$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json) Hash identifier: jxoMGF+tAoAsbQwk1csCvsbF65rHUowMPDgjYZrcFxQ= Subject key identifier: 9B:D9:D6:F9:D2:5E:5D:59:CA:18:7E:05:3D:A9:DC:BE:4B:F9:7C:91 Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft Manifest number: 1A Signing time: Sat 23 Aug 2025 08:09:49 +0000 Manifest this update: Sat 23 Aug 2025 08:09:49 +0000 Manifest next update: Sat 30 Aug 2025 08:09:49 +0000 Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: ZPMJMprPiXQUEWiW7BWPfBgQ/+KXpFiQkKRo83AWs3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Validity Not Before: Aug 23 08:09:49 2025 GMT Not After : Aug 30 08:09:49 2025 GMT Subject: CN=68a9774d-8776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:db:a1:a6:d2:d6:01:00:22:8b:ee:10:82: 26:3a:24:62:87:7e:05:29:f6:cf:33:29:e7:ae:8f: 9f:a0:10:52:1e:b8:81:99:9d:0a:24:6d:31:9f:c6: e1:4a:70:bd:53:6a:04:a3:12:82:13:89:58:fa:69: 84:9c:9f:33:4f:a7:33:ee:73:0a:76:51:11:dd:f4: b4:a2:c4:3c:63:22:08:65:51:0a:8f:24:ed:47:3c: c5:e3:4a:79:f7:f8:c2:85:47:fc:8d:85:93:57:7b: 97:86:63:33:ed:c7:6d:b2:df:b4:6d:2f:52:ad:15: 95:00:fa:01:fa:80:5c:f5:a7:64:57:37:10:f9:cf: 35:5e:0b:b1:5d:d6:89:db:13:fc:5c:02:f3:9a:6d: 18:e9:82:99:0f:24:8b:cb:be:0f:0a:5a:be:47:04: a8:e5:ce:e2:da:94:98:3c:6e:74:1c:82:0b:60:f1: 1d:28:c9:d0:87:46:ae:35:fe:e4:07:b5:77:b1:07: 57:e6:dd:49:6f:ed:ce:7b:35:20:b2:6b:f9:b9:14: 39:aa:6e:26:1b:20:7e:04:cf:14:6e:a7:df:ad:e1: 6d:f8:f0:f5:57:59:82:82:5b:b7:f0:4d:73:b8:1f: 59:9e:30:38:f7:00:69:96:80:c2:6f:a5:99:62:7d: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:D6:F9:D2:5E:5D:59:CA:18:7E:05:3D:A9:DC:BE:4B:F9:7C:91 X509v3 Authority Key Identifier: keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:ba:fc:8a:96:28:91:91:7d:69:88:45:44:45:c6:62:c3: 88:51:cf:a8:46:bf:33:cd:e8:94:7c:34:59:bc:d7:2e:cd:d7: 7d:de:45:4e:6d:14:28:af:c2:d2:53:f9:eb:6e:c7:16:99:84: 78:b4:d2:12:d1:28:86:82:fc:06:81:16:00:6b:5c:b0:48:08: bd:cd:5b:24:0e:1a:24:53:04:7b:1b:9b:70:ca:f0:0b:dd:d8: 5f:5b:c9:21:3d:9c:ef:b4:84:24:d8:b0:b4:76:df:10:f4:31: cf:64:d3:56:9e:a0:42:d4:a3:98:82:c1:1c:0e:9a:92:e7:a4: 15:4f:b5:5a:4e:4c:2c:2a:bb:89:d9:85:2a:d6:af:5b:0c:41: 9a:f7:31:f1:35:6f:03:24:b3:7a:07:6c:37:4e:e1:cf:66:c1: 69:f2:56:2b:68:ce:41:d7:53:0f:62:05:4d:1f:54:f6:ba:37: e4:93:de:1b:07:fe:7c:19:2e:40:05:87:0d:cf:28:37:3b:6c: f3:45:e3:a1:d5:5a:bc:8c:37:67:8d:3d:d9:80:75:12:04:5e: f7:2d:f4:44:1c:27:74:e7:4e:7b:52:6f:93:fa:83:c1:22:f3: e5:a2:75:fc:5f:8f:67:d8:a7:3b:f0:29:b0:78:5f:b2:81:7a: 25:48:72:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw NjI2NTQwNTAeFw0yNTA4MjMwODA5NDlaFw0yNTA4MzAwODA5NDlaMBgxFjAUBgNV BAMTDTY4YTk3NzRkLTg3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkoNuhptLWAQAii+4QgiY6JGKHfgUp9s8zKeeuj5+gEFIeuIGZnQokbTGfxuFK cL1TagSjEoITiVj6aYScnzNPpzPucwp2URHd9LSixDxjIghlUQqPJO1HPMXjSnn3 +MKFR/yNhZNXe5eGYzPtx22y37RtL1KtFZUA+gH6gFz1p2RXNxD5zzVeC7Fd1onb E/xcAvOabRjpgpkPJIvLvg8KWr5HBKjlzuLalJg8bnQcggtg8R0oydCHRq41/uQH tXexB1fm3Ulv7c57NSCya/m5FDmqbiYbIH4EzxRup9+t4W348PVXWYKCW7fwTXO4 H1meMDj3AGmWgMJvpZlifULtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm9nW+dJe XVnKGH4FPancvkv5fJEwHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2Lzc2RjgyMDUwNUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hr RXZIVXFxT1NqUXdZbVZBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLHuvyKliiRkX1piEVERcZiw4hRz6hGvzPN6JR8NFm81y7N133eRU5t FCivwtJT+etuxxaZhHi00hLRKIaC/AaBFgBrXLBICL3NWyQOGiRTBHsbm3DK8Avd 2F9bySE9nO+0hCTYsLR23xD0Mc9k01aeoELUo5iCwRwOmpLnpBVPtVpOTCwqu4nZ hSrWr1sMQZr3MfE1bwMks3oHbDdO4c9mwWnyVitozkHXUw9iBU0fVPa6N+ST3hsH /nwZLkAFhw3PKDc7bPNF46HVWryMN2eNPdmAdRIEXvct9EQcJ3TnTntSb5P6g8Ei 8+Widfxfj2fYpzvwKbB4X7KBeiVIcgY= -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:32 2025 by rpki-client