$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: EI97hTqoR+rblkzGD3JTbxFq6yefkePXed4dpHqqxxw= Subject key identifier: C3:AA:03:D8:F2:6B:6F:96:C6:51:66:0A:99:A5:2D:78:70:51:1B:15 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 0173 Signing time: Wed 23 Jul 2025 04:01:01 +0000 Manifest this update: Wed 23 Jul 2025 04:01:00 +0000 Manifest next update: Wed 30 Jul 2025 04:01:00 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: c36lLa3MyScEpMStp04WDKJAPQYuwFIj8kHizBhGlHQ=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Jul 23 04:01:00 2025 GMT Not After : Jul 30 04:01:00 2025 GMT Subject: CN=68805e7d-6411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:85:bf:9b:58:e4:d7:b6:37:99:55:86:3b: 07:6f:10:11:18:ff:39:3b:ee:15:98:99:ae:3f:fd: 8b:85:99:da:a1:e5:c6:8d:7a:fd:ef:7f:53:11:7d: 6e:d9:5b:b1:92:6f:b3:b7:16:33:b0:4c:9d:24:be: a0:30:b6:24:91:da:12:59:e9:93:00:15:2b:c4:66: e0:b1:63:74:19:e1:65:ca:5a:d5:aa:ba:27:7b:12: 32:d0:f5:2b:a3:42:93:09:bf:39:ce:19:56:19:b1: b0:56:23:b4:53:44:c7:00:97:f5:e9:c6:2c:9c:8f: 6b:f0:a7:10:38:ad:cb:80:2b:93:b3:78:7e:7b:92: de:87:e0:9a:05:eb:00:bd:ce:90:98:e4:dd:19:b1: 38:f7:26:88:f7:16:9e:22:ca:a5:9c:46:1e:1e:ba: 16:4a:48:d3:0e:23:ce:f0:26:6b:bc:bb:71:cd:15: 7d:32:14:e9:6e:8f:a6:20:75:73:0b:ea:bb:7a:21: 33:87:2e:2c:39:62:0e:0a:88:8b:fa:ad:72:10:a4: e4:ce:88:3d:ec:cb:a4:2c:03:d0:5f:00:d9:4a:16: fe:ff:52:f9:1d:36:76:7d:1f:95:29:7b:a6:9a:1b: 80:92:7a:0f:61:d0:b9:87:3a:15:f2:ee:bf:22:ee: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:03:D8:F2:6B:6F:96:C6:51:66:0A:99:A5:2D:78:70:51:1B:15 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:78:69:fc:6d:f7:8b:8e:c8:78:aa:4f:2d:7b:e2:83:cd:da: d0:b9:b0:b5:8c:c6:8c:ca:7c:b9:fd:4c:ff:24:62:17:d4:99: f2:eb:08:13:db:6b:2d:73:1f:3f:52:99:f4:e4:da:08:80:ba: cc:80:3c:10:90:c8:fa:85:b5:dc:7c:6e:92:6d:99:a9:d4:fd: 64:d6:f8:68:29:4c:0a:1f:8d:bd:02:41:4c:2a:b3:9b:8d:e9: f4:f8:ff:2e:84:f6:b1:31:87:b7:3b:c4:4b:b6:23:8e:04:54: 85:2a:ac:e2:b2:3b:4a:32:9f:4a:64:cd:0b:d9:2a:e2:dd:6b: b0:f2:22:c2:59:17:e3:72:93:73:67:7f:a0:ef:07:c7:52:c6: 36:67:48:9f:4b:3b:cd:02:2a:17:21:84:f0:2d:1e:69:2f:97: dc:82:7e:d0:0a:91:e7:1e:32:a2:43:4a:f5:70:23:90:03:fa: 6c:d4:ff:72:c8:d1:98:66:ff:da:ae:48:b9:7f:3d:9b:46:69: e3:23:ed:92:f8:ce:b3:d7:3e:71:5d:a7:63:5b:d8:39:6b:84: e6:ef:97:4e:36:64:e0:d5:54:64:55:59:9d:09:e2:5b:c4:12: 33:30:e0:2f:27:93:2d:f1:b9:b5:b0:73:51:d7:26:35:13:ad: 25:c9:95:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwNzIzMDQwMTAwWhcNMjUwNzMwMDQwMTAwWjAYMRYwFAYD VQQDEw02ODgwNWU3ZC02NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLyFv5tY5Ne2N5lVhjsHbxARGP85O+4VmJmuP/2LhZnaoeXGjXr9739TEX1u 2Vuxkm+ztxYzsEydJL6gMLYkkdoSWemTABUrxGbgsWN0GeFlylrVqronexIy0PUr o0KTCb85zhlWGbGwViO0U0THAJf16cYsnI9r8KcQOK3LgCuTs3h+e5Leh+CaBesA vc6QmOTdGbE49yaI9xaeIsqlnEYeHroWSkjTDiPO8CZrvLtxzRV9MhTpbo+mIHVz C+q7eiEzhy4sOWIOCoiL+q1yEKTkzog97MukLAPQXwDZShb+/1L5HTZ2fR+VKXum mhuAknoPYdC5hzoV8u6/Iu4ehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOqA9jy a2+WxlFmCpmlLXhwURsVMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfeGn8bfeLjsh4qk8te+KDzdrQubC1jMaMyny5/Uz/JGIX1Jny6wgT 22stcx8/Upn05NoIgLrMgDwQkMj6hbXcfG6SbZmp1P1k1vhoKUwKH429AkFMKrOb jen0+P8uhPaxMYe3O8RLtiOOBFSFKqzisjtKMp9KZM0L2Sri3Wuw8iLCWRfjcpNz Z3+g7wfHUsY2Z0ifSzvNAioXIYTwLR5pL5fcgn7QCpHnHjKiQ0r1cCOQA/ps1P9y yNGYZv/arki5fz2bRmnjI+2S+M6z1z5xXadjW9g5a4Tm75dONmTg1VRkVVmdCeJb xBIzMOAvJ5Mt8bm1sHNR1yY1E60lyZW5 -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:04 2025 by rpki-client