$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: OaDE5rpZsn74SylgSxH1//IUKsTKfSym0cqx2hHsTfQ= Subject key identifier: 84:11:4E:85:CF:61:A7:D3:E8:A6:36:BF:04:40:94:97:A8:EC:F8:A5 Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0625 Signing time: Thu 18 Sep 2025 23:05:20 +0000 Manifest this update: Thu 18 Sep 2025 23:05:19 +0000 Manifest next update: Thu 25 Sep 2025 23:05:19 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: bBS8vQF2djmUOqOyXgkpRf8nLVkqZk24uvw3AheoBas=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Sep 18 23:05:19 2025 GMT Not After : Sep 25 23:05:19 2025 GMT Subject: CN=68cc902f-1398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:31:d4:2e:a8:d2:ee:ed:d8:54:dc:c7:4d: 5c:34:d5:17:76:76:90:33:63:09:b2:b8:bc:a7:b4: fe:4a:1e:f1:74:6b:e4:15:e0:57:d5:4a:2d:e5:9b: 23:71:ff:a7:23:a2:b5:82:d8:45:14:04:99:bc:83: 57:d3:29:85:bb:d2:6d:0f:dd:fd:f5:a7:db:1b:9a: 23:67:29:d9:84:1e:b8:b0:c3:62:90:c0:c9:12:94: 8c:03:fb:fe:83:03:48:3a:82:8c:02:32:55:57:ad: 55:d9:04:fc:fa:79:9c:e4:8e:88:68:8b:21:e0:6c: 18:21:66:75:a6:d4:32:04:40:79:b0:c5:dc:72:35: ae:ca:2a:de:7c:b9:1f:4e:74:90:5e:7c:83:80:dc: 62:75:66:70:17:0d:bb:3f:b8:70:8e:ac:65:45:d0: 01:44:1b:62:9e:71:b2:d9:1e:09:7b:0c:72:e8:d8: 76:19:44:90:be:cb:5c:54:bf:d7:43:5a:dd:1e:c9: 00:f9:75:f6:ef:ab:fe:78:18:b8:cb:ed:f7:61:35: d7:a7:9a:a5:2a:fa:92:8a:3b:a7:d8:ea:4c:1f:82: e0:2b:59:40:a4:29:f1:c2:66:c7:9f:79:4b:b0:3b: 4b:5f:b0:61:fe:d5:d2:53:88:40:69:97:db:ac:99: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:11:4E:85:CF:61:A7:D3:E8:A6:36:BF:04:40:94:97:A8:EC:F8:A5 X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:0b:62:bf:b6:3a:e7:2d:a2:a0:18:a4:6b:96:47:01:b8:ea: d2:dd:4d:7b:94:06:cd:3a:41:c2:41:d2:a0:69:64:70:73:71: 98:c3:bc:2c:95:17:25:ae:16:3e:6b:37:d1:46:eb:6e:fb:4e: 89:07:08:1e:4d:d7:cd:44:d0:90:9d:57:0d:89:3e:16:26:ef: 7d:1f:a3:5d:29:c5:5e:4a:ee:f7:8e:9e:c0:44:90:49:b0:50: cf:19:f4:f8:00:71:7f:29:9c:84:35:a7:99:cb:10:df:07:9f: 1e:b0:97:08:71:a5:b0:c5:f9:56:12:ea:66:aa:58:af:8f:e7: b3:69:82:75:ef:40:88:d4:b1:47:04:72:03:98:e5:eb:01:37: 8f:df:d7:a4:9d:8a:97:5a:a1:57:ed:45:aa:ac:2e:77:16:d2: 35:09:ce:11:63:e2:60:f3:a5:69:09:c2:e1:25:ff:b6:c9:28: 64:62:fb:5f:ac:b1:4e:d4:b1:7b:7f:49:f9:db:2e:72:5c:70: 27:ce:38:05:09:30:c3:cd:a2:a8:d7:92:bf:59:ac:6e:ac:9b: 9a:1e:83:f5:9e:62:cb:9e:25:f0:03:fe:98:c1:c8:7a:db:f1: 49:6d:50:30:aa:e2:3b:15:d4:c4:0e:96:5d:b1:d8:12:8c:97: 3e:b4:95:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUwOTE4MjMwNTE5WhcNMjUwOTI1MjMwNTE5WjAYMRYwFAYD VQQDEw02OGNjOTAyZi0xMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu0x1C6o0u7t2FTcx01cNNUXdnaQM2MJsri8p7T+Sh7xdGvkFeBX1Uot5Zsj cf+nI6K1gthFFASZvINX0ymFu9JtD9399afbG5ojZynZhB64sMNikMDJEpSMA/v+ gwNIOoKMAjJVV61V2QT8+nmc5I6IaIsh4GwYIWZ1ptQyBEB5sMXccjWuyirefLkf TnSQXnyDgNxidWZwFw27P7hwjqxlRdABRBtinnGy2R4Jewxy6Nh2GUSQvstcVL/X Q1rdHskA+XX276v+eBi4y+33YTXXp5qlKvqSijun2OpMH4LgK1lApCnxwmbHn3lL sDtLX7Bh/tXSU4hAaZfbrJmBTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQRToXP YafT6KY2vwRAlJeo7PilMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbC2K/tjrnLaKgGKRrlkcBuOrS3U17lAbNOkHCQdKgaWRwc3GYw7ws lRclrhY+azfRRutu+06JBwgeTdfNRNCQnVcNiT4WJu99H6NdKcVeSu73jp7ARJBJ sFDPGfT4AHF/KZyENaeZyxDfB58esJcIcaWwxflWEupmqlivj+ezaYJ170CI1LFH BHIDmOXrATeP39eknYqXWqFX7UWqrC53FtI1Cc4RY+Jg86VpCcLhJf+2yShkYvtf rLFO1LF7f0n52y5yXHAnzjgFCTDDzaKo15K/WaxurJuaHoP1nmLLniXwA/6Ywch6 2/FJbVAwquI7FdTEDpZdsdgSjJc+tJWQ -----END CERTIFICATE-----Generated at Fri Sep 19 14:05:47 2025 by rpki-client