$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: sfzFKngXzca+s1GFtrDCV3c11zyfO6zW+RlVJ6k1lYI= Subject key identifier: 9B:D3:B4:5F:C9:11:7C:FA:5E:D3:BC:B0:73:08:A0:43:EA:8D:A6:34 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: C6 Signing time: Sat 19 Jul 2025 05:59:20 +0000 Manifest this update: Sat 19 Jul 2025 05:59:20 +0000 Manifest next update: Sat 26 Jul 2025 05:59:20 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: mfdeQpChAIlJ8xHFKmwmBOCltOx/Lrpi/e6+leU2yto=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Jul 19 05:59:20 2025 GMT Not After : Jul 26 05:59:20 2025 GMT Subject: CN=687b3438-b637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:dc:6e:e9:2e:23:d8:2a:c5:0f:60:d0:f8: 64:28:0f:6c:76:00:c9:b1:1f:54:db:a9:ee:92:af: 2e:86:be:e9:e7:3f:2f:10:d8:97:b9:5a:94:a2:af: 6f:6d:93:5d:c2:0e:7d:27:9a:a3:88:6d:b6:a2:7d: 1a:5a:2f:17:cf:be:fc:ac:2d:3d:11:10:67:75:80: 7d:ff:14:ca:c8:fe:31:64:c3:04:6d:c7:de:ad:1d: 63:9a:46:a3:90:25:34:03:d7:60:84:c6:78:e6:91: f9:ad:d5:ba:4b:32:7f:c0:fa:67:12:32:97:83:39: 52:9d:59:8f:17:dc:02:9c:42:d6:c1:fb:15:c7:6c: 2f:3d:93:cd:d5:a3:bb:3c:b3:17:25:c7:09:e8:74: 8c:ba:b0:b7:c8:e1:67:d9:a7:2f:47:e4:f8:87:7e: f8:8a:e5:67:9f:d0:46:c0:a2:94:d2:89:91:13:76: 84:3c:f1:c3:50:ef:97:fb:42:db:0c:75:d0:48:f6: 28:e8:ae:27:6d:9c:51:86:60:1f:a8:26:38:6e:b0: d4:81:32:d1:5d:44:1b:57:0c:2d:3a:c2:1c:6d:11: 24:10:f3:b2:db:b5:7d:fc:c7:45:c3:07:74:6a:1b: ba:bd:48:4c:1e:d4:9b:54:11:3c:95:25:70:2d:b4: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:B4:5F:C9:11:7C:FA:5E:D3:BC:B0:73:08:A0:43:EA:8D:A6:34 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:11:77:32:db:e2:11:64:24:bc:9f:a9:3e:cb:a7:c0:09:09: 35:77:0c:a7:45:a3:e6:77:bd:d2:1c:ec:ee:f4:69:f7:7c:ec: ba:97:9d:c0:4d:2b:92:79:ce:99:92:bf:9c:ea:51:be:29:fc: b2:be:f2:d2:b7:c0:01:fb:b1:16:45:cd:3d:5e:a8:5f:b4:53: 92:f8:db:7c:2e:b5:bd:a7:f0:90:8c:03:54:cc:a6:35:4c:3f: d7:43:8b:74:a6:20:d9:9d:0a:fa:33:e1:33:fa:b8:be:66:a0: 0a:e4:b6:49:89:bb:f1:93:07:e2:77:87:25:7a:96:ee:aa:5a: 4c:4c:16:03:d9:37:83:7f:4c:66:58:7d:9c:01:7a:cd:c7:21: 4c:06:4c:8d:17:2d:98:0b:e9:d8:ee:36:a5:54:7e:6f:d4:c8: e4:0c:f3:1b:59:37:31:53:43:1d:e4:2c:a3:6d:d0:81:d3:bf: 45:2a:fa:e9:77:97:12:f4:91:92:f4:a0:6f:00:1f:a0:e6:cf: 98:55:ca:76:b9:ab:c3:32:e5:a1:93:50:f2:89:fe:c1:a8:4a: f4:d8:29:ee:fd:31:f6:f2:a0:69:af:86:f3:39:8b:50:5e:b8: 65:38:d9:79:cb:14:f6:dc:b3:56:3e:bb:56:65:16:4b:92:ed: 60:bf:da:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUwNzE5MDU1OTIwWhcNMjUwNzI2MDU1OTIwWjAYMRYwFAYD VQQDEw02ODdiMzQzOC1iNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c/cbukuI9gqxQ9g0PhkKA9sdgDJsR9U26nukq8uhr7p5z8vENiXuVqUoq9v bZNdwg59J5qjiG22on0aWi8Xz778rC09ERBndYB9/xTKyP4xZMMEbcferR1jmkaj kCU0A9dghMZ45pH5rdW6SzJ/wPpnEjKXgzlSnVmPF9wCnELWwfsVx2wvPZPN1aO7 PLMXJccJ6HSMurC3yOFn2acvR+T4h374iuVnn9BGwKKU0omRE3aEPPHDUO+X+0Lb DHXQSPYo6K4nbZxRhmAfqCY4brDUgTLRXUQbVwwtOsIcbREkEPOy27V9/MdFwwd0 ahu6vUhMHtSbVBE8lSVwLbQBlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvTtF/J EXz6XtO8sHMIoEPqjaY0MB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqEXcy2+IRZCS8n6k+y6fACQk1dwynRaPmd73SHOzu9Gn3fOy6l53A TSuSec6Zkr+c6lG+KfyyvvLSt8AB+7EWRc09XqhftFOS+Nt8LrW9p/CQjANUzKY1 TD/XQ4t0piDZnQr6M+Ez+ri+ZqAK5LZJibvxkwfid4clepbuqlpMTBYD2TeDf0xm WH2cAXrNxyFMBkyNFy2YC+nY7jalVH5v1MjkDPMbWTcxU0Md5CyjbdCB079FKvrp d5cS9JGS9KBvAB+g5s+YVcp2uavDMuWhk1Dyif7BqEr02Cnu/TH28qBpr4bzOYtQ XrhlONl5yxT23LNWPrtWZRZLku1gv9pK -----END CERTIFICATE-----Generated at Sun Jul 20 14:58:12 2025 by rpki-client