$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json) Hash identifier: n88us4f08eEg8tHkBBD0stAmU+Nn/aTrSGwRN8WLn4M= Subject key identifier: 6B:57:CB:AE:3E:F5:91:DD:C7:2E:0F:3D:62:EB:8E:3E:28:1A:84:04 Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Certificate serial: 1D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft Manifest number: 1D7E Signing time: Sun 24 Aug 2025 16:06:27 +0000 Manifest this update: Sun 24 Aug 2025 16:06:26 +0000 Manifest next update: Sun 31 Aug 2025 16:06:26 +0000 Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: aS98PdAjt/NlkJsXcCdulBxifJ8ChISf95kJYkZYKwg=) 2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: djmV6ni7hy6C8m5F1gtlxw3KFQjLB6LT9Z3a9xMILMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7561 (0x1d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Validity Not Before: Aug 24 16:06:26 2025 GMT Not After : Aug 31 16:06:26 2025 GMT Subject: CN=68ab3882-dcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:4e:9e:b6:b2:93:3d:2b:9b:78:a1:31:17: a7:d5:b7:c4:da:54:22:6c:e4:b4:ce:37:b2:40:52: 57:7c:70:47:7e:59:05:8c:73:f6:f7:1c:49:ce:5f: 43:4d:10:4f:36:41:9a:63:1a:eb:80:3e:be:88:5c: 13:04:1f:7e:af:f2:79:15:ff:e3:65:e6:bf:69:4b: 63:38:fd:4a:f2:d2:d4:f0:be:12:66:3f:af:2f:ae: e4:d3:16:76:f3:c4:c8:ba:4c:4c:e8:a6:0f:b0:c2: 62:54:d8:e1:2d:ea:f9:de:5e:27:5f:70:17:d6:ab: 90:0a:f0:ac:4a:46:39:26:e2:d5:2b:8d:68:b9:27: 53:c3:8e:98:3a:b2:5c:8d:a6:22:8a:f2:ac:8b:9a: 25:41:a6:51:4f:24:3b:09:fe:77:73:62:75:1c:14: 19:82:a2:b2:ef:8c:d8:5c:6c:99:60:15:0a:08:e6: df:68:1d:85:a8:15:97:16:08:bb:78:47:27:11:f2: f6:98:fa:dd:53:ce:dc:30:72:6d:42:b8:e7:f5:8b: a1:0c:7c:d6:cd:10:3e:85:38:9a:2d:00:3a:bc:45: d2:f2:0e:46:e5:17:ba:57:d0:4e:71:eb:de:57:18: 2d:4a:0a:2d:f7:42:c8:6e:37:03:ff:a3:93:62:4c: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:57:CB:AE:3E:F5:91:DD:C7:2E:0F:3D:62:EB:8E:3E:28:1A:84:04 X509v3 Authority Key Identifier: keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f3:f5:21:3b:1c:27:14:41:8a:6b:1d:d1:ad:be:1b:2f:79: c9:f0:95:e0:24:12:7b:5e:bc:2a:0d:28:84:ef:4c:68:96:d6: 25:16:36:47:5a:b3:10:d2:8c:e2:c3:fa:00:e3:cc:b7:85:37: 22:7e:8f:a4:86:73:d0:2e:17:b2:1e:0c:fc:de:29:0a:39:15: 7e:88:05:78:5b:01:4a:df:9b:aa:46:37:2d:35:5e:50:61:78: 5a:8a:ad:52:e5:4b:ce:2f:d7:18:88:62:65:fe:92:41:7a:7e: 2b:4b:94:3c:3d:dc:5e:4d:65:ad:56:65:94:f1:cb:91:73:2e: 93:72:b8:fe:26:49:cb:1f:59:bc:2e:be:f7:52:cc:3f:e5:ac: 0d:a0:b3:54:89:d5:f6:be:fa:64:b0:c0:48:4a:fe:dc:aa:44: 3f:a7:ef:2f:fa:fd:dd:48:b5:7d:ab:95:1d:5f:aa:c1:f3:4f: a5:46:a8:95:fd:71:e3:0a:b1:25:4e:2c:63:8a:b5:6e:88:2c: 2f:ec:4f:f9:32:3e:65:53:7c:d2:3d:76:d3:03:ab:fb:f5:96: 39:47:72:fa:b1:d2:dd:e2:5d:10:f8:35:cc:9a:44:e0:11:69: 37:26:e2:bb:2f:a2:37:dc:f1:1f:7a:bf:4c:40:8e:9f:d0:d8: e2:8b:46:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlENEExMTAvBgNVBAUTKDY0NkIxQzQxQTgxRkY3RTU4MkI1RUNEQzFDRUY1NENF NjExNTI1NjMwHhcNMjUwODI0MTYwNjI2WhcNMjUwODMxMTYwNjI2WjAYMRYwFAYD VQQDEw02OGFiMzg4Mi1kY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOROnraykz0rm3ihMRen1bfE2lQibOS0zjeyQFJXfHBHflkFjHP29xxJzl9D TRBPNkGaYxrrgD6+iFwTBB9+r/J5Ff/jZea/aUtjOP1K8tLU8L4SZj+vL67k0xZ2 88TIukxM6KYPsMJiVNjhLer53l4nX3AX1quQCvCsSkY5JuLVK41ouSdTw46YOrJc jaYiivKsi5olQaZRTyQ7Cf53c2J1HBQZgqKy74zYXGyZYBUKCObfaB2FqBWXFgi7 eEcnEfL2mPrdU87cMHJtQrjn9YuhDHzWzRA+hTiaLQA6vEXS8g5G5Re6V9BOceve VxgtSgot90LIbjcD/6OTYkwIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtXy64+ 9ZHdxy4PPWLrjj4oGoQEMB8GA1UdIwQYMBaAFGRrHEGoH/flgrXs3BzvVM5hFSVj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUQ0QS8yNDgxMDNBNEFD OTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjktV0N0ZXpjSE85VXptRVZK V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pHc2NRYWdmOS1XQ3RlemNITzlVem1FVkpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUQ0QS8yNDgxMDNBNEFDOTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjkt V0N0ZXpjSE85VXptRVZKV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw8/UhOxwnFEGKax3Rrb4bL3nJ8JXgJBJ7XrwqDSiE70xoltYlFjZH WrMQ0oziw/oA48y3hTcifo+khnPQLheyHgz83ikKORV+iAV4WwFK35uqRjctNV5Q YXhaiq1S5UvOL9cYiGJl/pJBen4rS5Q8PdxeTWWtVmWU8cuRcy6Tcrj+JknLH1m8 Lr73Usw/5awNoLNUidX2vvpksMBISv7cqkQ/p+8v+v3dSLV9q5UdX6rB80+lRqiV /XHjCrElTixjirVuiCwv7E/5Mj5lU3zSPXbTA6v79ZY5R3L6sdLd4l0Q+DXMmkTg EWk3JuK7L6I33PEfer9MQI6f0Njii0YS -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:20 2025 by rpki-client