$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: nVRAG+AFA6UJsJuSgJ91qQ2OUUzvMFrZb7eH6SBbqO0= Subject key identifier: DB:07:0F:8F:F9:B9:08:2F:5C:A7:EF:F0:FA:C4:33:06:B6:4A:3D:32 Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 067A Signing time: Sat 06 Sep 2025 22:46:16 +0000 Manifest this update: Sat 06 Sep 2025 22:46:15 +0000 Manifest next update: Sat 13 Sep 2025 22:46:15 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: E0blrajVgg4xmIrYMeOmWPzL430R8kJABGbu2Oitk2k=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Sep 6 22:46:15 2025 GMT Not After : Sep 13 22:46:15 2025 GMT Subject: CN=68bcb9b7-715e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:fd:43:66:6f:24:6d:a8:c0:8e:7d:bd:64: 66:5e:f8:1c:f3:7b:06:f8:ac:11:51:da:30:a1:09: 8b:4c:69:1f:3d:f9:d0:bd:53:60:e8:12:d3:77:f8: dd:d2:fb:05:49:9e:6c:ce:a0:bc:a1:e6:b2:7f:7b: d6:36:e6:32:65:c1:a3:ff:37:5e:f9:b2:58:e5:7c: 78:12:50:a7:8e:68:f7:e8:f3:fc:c0:ff:03:e2:c8: 54:38:a3:c9:c4:61:09:39:bd:b4:68:5a:45:6f:1c: 62:81:45:3d:fb:78:74:1b:d0:2c:ce:5a:d5:13:40: 33:de:62:5f:b5:22:e3:61:62:06:8f:be:20:06:7e: 11:fc:6a:b3:77:b4:83:7e:cc:ce:ee:07:d3:b7:77: 6c:75:99:41:e7:d8:5d:49:51:b8:6a:63:f8:04:bb: 03:a1:59:e8:7f:2c:d1:2d:04:ef:f3:e4:46:55:a1: ce:23:05:88:86:ce:f7:02:d1:22:79:36:1d:88:67: b2:9c:52:45:a1:54:b6:55:6d:ba:90:0d:88:a2:93: b1:60:b6:28:ac:b3:ae:7b:a3:8c:64:dd:64:a0:5f: 9b:8d:00:1b:cc:db:f4:8b:61:8d:74:55:a0:ec:d5: 51:8f:62:d4:08:8a:2f:8b:14:31:ab:c8:aa:7a:ff: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:07:0F:8F:F9:B9:08:2F:5C:A7:EF:F0:FA:C4:33:06:B6:4A:3D:32 X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9b:cc:9a:8e:80:c2:22:2b:eb:0d:e2:40:b0:7a:3b:40:70: 73:dd:8a:ac:a3:a6:ee:89:c2:b6:33:47:11:e9:03:b5:eb:ca: 79:b8:cb:f5:52:7a:b5:60:24:2e:9f:78:c3:44:e4:d7:19:bb: e9:12:29:f1:92:74:d4:fb:14:d3:10:fc:3c:bd:5d:b1:e4:43: 93:a9:38:a1:9d:40:c2:b6:4c:39:99:fa:1c:c6:d3:6d:05:90: 30:33:bd:64:1f:26:49:f5:d2:13:f0:22:b3:27:93:ec:cb:a9: 07:dd:c5:1b:6e:55:1e:18:f7:48:d7:c7:8c:84:c7:41:4c:b6: 47:2c:95:4f:63:4a:29:44:ba:95:3c:19:ad:e7:5f:c9:b0:6a: e7:51:bb:82:50:fc:43:2b:b0:a3:c2:82:71:2d:dd:40:80:f0: 6d:57:bd:53:43:1d:53:09:6e:9e:34:c7:97:2f:e8:4f:41:1a: be:40:bd:89:40:5f:df:c8:8e:c7:aa:b2:ef:29:49:03:f0:5a: 53:94:24:0e:fd:07:6e:5f:be:99:88:d1:ea:44:5b:16:c9:b4: 4c:a8:41:a4:f6:db:e5:11:4b:2c:72:6c:e9:f0:ba:f8:13:95: 50:97:8d:9a:24:c3:15:f1:e0:4d:f2:46:cf:27:74:60:fe:82: 11:14:fc:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjUwOTA2MjI0NjE1WhcNMjUwOTEzMjI0NjE1WjAYMRYwFAYD VQQDEw02OGJjYjliNy03MTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV/9Q2ZvJG2owI59vWRmXvgc83sG+KwRUdowoQmLTGkfPfnQvVNg6BLTd/jd 0vsFSZ5szqC8oeayf3vWNuYyZcGj/zde+bJY5Xx4ElCnjmj36PP8wP8D4shUOKPJ xGEJOb20aFpFbxxigUU9+3h0G9AszlrVE0Az3mJftSLjYWIGj74gBn4R/Gqzd7SD fszO7gfTt3dsdZlB59hdSVG4amP4BLsDoVnofyzRLQTv8+RGVaHOIwWIhs73AtEi eTYdiGeynFJFoVS2VW26kA2IopOxYLYorLOue6OMZN1koF+bjQAbzNv0i2GNdFWg 7NVRj2LUCIovixQxq8iqev9UhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsHD4/5 uQgvXKfv8PrEMwa2Sj0yMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnm8yajoDCIivrDeJAsHo7QHBz3Yqso6buicK2M0cR6QO168p5uMv1 Unq1YCQun3jDROTXGbvpEinxknTU+xTTEPw8vV2x5EOTqTihnUDCtkw5mfocxtNt BZAwM71kHyZJ9dIT8CKzJ5Psy6kH3cUbblUeGPdI18eMhMdBTLZHLJVPY0opRLqV PBmt51/JsGrnUbuCUPxDK7CjwoJxLd1AgPBtV71TQx1TCW6eNMeXL+hPQRq+QL2J QF/fyI7HqrLvKUkD8FpTlCQO/QduX76ZiNHqRFsWybRMqEGk9tvlEUsscmzp8Lr4 E5VQl42aJMMV8eBN8kbPJ3Rg/oIRFPwF -----END CERTIFICATE-----Generated at Mon Sep 8 04:14:22 2025 by rpki-client