$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: wiDGzH70GYXDVRNAF1sb5BbkEJnPlbjBDau7w8xY48c= Subject key identifier: 73:45:F6:8E:4E:EE:CB:FC:70:E3:8D:F4:33:99:0E:C5:45:8A:2C:22 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 66 Signing time: Sat 19 Jul 2025 07:14:45 +0000 Manifest this update: Sat 19 Jul 2025 07:14:45 +0000 Manifest next update: Sat 26 Jul 2025 07:14:45 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: B5BTx6m6UwdVPdDsjuDYKUO7PZzMe7bMkiwL1aIau8E=) 2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Jul 19 07:14:45 2025 GMT Not After : Jul 26 07:14:45 2025 GMT Subject: CN=687b45e5-23fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:e2:3d:26:5b:3e:2c:10:99:b5:d7:71:6e: 5c:0b:fa:30:f1:b5:aa:03:1c:0e:91:80:22:4c:10: 4f:c4:a3:4b:68:79:c1:c2:61:38:fc:78:27:a1:73: a4:57:e3:2c:8e:17:98:22:a0:bd:bd:ff:60:68:bf: 33:d1:2e:2d:5f:a9:57:df:ab:76:83:98:c1:3b:45: 7d:a6:3d:d9:c2:17:01:9c:3e:ca:e3:9e:60:e1:e3: 63:61:96:1e:f5:0a:aa:93:c4:81:7d:7e:f8:f2:f9: e4:a5:9a:76:1f:e6:6c:7a:cf:0d:0c:3b:18:ff:22: 1b:76:9e:e1:95:c1:b4:5c:c6:67:34:61:a7:1f:b0: 2a:9c:16:65:6b:e8:84:57:93:be:13:d9:a5:9d:38: e0:88:68:b7:d7:a0:5c:29:b2:45:d6:b6:71:46:b7: 81:2e:df:bd:79:cc:54:da:cf:f7:cd:16:72:f2:46: cd:f0:86:84:fc:3f:eb:b3:74:16:bb:76:b5:67:07: ce:ba:3a:4a:c3:3a:c9:ba:4c:a6:f4:7d:2f:be:7b: d8:de:8d:07:88:0d:57:42:a3:9f:d5:65:d8:ac:32: b9:dc:66:f8:7d:61:e9:a6:b5:26:73:3f:67:71:39: 1a:ce:18:02:9a:3c:25:47:9d:b8:79:69:a6:cd:59: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:45:F6:8E:4E:EE:CB:FC:70:E3:8D:F4:33:99:0E:C5:45:8A:2C:22 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:65:3e:d4:5b:98:1b:7f:07:de:a3:92:66:2e:5e:74:e5: ac:98:be:6f:d1:17:10:d7:49:04:69:6d:6a:5e:0d:72:55:d9: ac:f4:ef:22:b3:62:8e:e2:7c:5e:ed:d6:14:a7:91:2e:cd:b9: f8:2a:b9:e3:46:71:9f:0c:2a:8a:54:a6:21:cd:2f:96:e7:da: 98:63:be:8f:0a:45:42:14:33:6f:66:29:52:73:03:05:14:7a: 7d:91:e8:c2:e6:7d:7a:27:f1:cb:6c:e3:1e:35:15:16:6b:54: e1:f2:bc:5e:e7:39:13:f8:30:9d:4c:b4:fb:64:98:f1:46:d1: 6c:34:f6:01:0f:e6:6c:cc:58:37:29:82:0b:1d:d6:7c:cb:f6: fe:fe:93:08:30:86:7d:01:57:f3:d9:d6:9d:ce:f0:53:b7:b7: 75:9b:95:a3:04:f9:24:26:39:f0:28:cd:73:7d:3f:7b:17:85: 2b:a5:9c:ce:a9:d1:bd:fc:f0:2a:97:0f:da:c2:96:00:85:16: ec:91:f8:d0:cb:bb:82:17:7e:62:70:0f:26:30:ee:f5:e4:0c: 03:95:08:79:5f:09:f0:b6:f0:3a:1b:d7:e1:41:33:5f:0c:9f: 17:3e:04:47:a1:8a:67:fe:17:39:e4:61:d5:0b:f8:7c:11:69: 9a:07:44:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUY0MzExMC8GA1UEBRMoNjRDRjUzMkM4RTIwQjE5NkQyNUJDN0NDN0U1OTMyNEY5 MzgxMzI3NTAeFw0yNTA3MTkwNzE0NDVaFw0yNTA3MjYwNzE0NDVaMBgxFjAUBgNV BAMTDTY4N2I0NWU1LTIzZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpluI9Jls+LBCZtddxblwL+jDxtaoDHA6RgCJMEE/Eo0toecHCYTj8eCehc6RX 4yyOF5gioL29/2BovzPRLi1fqVffq3aDmME7RX2mPdnCFwGcPsrjnmDh42Nhlh71 CqqTxIF9fvjy+eSlmnYf5mx6zw0MOxj/Iht2nuGVwbRcxmc0YacfsCqcFmVr6IRX k74T2aWdOOCIaLfXoFwpskXWtnFGt4Eu3715zFTaz/fNFnLyRs3whoT8P+uzdBa7 drVnB866OkrDOsm6TKb0fS++e9jejQeIDVdCo5/VZdisMrncZvh9YemmtSZzP2dx ORrOGAKaPCVHnbh5aabNWfqtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc0X2jk7u y/xw4430M5kOxUWKLCIwHwYDVR0jBBgwFoAUZM9TLI4gsZbSW8fMflkyT5OBMnUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RjQzLzU5OUZFQjQ0Q0JG NjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1u VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk05VExJNGdzWmJTVzhmTWZsa3lUNU9CTW5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RjQzLzU5OUZFQjQ0Q0JGNjExRUY5RjU3RTkyREM0RjlBRTAyL1pNOVRMSTRnc1pi U1c4Zk1mbGt5VDVPQk1uVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAc7ZT7UW5gbfwfeo5JmLl505ayYvm/RFxDXSQRpbWpeDXJV2az07yKz Yo7ifF7t1hSnkS7NufgqueNGcZ8MKopUpiHNL5bn2phjvo8KRUIUM29mKVJzAwUU en2R6MLmfXon8cts4x41FRZrVOHyvF7nORP4MJ1MtPtkmPFG0Ww09gEP5mzMWDcp ggsd1nzL9v7+kwgwhn0BV/PZ1p3O8FO3t3WblaME+SQmOfAozXN9P3sXhSulnM6p 0b388CqXD9rClgCFFuyR+NDLu4IXfmJwDyYw7vXkDAOVCHlfCfC28Dob1+FBM18M nxc+BEehimf+FznkYdUL+HwRaZoHRCo= -----END CERTIFICATE-----Generated at Sun Jul 20 03:12:19 2025 by rpki-client