$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: zPUAKSretUETaDud/7X1xmRmJLRK5vv0ZO84uAyR0ak= Subject key identifier: 09:8B:11:E8:3A:F5:34:AF:1E:AC:1F:7C:F1:24:DC:44:59:EC:24:43 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D24 Signing time: Sun 20 Jul 2025 16:10:33 +0000 Manifest this update: Sun 20 Jul 2025 16:10:32 +0000 Manifest next update: Sun 27 Jul 2025 16:10:32 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: LdyKifcF5Ya0XpqCZSyZpdReXrrU2/5YYVAZGj517Hg=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7473 (0x1d31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Jul 20 16:10:32 2025 GMT Not After : Jul 27 16:10:32 2025 GMT Subject: CN=687d14f9-5e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:f5:12:31:97:f8:50:01:76:d5:fe:7e:23: a6:fe:34:f1:ff:5c:0a:f4:d7:3f:32:9e:cf:ba:24: b6:15:fd:c3:de:8c:06:8c:bb:86:6b:16:f3:5c:62: d8:3a:82:3a:67:ee:9d:ce:a5:fe:22:7a:6d:fa:9d: 10:17:6b:78:b0:e4:f5:df:53:0b:35:fd:3d:4f:29: 4b:b8:cc:8c:90:93:47:c3:dd:42:a1:2c:10:47:91: 78:b5:31:11:7d:53:44:d9:62:f3:0e:ad:5f:14:c2: 71:64:4f:5d:b4:f5:3b:fe:1e:77:c8:31:e4:13:53: 35:72:3d:c3:10:51:80:be:4d:96:1d:44:b5:76:5f: 4c:7e:8b:44:1a:ee:45:00:09:8f:e2:c9:a2:5a:58: 4b:a4:7a:97:52:0e:df:ff:b0:e4:94:f9:24:d9:60: cb:35:e9:fd:ed:9f:fc:b5:1c:93:09:f3:fb:97:0b: 6f:5e:d5:47:6f:65:fa:7c:90:c6:77:9a:fe:91:e9: 9c:f4:a3:dc:4e:c7:fe:f9:09:5a:e4:6d:3f:a4:bb: a9:cf:1a:5d:32:22:95:6b:39:11:1a:2e:f9:20:a3: 35:4c:27:2f:3d:c9:80:98:77:65:2f:92:66:cd:a9: b6:c1:7b:d8:cd:21:f2:8a:24:f7:31:b4:5c:cb:c8: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8B:11:E8:3A:F5:34:AF:1E:AC:1F:7C:F1:24:DC:44:59:EC:24:43 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1c:4d:60:28:d0:3c:38:65:84:db:66:d5:11:7c:f5:06:e6: ac:53:c5:d8:57:27:27:5b:84:3e:eb:ff:4a:47:a2:54:df:c5: d1:93:b3:26:23:71:f3:47:f4:eb:9f:5e:74:73:00:6d:1f:0d: cb:ea:9c:24:00:ae:e8:97:1b:12:40:5a:46:42:9d:80:69:44: b4:91:1a:94:b7:ec:26:d1:79:99:50:d2:6a:7e:4f:1f:04:3a: e4:db:b2:60:41:6f:1e:fe:34:d6:da:46:ca:06:d1:2a:07:3f: 3d:15:fc:41:19:e2:d9:8a:b2:62:55:8e:ca:d6:04:13:7a:b2: 71:e3:19:42:51:49:4e:20:42:5d:f4:1c:36:2d:6f:65:5a:ab: cb:65:25:47:88:1a:67:6c:53:c7:eb:e3:ee:41:3a:a9:2e:2b: c1:b3:2b:5a:61:9e:8c:97:b3:ec:38:fd:d5:af:3d:32:3e:63: a9:dc:1b:12:bf:04:70:49:7f:75:b5:a2:cf:fd:37:46:9e:38: 86:13:0e:e4:cc:36:f1:c6:ba:b7:e1:e9:5e:ad:9a:d7:d9:36: b3:09:98:8f:2f:f1:a1:ed:e0:13:00:64:5d:23:0c:b5:eb:67: ad:b9:bc:5e:59:f6:b3:a4:1d:f8:82:fa:60:ac:b2:61:f6:79: ec:2b:ae:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwNzIwMTYxMDMyWhcNMjUwNzI3MTYxMDMyWjAYMRYwFAYD VQQDEw02ODdkMTRmOS01ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd/1EjGX+FABdtX+fiOm/jTx/1wK9Nc/Mp7PuiS2Ff3D3owGjLuGaxbzXGLY OoI6Z+6dzqX+Inpt+p0QF2t4sOT131MLNf09TylLuMyMkJNHw91CoSwQR5F4tTER fVNE2WLzDq1fFMJxZE9dtPU7/h53yDHkE1M1cj3DEFGAvk2WHUS1dl9MfotEGu5F AAmP4smiWlhLpHqXUg7f/7DklPkk2WDLNen97Z/8tRyTCfP7lwtvXtVHb2X6fJDG d5r+kemc9KPcTsf++Qla5G0/pLupzxpdMiKVazkRGi75IKM1TCcvPcmAmHdlL5Jm zam2wXvYzSHyiiT3MbRcy8g/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmLEeg6 9TSvHqwffPEk3ERZ7CRDMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXHE1gKNA8OGWE22bVEXz1BuasU8XYVycnW4Q+6/9KR6JU38XRk7Mm I3HzR/Trn150cwBtHw3L6pwkAK7olxsSQFpGQp2AaUS0kRqUt+wm0XmZUNJqfk8f BDrk27JgQW8e/jTW2kbKBtEqBz89FfxBGeLZirJiVY7K1gQTerJx4xlCUUlOIEJd 9Bw2LW9lWqvLZSVHiBpnbFPH6+PuQTqpLivBsytaYZ6Ml7PsOP3Vrz0yPmOp3BsS vwRwSX91taLP/TdGnjiGEw7kzDbxxrq34elerZrX2TazCZiPL/Gh7eATAGRdIwy1 62etubxeWfazpB34gvpgrLJh9nnsK65q -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:10 2025 by rpki-client