$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: tcJUb18X+Wbyz6ULIW663YKYm9Y5YXdZOWzxcCLc5xM= Subject key identifier: D1:2B:3D:FA:99:F4:80:40:E7:4F:BB:BA:F0:26:01:1E:52:6B:01:51 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 4F Signing time: Sat 19 Jul 2025 07:33:31 +0000 Manifest this update: Sat 19 Jul 2025 07:33:31 +0000 Manifest next update: Sat 26 Jul 2025 07:33:31 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: N/8oV9XhCIg4MNih1OmDa/dD7jJ6vagrmZAsiKbYsjI=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Jul 19 07:33:31 2025 GMT Not After : Jul 26 07:33:31 2025 GMT Subject: CN=687b4a4b-ae7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:9e:83:3f:a2:e0:c1:10:ee:c3:34:2e:a8: 06:1c:cf:b5:66:86:85:e3:eb:04:65:27:03:f6:51: 3e:54:73:10:2c:05:f0:65:4c:fa:af:a8:d2:17:c4: cf:81:95:5e:70:16:d9:c2:80:58:b1:87:b2:2f:84: 56:49:37:60:47:ad:27:f3:c9:2d:59:c1:97:a1:75: 0d:aa:6f:20:89:37:82:fe:b9:01:d4:26:24:bb:e3: e3:b5:36:b0:f3:93:65:e2:7c:87:c4:0e:7a:aa:35: 0b:86:95:f9:dd:da:c1:ac:b7:43:2d:38:f2:64:4d: 6d:97:3b:0d:d0:7c:f2:27:24:d2:c0:94:90:67:c7: c4:12:e9:7e:fe:08:18:b3:e0:d7:e3:a6:81:5e:91: ec:b9:a8:70:57:8a:5b:51:db:fb:82:80:71:8a:43: 13:1e:4d:b5:da:b9:f0:47:b9:23:70:dd:6e:de:98: b0:3d:ec:29:95:47:28:2e:d3:ff:e9:b9:b0:c4:5b: a5:f7:fb:b2:ca:17:89:2e:50:9f:60:d7:37:24:a3: c9:db:20:c9:21:4a:ec:c7:e1:7e:2f:8a:63:c2:d6: 59:53:ae:f1:3a:11:2d:a9:bf:fc:86:79:5d:a7:bd: de:72:d9:e4:2e:45:75:87:8a:21:44:63:be:e4:aa: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2B:3D:FA:99:F4:80:40:E7:4F:BB:BA:F0:26:01:1E:52:6B:01:51 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:80:05:79:32:04:e7:e7:29:43:11:fe:35:4d:5c:a9:f0: 7d:bd:1e:cd:76:11:e5:26:a3:ec:57:a9:13:85:30:25:77:fc: ed:b4:fe:0f:a6:89:d1:3d:11:18:8c:c0:ba:21:d2:99:f9:c2: 36:29:f6:dc:3c:cc:18:3c:30:6b:a0:e6:ad:ee:29:b1:1f:4f: d4:fd:e1:65:17:41:a9:53:a2:a2:f7:f0:07:42:b4:ea:2f:19: 48:72:22:24:b5:b4:a8:42:5f:ec:98:b9:f4:1a:ef:01:fb:06: 88:b0:57:4d:2b:30:25:3c:17:cb:e9:ca:ef:21:34:3d:8c:42: 21:56:05:26:9b:f0:27:83:2d:11:e7:46:c9:9e:bb:d0:c4:48: 13:e7:a8:91:5d:33:c6:ef:05:27:14:0e:60:d8:e7:56:0b:5b: b7:21:8c:17:07:a8:2b:72:22:f3:69:da:97:d9:ca:0b:65:22: 1d:00:5a:10:a7:30:7e:9d:b1:f8:b3:cf:32:9b:d8:6f:e1:d5: d6:6d:fc:4e:3f:2d:fb:21:8a:96:91:c1:ff:5d:d2:2f:09:3c: db:fc:0a:1f:2c:68:de:96:00:51:a5:61:fb:72:1f:24:6e:5d: 71:29:80:bd:0d:9a:c3:a4:1a:dd:8e:f0:6e:0b:9e:7e:e6:91: 2e:ec:c9:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA3MTkwNzMzMzFaFw0yNTA3MjYwNzMzMzFaMBgxFjAUBgNV BAMTDTY4N2I0YTRiLWFlN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKtJ6DP6LgwRDuwzQuqAYcz7VmhoXj6wRlJwP2UT5UcxAsBfBlTPqvqNIXxM+B lV5wFtnCgFixh7IvhFZJN2BHrSfzyS1ZwZehdQ2qbyCJN4L+uQHUJiS74+O1NrDz k2XifIfEDnqqNQuGlfnd2sGst0MtOPJkTW2XOw3QfPInJNLAlJBnx8QS6X7+CBiz 4NfjpoFekey5qHBXiltR2/uCgHGKQxMeTbXaufBHuSNw3W7emLA97CmVRygu0//p ubDEW6X3+7LKF4kuUJ9g1zcko8nbIMkhSuzH4X4vimPC1llTrvE6ES2pv/yGeV2n vd5y2eQuRXWHiiFEY77kqgvXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0Ss9+pn0 gEDnT7u68CYBHlJrAVEwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmOgAV5MgTn5ylDEf41TVyp8H29Hs12EeUmo+xXqROFMCV3/O20/g+m idE9ERiMwLoh0pn5wjYp9tw8zBg8MGug5q3uKbEfT9T94WUXQalToqL38AdCtOov GUhyIiS1tKhCX+yYufQa7wH7BoiwV00rMCU8F8vpyu8hND2MQiFWBSab8CeDLRHn Rsmeu9DESBPnqJFdM8bvBScUDmDY51YLW7chjBcHqCtyIvNp2pfZygtlIh0AWhCn MH6dsfizzzKb2G/h1dZt/E4/LfshipaRwf9d0i8JPNv8Ch8saN6WAFGlYftyHyRu XXEpgL0NmsOkGt2O8G4Lnn7mkS7syZk= -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:26 2025 by rpki-client