$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: A5sPT/ng3u2LyEBPaKuo2qWQJIL0WcyLz1W5QGmW2x4= Subject key identifier: 48:09:F6:9E:72:DD:35:20:64:75:78:EA:25:DB:90:56:1A:F9:71:E9 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: AB Signing time: Sat 19 Jul 2025 06:29:49 +0000 Manifest this update: Sat 19 Jul 2025 06:29:48 +0000 Manifest next update: Sat 26 Jul 2025 06:29:48 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: aKZRSA9S3jfNLui75SKQhN7JX1k4E7VLTAJliT/uVEw=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: FLsSk6E317UI1n66jph+9Dir8yNvamWkdarfqoL42t0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Jul 19 06:29:48 2025 GMT Not After : Jul 26 06:29:48 2025 GMT Subject: CN=687b3b5d-14a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:19:f7:c6:ea:8b:11:49:8c:d6:29:d8:b7: c4:6f:f6:80:e1:05:5e:0b:a0:5b:c5:fd:63:81:18: ed:37:10:77:57:d6:bd:84:64:68:27:6e:d0:07:b0: 45:48:09:17:68:6d:80:02:c9:2d:19:f1:69:67:c9: d5:44:00:15:15:50:54:98:f6:c8:96:0a:dd:c9:02: 49:d2:7e:28:df:80:f7:01:7a:34:21:e1:0b:76:14: 48:e0:90:12:cd:97:66:8c:62:4f:7d:ee:f4:c4:47: da:97:82:01:cd:8f:ce:8e:72:60:ee:15:94:17:76: d8:3e:b4:22:87:d1:a8:4f:1e:2a:00:a1:d7:48:0d: ff:e5:57:9a:63:e4:e7:e9:b6:1d:bd:e1:07:f8:d1: 67:86:e1:05:10:2b:27:3d:d4:23:49:d3:9e:f8:f0: cb:ca:86:1f:ff:27:a6:d8:83:33:6c:fd:c5:b4:00: 82:01:44:a4:3a:89:3c:34:12:b2:6f:72:76:7b:6d: d5:2a:2f:71:67:07:b5:a4:3c:27:49:0e:0b:fe:05: 65:57:e5:b2:ed:0f:f0:a0:50:ae:c2:0c:0e:48:33: 83:0f:23:22:b7:4a:dd:42:17:36:c1:aa:63:f5:37: f8:59:e3:14:37:b1:ae:2a:f7:bc:86:7d:86:07:46: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:09:F6:9E:72:DD:35:20:64:75:78:EA:25:DB:90:56:1A:F9:71:E9 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:67:c4:96:00:6f:3b:37:31:c6:1b:fa:e7:a7:f3:d9:88:0c: 27:7e:19:63:3c:fb:09:90:f7:8d:7e:f1:6b:17:a5:8e:37:2a: 12:3e:ec:2d:3b:b3:10:f2:69:1f:47:ec:78:79:38:48:1d:9a: c3:a0:64:c1:3e:5f:77:3f:60:64:3b:70:87:d0:46:e9:ea:18: 81:db:76:7b:4f:06:dc:be:9d:3e:bf:83:7b:68:35:7b:79:ca: 99:d6:be:d5:82:c7:cf:57:8c:e0:90:5b:f8:88:23:6b:37:0e: 05:a6:a1:c9:da:a2:1c:e7:35:8e:5a:8f:d5:29:f8:e8:3a:32: fd:7a:b0:e0:5f:f1:b0:b4:6a:7f:ab:07:18:97:d5:4c:57:d5: a6:8b:fa:9a:7a:c9:58:ed:84:33:23:3c:93:53:b6:63:3f:9e: 1a:ee:63:07:63:a8:6e:d7:5a:62:67:84:27:92:02:9d:27:61: 7b:db:34:38:93:57:69:3f:86:24:06:27:e8:5c:61:e9:f8:e0: f9:44:cf:48:fd:4b:1f:46:0a:e6:25:68:be:f9:e2:db:f6:93: a0:54:81:df:f9:e4:a1:89:e6:58:ab:40:74:3d:6d:f1:b2:92: 17:7a:5a:e5:c1:60:12:d5:b2:e8:01:ac:14:67:df:c0:10:a1: 1d:3a:d7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUwNzE5MDYyOTQ4WhcNMjUwNzI2MDYyOTQ4WjAYMRYwFAYD VQQDEw02ODdiM2I1ZC0xNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOAZ98bqixFJjNYp2LfEb/aA4QVeC6Bbxf1jgRjtNxB3V9a9hGRoJ27QB7BF SAkXaG2AAsktGfFpZ8nVRAAVFVBUmPbIlgrdyQJJ0n4o34D3AXo0IeELdhRI4JAS zZdmjGJPfe70xEfal4IBzY/OjnJg7hWUF3bYPrQih9GoTx4qAKHXSA3/5VeaY+Tn 6bYdveEH+NFnhuEFECsnPdQjSdOe+PDLyoYf/yem2IMzbP3FtACCAUSkOok8NBKy b3J2e23VKi9xZwe1pDwnSQ4L/gVlV+Wy7Q/woFCuwgwOSDODDyMit0rdQhc2wapj 9Tf4WeMUN7GuKve8hn2GB0bNHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgJ9p5y 3TUgZHV46iXbkFYa+XHpMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDZ8SWAG87NzHGG/rnp/PZiAwnfhljPPsJkPeNfvFrF6WONyoSPuwt O7MQ8mkfR+x4eThIHZrDoGTBPl93P2BkO3CH0Ebp6hiB23Z7Twbcvp0+v4N7aDV7 ecqZ1r7VgsfPV4zgkFv4iCNrNw4FpqHJ2qIc5zWOWo/VKfjoOjL9erDgX/GwtGp/ qwcYl9VMV9Wmi/qaeslY7YQzIzyTU7ZjP54a7mMHY6hu11piZ4QnkgKdJ2F72zQ4 k1dpP4YkBifoXGHp+OD5RM9I/UsfRgrmJWi++eLb9pOgVIHf+eShieZYq0B0PW3x spIXelrlwWAS1bLoAawUZ9/AEKEdOtcW -----END CERTIFICATE-----Generated at Mon Jul 21 07:13:11 2025 by rpki-client