$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: 5qfHRfMfBno6gIGwDaWdBLJnHn4PXw6yNlTm9KheBgU= Subject key identifier: 30:E8:74:26:2E:1D:ED:12:B5:AD:56:F8:59:9D:26:02:16:15:03:81 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0882 Signing time: Thu 24 Jul 2025 20:47:52 +0000 Manifest this update: Thu 24 Jul 2025 20:47:51 +0000 Manifest next update: Thu 31 Jul 2025 20:47:51 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: peYGdKhu2FdLf6WF1HVWdXwaRv7kuaYXQT0em5iWS3Y=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Jul 24 20:47:51 2025 GMT Not After : Jul 31 20:47:51 2025 GMT Subject: CN=68829bf8-21a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7d:41:32:60:b4:2c:a8:19:7c:fe:16:35:23: 4e:dd:47:24:4d:3a:35:1f:09:05:25:f4:dd:27:35: 6d:39:ca:67:85:4b:19:98:09:fb:68:f3:be:82:ad: 3c:0c:77:6b:37:49:4c:47:91:8a:1c:94:ec:0a:65: 21:de:29:33:44:e7:ab:b3:0d:58:b7:dc:ba:47:09: 08:2c:a8:1a:fd:ca:07:e6:c6:7c:ae:29:ec:f9:4a: 31:0d:67:72:44:73:40:89:55:a5:3f:52:a4:cd:6b: 70:0e:1f:92:61:0b:e4:a0:5b:88:98:b3:7f:45:f4: 46:18:77:d7:b9:55:74:d7:d6:65:6f:fb:e3:b7:87: 1c:ae:68:0f:50:7d:0d:e8:74:7a:57:23:e8:f3:58: a5:4b:44:1a:bd:f4:43:59:bf:66:4b:bf:ee:18:9b: 13:7a:f0:a2:3a:2e:8e:80:40:69:da:37:4f:57:8e: 00:dc:b4:1b:de:ac:fd:9f:5b:54:80:4a:68:3a:be: 37:a0:a1:b3:9a:9b:a2:89:fb:a3:92:8f:23:3f:67: 88:21:17:95:00:90:8c:c6:7a:ab:70:e2:29:f0:e2: 23:91:18:26:f1:e8:6e:72:17:3f:0d:57:b5:8b:75: 28:c3:d5:83:a9:81:39:88:fb:86:a2:55:05:21:29: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:74:26:2E:1D:ED:12:B5:AD:56:F8:59:9D:26:02:16:15:03:81 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:40:a1:6a:03:39:2f:12:c2:38:af:05:a1:9a:ec:20:95:41: c6:92:70:85:ef:46:28:08:a7:57:7e:e5:3a:72:64:82:2f:43: 25:0e:a3:ad:75:d5:43:ed:29:70:ea:c0:a3:ef:fe:16:3e:cf: b8:d1:6e:46:a2:bb:27:36:b1:b7:d6:c2:90:40:48:fb:53:94: b8:b7:a9:6f:1f:b7:4f:62:29:8c:40:48:2e:cf:05:78:15:3a: 0e:db:02:fb:86:41:0c:ec:16:37:a3:66:2f:5d:29:1b:d5:09: 5b:b1:7f:33:ee:7b:4f:81:e4:17:4e:25:db:3c:ce:24:80:ef: 49:cd:a9:72:45:da:8a:19:ce:77:7e:ae:29:76:4c:62:25:61: 3a:80:66:cf:2b:10:63:ee:f2:46:a8:9e:f4:13:5a:03:e2:aa: 1b:8e:b1:c0:bc:16:20:b9:af:73:ed:b0:4d:66:84:a1:d8:90: 70:e4:7b:92:20:cf:77:36:0b:00:d7:a6:a5:b2:23:a2:b0:b0: 2d:5b:b0:e0:5a:d6:d3:00:b0:ff:7a:34:8d:f9:74:12:f8:91: ca:c6:37:aa:28:d3:90:fb:df:25:3c:7b:34:d4:35:bf:b1:1c: 70:74:eb:1c:45:44:d1:1e:48:9f:af:ed:0f:35:9d:0e:bb:de: 40:27:44:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwNzI0MjA0NzUxWhcNMjUwNzMxMjA0NzUxWjAYMRYwFAYD VQQDEw02ODgyOWJmOC0yMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA531BMmC0LKgZfP4WNSNO3UckTTo1HwkFJfTdJzVtOcpnhUsZmAn7aPO+gq08 DHdrN0lMR5GKHJTsCmUh3ikzROersw1Yt9y6RwkILKga/coH5sZ8rins+UoxDWdy RHNAiVWlP1KkzWtwDh+SYQvkoFuImLN/RfRGGHfXuVV019Zlb/vjt4ccrmgPUH0N 6HR6VyPo81ilS0QavfRDWb9mS7/uGJsTevCiOi6OgEBp2jdPV44A3LQb3qz9n1tU gEpoOr43oKGzmpuiifujko8jP2eIIReVAJCMxnqrcOIp8OIjkRgm8ehuchc/DVe1 i3Uow9WDqYE5iPuGolUFISkTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDodCYu He0Sta1W+FmdJgIWFQOBMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRQKFqAzkvEsI4rwWhmuwglUHGknCF70YoCKdXfuU6cmSCL0MlDqOt ddVD7Slw6sCj7/4WPs+40W5GorsnNrG31sKQQEj7U5S4t6lvH7dPYimMQEguzwV4 FToO2wL7hkEM7BY3o2YvXSkb1QlbsX8z7ntPgeQXTiXbPM4kgO9JzalyRdqKGc53 fq4pdkxiJWE6gGbPKxBj7vJGqJ70E1oD4qobjrHAvBYgua9z7bBNZoSh2JBw5HuS IM93NgsA16alsiOisLAtW7DgWtbTALD/ejSN+XQS+JHKxjeqKNOQ+98lPHs01DW/ sRxwdOscRUTRHkifr+0PNZ0Ou95AJ0SV -----END CERTIFICATE-----Generated at Fri Jul 25 01:45:03 2025 by rpki-client