db:70: 80:25:9d:4b:7a:62:86:0c:6d:c6:28:11:b3:1b:4c:73:53:57: f2:bd:c4:67:9a:95:45:26:11:af:60:2c:6e:e1:81:0c:46:f0: 27:8f:7e:77:84:7a:32:2e:b3:29:0c:9d:f8:f2:7a:ab:fe:11: 6d:d7:e3:b2:82:f9:23:37:1e:af:ff:6b:be:f9:10:35:c5:88: ba:4d:2a:7f:3f:a0:37:d5:93:76:4d:e0:c9:97:29:15:6c:f0: 5f:e0:11:e2:d4:4e:b3:65:10:42:ff:94:56:28:fc:9c:c0:6d: 6e:a9:f1:0e:9d:33:c8:1c:51:88:a0:b7:c2:bb:84:45:b5:d8: 19:3e:67:66:23:40:7b:5f:03:6a:1e:ab:f1:08:0d:44:7f:86: 6c:de:ed:26:5a:98:2c:2d:ae:55:98:9d:cd:d9:af:42:39:de: 39:75:d8:f7:61:70:44:a3:49:96:b9:90:cd:07:3e:17:ba:98: c7:6a:bc:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwNzE4MTU1NDIzWhcNMjUwNzI1MTU1NDIzWjAYMRYwFAYD VQQDEw02ODdhNmUyZi0xYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZL0d7UHoe4rTJz2v2+fzUUR5FpWp6bmWSy12JjgYYL0bJHyu4H3N9dPJn4M YQSefxGRlMmZmoWK5fZfqVTemqN60wacBhLfam4xaseU0GQ3llmAvdeID+0T8kRZ 0uT9XVdkV3j3CJbMp4q+ZOUs2Dfl3ygGrbbmb0EXq3/t4HQGz+paOM0BToGC/1fT TFdN5X0arekHjo+ElbpJYNarJD6z5h9ho4n95QBqJvTi0+HL/WB0pWDcaMnoeu7N dzoes5sMfY0ScRWiujSZUhSjH0h02AMMbmQX+9Vrn0t1mnuEloai97JkZuDS8WPX 1B7MkBP2WgZB2etuNEFQSNKL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCDQ06d yYBqgC74Lc1N7LT09R/pMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyAyXAJvUOyXWmgKKy+Swf9er01B6CPZpcePCGxpY4DhPaUYu5rP6h vXEPCbkdJu1wFXdZtkCK+1Jy7AJ2tlU/F7aMl6a723CAJZ1LemKGDG3GKBGzG0xz U1fyvcRnmpVFJhGvYCxu4YEMRvAnj353hHoyLrMpDJ348nqr/hFt1+OygvkjNx6v /2u++RA1xYi6TSp/P6A31ZN2TeDJlykVbPBf4BHi1E6zZRBC/5RWKPycwG1uqfEO nTPIHFGIoLfCu4RFtdgZPmdmI0B7XwNqHqvxCA1Ef4Zs3u0mWpgsLa5VmJ3N2a9C Od45ddj3YXBEo0mWuZDNBz4XupjHaryr -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:19 2025 by rpki-client