$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: 9vxKHxOTaQ5MCLujNnXUKCq46+qd11vX3ijrv1COhm4= Subject key identifier: 03:B5:81:DE:B2:DC:0B:4F:86:31:08:14:2A:D5:B0:21:3D:0C:4C:AF Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: CA Signing time: Sat 19 Jul 2025 05:54:09 +0000 Manifest this update: Sat 19 Jul 2025 05:54:09 +0000 Manifest next update: Sat 26 Jul 2025 05:54:09 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: 86bfzBJT71fSxOD8Zrt5YCWGpr3MmSSHfMz7tLIWkxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Jul 19 05:54:09 2025 GMT Not After : Jul 26 05:54:09 2025 GMT Subject: CN=687b3301-7d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:37:29:50:b0:57:a3:22:0d:6a:2e:57:ac: d9:c8:87:ae:59:da:e9:fb:b0:bc:dd:44:3f:05:d7: fd:27:57:a7:bf:63:e9:31:1d:9c:a2:7b:77:56:d9: 4b:62:31:15:c6:92:be:90:da:ae:f2:cb:24:43:51: d6:cc:9e:03:cf:59:92:e6:a4:b6:9d:b9:f7:37:26: b0:4a:4f:1e:c4:24:b8:d8:16:b8:45:50:4f:73:73: 76:49:b1:4a:18:3b:32:c4:e6:b4:57:5c:65:63:c3: 0a:08:7c:f7:00:fc:0c:96:a8:b8:a2:a6:4f:44:fb: 5b:b4:e3:08:b6:76:79:40:7e:4f:c8:4f:76:d1:69: ba:00:28:06:f0:1d:e1:3e:2d:06:82:0f:ad:de:6f: 05:3f:df:43:88:66:1e:1d:e8:e7:0e:68:12:e7:3a: 4e:da:07:2a:53:0a:98:40:3b:13:34:ca:a9:fc:59: bd:3e:97:d8:fe:25:c1:bc:20:4a:4f:73:0e:bb:55: c3:87:b4:7c:8a:e6:88:11:87:c3:cb:f1:ac:d3:43: d8:fd:a3:2d:5d:80:3c:cf:de:ed:e2:44:f5:5a:41: 93:cb:4f:1c:c2:6b:17:ba:41:47:43:f7:d1:3e:17: f9:67:62:e5:40:c5:ec:2a:f6:b3:06:ea:cd:61:5b: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B5:81:DE:B2:DC:0B:4F:86:31:08:14:2A:D5:B0:21:3D:0C:4C:AF X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:30:19:a1:85:13:48:07:2b:cc:b4:e3:b1:b9:b1:23:96:33: 1f:9d:6d:d0:06:e3:73:f1:3b:ea:ee:2f:1a:9d:09:a9:2f:0b: ae:dc:ac:0c:f0:1a:53:f1:14:1a:25:46:2d:92:6a:aa:26:fe: 92:41:c5:01:e2:68:1d:10:55:8f:07:c1:7a:db:97:fd:8a:5e: 4b:d8:2e:4a:a3:4e:dc:8b:27:50:e9:b1:84:4c:d7:0a:67:47: 0e:37:3b:e4:9f:97:78:4b:8b:ec:e1:00:bb:7f:19:d7:67:d4: 08:2c:53:01:52:32:58:65:32:94:1a:3c:53:d8:fa:af:a6:b3: 36:c9:6f:43:42:6d:33:dd:a7:09:6e:08:24:7b:89:94:22:62: f4:07:d6:2d:00:b9:03:4d:30:42:2d:51:1d:f7:c7:c2:0c:d2: ff:6f:a6:17:4b:44:ce:6a:0c:fb:97:3b:b2:d4:42:d0:61:bc: 04:8b:23:75:65:05:c7:2e:26:39:4e:5d:94:aa:6b:29:db:b5: e0:b8:60:62:d2:51:a7:d6:a2:51:14:dd:35:fa:a1:01:62:a0: 88:29:7d:c5:6f:d3:ce:a4:cf:f2:2c:de:f4:b2:e4:d0:43:e0: 46:2a:99:ed:9f:f8:4d:fb:92:50:e5:c0:70:3a:6b:9e:69:09: 74:4d:47:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUwNzE5MDU1NDA5WhcNMjUwNzI2MDU1NDA5WjAYMRYwFAYD VQQDEw02ODdiMzMwMS03ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzM3KVCwV6MiDWouV6zZyIeuWdrp+7C83UQ/Bdf9J1env2PpMR2cont3VtlL YjEVxpK+kNqu8sskQ1HWzJ4Dz1mS5qS2nbn3NyawSk8exCS42Ba4RVBPc3N2SbFK GDsyxOa0V1xlY8MKCHz3APwMlqi4oqZPRPtbtOMItnZ5QH5PyE920Wm6ACgG8B3h Pi0Ggg+t3m8FP99DiGYeHejnDmgS5zpO2gcqUwqYQDsTNMqp/Fm9PpfY/iXBvCBK T3MOu1XDh7R8iuaIEYfDy/Gs00PY/aMtXYA8z97t4kT1WkGTy08cwmsXukFHQ/fR Phf5Z2LlQMXsKvazBurNYVtb5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAO1gd6y 3AtPhjEIFCrVsCE9DEyvMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2MBmhhRNIByvMtOOxubEjljMfnW3QBuNz8Tvq7i8anQmpLwuu3KwM 8BpT8RQaJUYtkmqqJv6SQcUB4mgdEFWPB8F625f9il5L2C5Ko07ciydQ6bGETNcK Z0cONzvkn5d4S4vs4QC7fxnXZ9QILFMBUjJYZTKUGjxT2PqvprM2yW9DQm0z3acJ bggke4mUImL0B9YtALkDTTBCLVEd98fCDNL/b6YXS0TOagz7lzuy1ELQYbwEiyN1 ZQXHLiY5Tl2Uqmsp27XguGBi0lGn1qJRFN01+qEBYqCIKX3Fb9POpM/yLN70suTQ Q+BGKpntn/hN+5JQ5cBwOmueaQl0TUcC -----END CERTIFICATE-----Generated at Sun Jul 20 03:17:35 2025 by rpki-client