$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: 9ICrP4WasYC2YX9N07ap7T4BZB1j4kNfNrCXtK3SiLA= Subject key identifier: 3D:16:86:8C:96:78:DD:4C:53:01:F3:B3:F1:82:79:5C:5B:71:7A:94 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 34B6 Signing time: Sun 24 Aug 2025 15:10:57 +0000 Manifest this update: Sun 24 Aug 2025 15:10:57 +0000 Manifest next update: Sun 31 Aug 2025 15:10:57 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: 28zjYL18a0pzQi8iQa9mkyk8sweTk8NdSDEZdnVslHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: Aug 24 15:10:57 2025 GMT Not After : Aug 31 15:10:57 2025 GMT Subject: CN=68ab2b81-ff6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:24:12:7f:85:8c:4c:82:a4:64:f9:62:92: 65:e1:e1:5f:0a:2a:85:6c:ec:c0:0f:57:28:69:bf: bc:08:1a:99:3e:2f:08:01:7b:35:c4:12:5a:45:68: cb:50:ee:ac:05:a8:74:52:3d:57:85:81:86:bf:9d: 52:78:24:a1:70:e0:87:e5:82:3f:9a:d4:3a:a3:e1: a2:3b:18:0f:de:78:8d:e3:a7:3a:c0:37:3c:e2:29: 74:c8:c0:cb:60:56:8d:7f:86:60:28:b2:23:a1:5b: 6f:6e:9e:fe:9b:78:26:dc:70:25:3d:8f:2b:0f:cf: 03:ce:26:96:4f:e5:b2:79:b6:a3:e6:d3:43:47:41: 9a:8f:2b:94:04:0b:54:8f:20:1e:b4:17:a4:80:cf: cb:b2:0a:ef:13:86:55:10:a9:e1:d6:e1:3d:d6:b0: 6c:0a:35:bb:bd:ca:4e:e9:5d:f8:3b:6c:06:a3:71: fc:fe:cb:fd:98:94:8e:fe:03:62:64:9c:83:39:6a: 09:fe:94:a1:b4:4c:b1:17:93:68:4b:86:77:92:23: 4e:7e:8f:53:83:79:5e:b7:8e:bc:7e:69:cc:29:ea: 64:a0:e0:3e:de:97:59:ec:d9:01:0f:d7:cd:b4:fe: af:ff:6f:b4:0c:02:77:b1:77:63:db:71:c7:c8:cf: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:86:8C:96:78:DD:4C:53:01:F3:B3:F1:82:79:5C:5B:71:7A:94 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:76:6a:3f:f4:6c:a1:2a:3a:bb:4c:57:76:c8:20:f3:f3: fd:26:92:b7:00:93:68:8f:f3:55:ce:f8:2c:f0:80:16:47:a9: fb:87:d2:e6:99:5f:a4:36:5e:b3:8f:a6:59:4e:09:a4:b5:22: 21:03:14:1b:fe:c1:58:93:16:8f:41:ea:89:0d:1a:e9:01:93: 16:5c:47:4f:99:3e:df:56:62:7a:30:45:f7:d9:0b:8b:0a:56: 1e:e7:fd:a5:3a:a5:77:e3:34:bf:ec:7c:b5:51:bd:55:3c:b0: 6b:9e:81:6f:39:ec:30:86:30:36:e1:6b:d4:31:42:45:96:67: ff:28:42:52:a9:7a:d4:29:9d:42:e5:de:1a:4f:23:9e:93:1b: 45:d2:0c:f4:76:f8:72:9f:44:c1:77:cc:8a:41:66:a3:15:d1: a5:5b:83:bd:49:ad:ff:08:ac:53:9e:82:cf:8e:1d:41:7a:e3: b2:56:ce:bd:e1:d0:ab:89:ba:d2:8c:95:ed:7f:4f:52:7e:9a: f4:5c:9b:b7:11:16:01:a0:73:a9:34:bc:15:b3:a5:7f:19:58: ce:9d:3c:9b:66:56:0d:5e:04:cb:a8:53:c7:f0:27:9e:7b:fc: 32:67:5d:3c:d5:51:01:fb:d0:66:42:be:51:8f:00:56:ad:65: ba:c3:8b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjUwODI0MTUxMDU3WhcNMjUwODMxMTUxMDU3WjAYMRYwFAYD VQQDEw02OGFiMmI4MS1mZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bskEn+FjEyCpGT5YpJl4eFfCiqFbOzAD1coab+8CBqZPi8IAXs1xBJaRWjL UO6sBah0Uj1XhYGGv51SeCShcOCH5YI/mtQ6o+GiOxgP3niN46c6wDc84il0yMDL YFaNf4ZgKLIjoVtvbp7+m3gm3HAlPY8rD88DziaWT+Wyebaj5tNDR0GajyuUBAtU jyAetBekgM/LsgrvE4ZVEKnh1uE91rBsCjW7vcpO6V34O2wGo3H8/sv9mJSO/gNi ZJyDOWoJ/pShtEyxF5NoS4Z3kiNOfo9Tg3let468fmnMKepkoOA+3pdZ7NkBD9fN tP6v/2+0DAJ3sXdj23HHyM8gBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0WhoyW eN1MUwHzs/GCeVxbcXqUMB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAInnZqP/RsoSo6u0xXdsgg8/P9JpK3AJNoj/NVzvgs8IAWR6n7h9Lm mV+kNl6zj6ZZTgmktSIhAxQb/sFYkxaPQeqJDRrpAZMWXEdPmT7fVmJ6MEX32QuL ClYe5/2lOqV34zS/7Hy1Ub1VPLBrnoFvOewwhjA24WvUMUJFlmf/KEJSqXrUKZ1C 5d4aTyOekxtF0gz0dvhyn0TBd8yKQWajFdGlW4O9Sa3/CKxTnoLPjh1BeuOyVs69 4dCribrSjJXtf09Sfpr0XJu3ERYBoHOpNLwVs6V/GVjOnTybZlYNXgTLqFPH8Cee e/wyZ1081VEB+9BmQr5RjwBWrWW6w4tX -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:53 2025 by rpki-client