$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: C4wfVjdMbAKrScHN0qnkKTVjvJt0apTBQM2Yu/E0F6Y= Subject key identifier: 37:04:CF:9E:33:26:CD:34:05:08:29:F5:52:33:6F:3A:4D:1E:B9:79 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 246F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 245F Signing time: Wed 20 Aug 2025 15:50:34 +0000 Manifest this update: Wed 20 Aug 2025 15:50:33 +0000 Manifest next update: Wed 27 Aug 2025 15:50:33 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: WpGCauHTyRfadGJ983gWRUMidtCOYqpagTyxvAxN+bw=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9327 (0x246f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Aug 20 15:50:33 2025 GMT Not After : Aug 27 15:50:33 2025 GMT Subject: CN=68a5eeca-368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:e7:32:90:6e:56:9f:a2:1e:7b:ac:7f:ee: 34:fa:14:bf:1c:7a:98:bc:9c:ec:29:a6:ca:12:8c: 69:33:da:34:3e:9d:97:ae:ce:15:19:21:55:ef:c5: a5:32:97:fe:fd:35:97:92:6d:5c:4f:21:32:91:4f: 3f:b6:b2:d0:13:04:5f:de:af:b9:69:f5:fa:e7:b2: de:36:9c:95:d0:ad:0a:70:3e:b9:cd:0a:64:da:84: 92:ff:55:c6:a8:f4:ad:de:a2:ba:cc:1f:d9:f8:b1: 79:0f:e9:e6:41:82:c2:54:e8:33:08:4d:01:4e:ff: 60:cf:30:af:ea:5a:51:ce:d8:b4:d8:cc:ca:82:b5: 42:4a:73:72:ea:f4:1c:15:c2:f2:ab:c8:c2:26:9d: 3f:07:1f:bd:94:e0:24:fc:cf:6a:bd:cd:f0:20:2d: 1e:67:9c:3a:e9:0c:11:2a:35:36:b1:8b:7e:eb:4f: a8:20:39:8a:61:28:27:65:37:ff:fd:69:e1:e5:ad: 82:94:f3:9c:e8:df:64:08:9c:b2:bc:0f:06:ef:64: 06:6b:dc:20:70:b8:00:1a:a1:36:6e:60:4b:71:ee: 97:d3:3c:ee:9e:61:17:2c:38:88:77:48:7b:70:7c: dd:2e:63:8e:18:b1:53:71:85:db:e2:aa:e3:fa:52: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:CF:9E:33:26:CD:34:05:08:29:F5:52:33:6F:3A:4D:1E:B9:79 X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:57:43:e2:e7:e0:f5:b5:a7:2b:00:e1:02:d4:12:52:ca:87: e9:c7:af:f3:8a:71:43:02:7a:82:01:09:ac:84:8d:2a:6b:dd: 5f:3c:89:7b:c1:a8:a8:73:da:0b:2e:d1:05:7f:fd:91:76:4b: 51:f8:74:1a:f2:75:c6:42:42:d9:cf:00:51:ca:7c:73:ab:50: 4b:77:04:bb:14:9f:a4:b2:d2:76:d2:20:e5:9b:50:a6:92:66: a2:97:ee:74:22:10:02:22:4e:2e:6f:45:58:12:4e:69:92:d2: 75:53:d0:6b:52:c8:08:f5:2b:64:bd:1d:67:34:eb:aa:67:11: 3a:a0:45:e3:4a:ad:2d:22:de:d2:f2:a6:f6:6f:07:f2:c5:87: 76:59:ec:c2:95:37:10:4f:2b:b0:97:d9:2b:e3:80:1a:bd:67: a5:00:9d:1b:cb:4a:17:98:fd:2b:36:93:10:0d:13:9e:15:92: 03:ff:28:59:46:bd:33:f3:ef:ca:ed:d7:d3:6f:ed:ff:26:1e: 61:51:f6:92:ba:8e:0e:f5:7d:03:74:2f:01:09:9b:be:32:0a: f3:32:3f:cd:c8:1c:f6:02:1b:43:71:75:c3:99:cb:67:1c:6e: de:6c:2a:0d:e5:f0:07:e4:83:e4:07:35:0d:a8:6a:06:e5:08: 16:56:6d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUwODIwMTU1MDMzWhcNMjUwODI3MTU1MDMzWjAYMRYwFAYD VQQDEw02OGE1ZWVjYS0zNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn3nMpBuVp+iHnusf+40+hS/HHqYvJzsKabKEoxpM9o0Pp2Xrs4VGSFV78Wl Mpf+/TWXkm1cTyEykU8/trLQEwRf3q+5afX657LeNpyV0K0KcD65zQpk2oSS/1XG qPSt3qK6zB/Z+LF5D+nmQYLCVOgzCE0BTv9gzzCv6lpRzti02MzKgrVCSnNy6vQc FcLyq8jCJp0/Bx+9lOAk/M9qvc3wIC0eZ5w66QwRKjU2sYt+60+oIDmKYSgnZTf/ /Wnh5a2ClPOc6N9kCJyyvA8G72QGa9wgcLgAGqE2bmBLce6X0zzunmEXLDiId0h7 cHzdLmOOGLFTcYXb4qrj+lJu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcEz54z Js00BQgp9VIzbzpNHrl5MB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUV0Pi5+D1tacrAOEC1BJSyofpx6/zinFDAnqCAQmshI0qa91fPIl7 waioc9oLLtEFf/2RdktR+HQa8nXGQkLZzwBRynxzq1BLdwS7FJ+kstJ20iDlm1Cm kmail+50IhACIk4ub0VYEk5pktJ1U9BrUsgI9StkvR1nNOuqZxE6oEXjSq0tIt7S 8qb2bwfyxYd2WezClTcQTyuwl9kr44AavWelAJ0by0oXmP0rNpMQDROeFZID/yhZ Rr0z8+/K7dfTb+3/Jh5hUfaSuo4O9X0DdC8BCZu+MgrzMj/NyBz2AhtDcXXDmctn HG7ebCoN5fAH5IPkBzUNqGoG5QgWVm2P -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:24 2025 by rpki-client