$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: My5Wwe1Z8z58CQL4TeTpY/NC+TFRYgspG2QpSNUK3Yc= Subject key identifier: 47:84:25:3D:5C:1F:B8:D1:7C:3E:26:49:F7:54:26:74:72:5B:3C:1D Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 0212 Signing time: Tue 09 Sep 2025 02:16:24 +0000 Manifest this update: Tue 09 Sep 2025 02:16:23 +0000 Manifest next update: Tue 16 Sep 2025 02:16:23 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: pJlaQhHDPQhyb3AvHBmVkFUlrcK3hMdfEeBwnIqCcLY=) 2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: TVO1eccZ7Jv3HMD56bPt9VHdqMCi+LIJ7/aVWhXVMSw=) 3: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: pgI9v9tBw4JvLouCdhmI8EFq53pssTwtUNiYfyBQjoo=) 4: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: 9HMzFEkbx1T0ynaVX6uHWObWXzc9PFPAUjEuMjKZdqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Sep 9 02:16:23 2025 GMT Not After : Sep 16 02:16:23 2025 GMT Subject: CN=68bf8df8-8a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:6f:47:c1:12:d1:20:ff:e5:88:04:d3:ef: 18:34:ee:16:0c:a6:64:e9:e3:0d:f4:4f:2b:2d:8c: 20:7c:42:4b:01:6c:c4:64:e7:68:64:a4:57:ec:f1: be:57:f2:3c:a4:49:9a:a0:10:3e:69:97:56:3e:f0: 79:15:58:d9:e4:9a:f2:52:da:fc:3f:d1:c6:b3:5d: 42:9d:3d:68:00:95:27:57:c1:25:ad:5d:fc:25:9e: 95:ec:29:23:c3:df:4d:65:8d:b7:a0:de:76:77:6e: 28:18:c8:c7:3a:58:fe:36:0c:a3:f3:82:e5:23:73: 32:47:46:39:87:c6:87:e8:f0:70:17:8d:c7:30:db: 74:84:21:5c:51:55:8e:e0:91:b3:90:43:d7:69:3f: f5:91:c3:53:86:03:ae:63:ad:59:b4:59:15:65:c2: 16:c5:1e:fc:87:5b:03:e9:5b:96:15:6d:d5:90:5c: 7d:01:90:40:47:eb:54:41:5d:2b:94:b5:c3:91:b7: f3:af:4f:9a:29:e5:31:3d:40:73:f4:2a:cd:a6:59: f4:bf:0b:5a:b5:92:da:79:78:9d:b3:91:39:7c:13: bd:cf:76:85:b2:67:d9:f2:23:d5:40:50:7b:b8:06: 9f:af:c2:a1:fe:19:86:68:ec:53:18:ac:08:e2:3e: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:84:25:3D:5C:1F:B8:D1:7C:3E:26:49:F7:54:26:74:72:5B:3C:1D X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:07:b1:40:b1:aa:29:f3:d0:b7:e2:d4:ae:ab:1a:11:01:69: e5:e3:0f:4f:35:0a:9c:a4:f2:cb:36:4a:de:cf:97:29:e8:bd: 0a:43:fb:5b:e0:cd:a2:1e:4d:5a:ab:0d:10:46:7c:7c:bf:fd: cb:18:4d:c2:c8:52:fe:1e:bc:c2:22:e7:0a:06:1f:55:e5:33: cb:d6:1d:0f:3a:13:12:27:05:41:ca:c2:9d:92:9d:91:04:f6: 39:80:e0:13:b4:48:95:85:9b:b4:58:1f:b1:7c:7b:07:84:d6: df:87:b5:e0:9f:42:f3:51:e7:02:11:46:a7:81:1c:0e:50:2c: de:e7:65:e1:fe:26:57:2e:95:a6:17:37:b7:22:2e:4d:15:f4: bd:91:cf:46:18:cf:db:2e:b9:99:d9:c7:1c:27:b1:95:b9:e7: 7e:20:64:d0:e1:64:a3:19:da:87:61:07:4a:2a:70:e6:d5:5d: 0b:9c:d0:71:70:2a:2d:83:04:7f:a7:bc:98:07:02:52:e3:ba: 7b:4d:8e:ae:9f:60:00:9c:f6:9b:63:46:cf:df:07:92:cf:94: 95:d4:80:ab:ce:dd:a3:dd:4c:6f:9b:f2:7f:db:55:6f:5c:1b: 96:8b:9c:b5:72:5c:4b:3a:9a:bb:bc:ae:86:db:dc:03:ef:3e: 95:99:0d:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUwOTA5MDIxNjIzWhcNMjUwOTE2MDIxNjIzWjAYMRYwFAYD VQQDEw02OGJmOGRmOC04YTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIhvR8ES0SD/5YgE0+8YNO4WDKZk6eMN9E8rLYwgfEJLAWzEZOdoZKRX7PG+ V/I8pEmaoBA+aZdWPvB5FVjZ5JryUtr8P9HGs11CnT1oAJUnV8ElrV38JZ6V7Ckj w99NZY23oN52d24oGMjHOlj+Ngyj84LlI3MyR0Y5h8aH6PBwF43HMNt0hCFcUVWO 4JGzkEPXaT/1kcNThgOuY61ZtFkVZcIWxR78h1sD6VuWFW3VkFx9AZBAR+tUQV0r lLXDkbfzr0+aKeUxPUBz9CrNpln0vwtatZLaeXids5E5fBO9z3aFsmfZ8iPVQFB7 uAafr8Kh/hmGaOxTGKwI4j4N2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeEJT1c H7jRfD4mSfdUJnRyWzwdMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVB7FAsaop89C34tSuqxoRAWnl4w9PNQqcpPLLNkrez5cp6L0KQ/tb 4M2iHk1aqw0QRnx8v/3LGE3CyFL+HrzCIucKBh9V5TPL1h0POhMSJwVBysKdkp2R BPY5gOATtEiVhZu0WB+xfHsHhNbfh7Xgn0LzUecCEUangRwOUCze52Xh/iZXLpWm Fze3Ii5NFfS9kc9GGM/bLrmZ2cccJ7GVued+IGTQ4WSjGdqHYQdKKnDm1V0LnNBx cCotgwR/p7yYBwJS47p7TY6un2AAnPabY0bP3weSz5SV1ICrzt2j3Uxvm/J/21Vv XBuWi5y1clxLOpq7vK6G29wD7z6VmQ3I -----END CERTIFICATE-----Generated at Wed Sep 10 13:30:56 2025 by rpki-client