$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: yMz66IIB7Q4bdScXK9KEu35mbNOW/+iwyLRxjzepKRY= Subject key identifier: EF:B6:44:0C:0F:8A:CA:32:44:EF:6E:F6:EA:62:81:D8:28:AF:C0:87 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0C74 Signing time: Sun 24 Aug 2025 18:19:14 +0000 Manifest this update: Sun 24 Aug 2025 18:19:14 +0000 Manifest next update: Sun 31 Aug 2025 18:19:14 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: s7Y+LgK0lcjjhTFcyFCNuGrJhTJnRbf7S9iaoK2lURQ=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Aug 24 18:19:14 2025 GMT Not After : Aug 31 18:19:14 2025 GMT Subject: CN=68ab57a2-e28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:65:71:09:27:c2:42:e3:1a:09:27:b3:27: dd:8f:b6:8d:2d:b9:f9:64:c6:1d:bc:ef:79:43:00: c4:8a:7d:16:e8:8a:fa:d1:e6:c5:6d:29:9e:46:33: 5b:7e:8c:15:79:3e:a8:8a:98:af:64:05:b8:3e:1c: 75:62:80:36:b1:4d:a4:5f:81:65:55:f2:a1:9c:74: b4:c1:c7:89:fe:3c:ef:85:84:a0:8e:7c:f9:66:1b: 0e:0f:f0:d6:c6:24:cb:a8:92:77:30:7c:12:24:50: 8f:bf:5e:6e:74:dd:0a:03:18:c3:64:a5:09:3a:e5: d9:86:e2:b4:74:08:03:97:5c:df:a6:0e:93:6d:9b: c0:9d:af:72:2c:27:be:d4:15:9b:05:6f:0a:1b:be: 2a:b1:a9:0a:3c:f8:2f:aa:50:ac:80:99:c3:f7:f9: 4f:52:a2:ab:0a:9a:17:cd:4b:8c:8f:a5:7d:43:4e: 83:27:ce:f9:a4:25:c1:4c:36:50:b5:4f:01:6b:a3: 48:fb:11:4c:02:d9:1d:dd:74:61:ae:5f:a9:79:09: d3:f2:b3:1e:c3:88:c9:4c:3f:88:34:2b:4e:66:cd: 94:dd:af:50:04:6b:70:bd:8a:d3:23:54:b8:75:5e: 1a:41:54:d2:e4:15:8d:54:53:4a:3a:ca:8b:a4:03: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:44:0C:0F:8A:CA:32:44:EF:6E:F6:EA:62:81:D8:28:AF:C0:87 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:37:b0:6a:40:15:62:0e:51:87:96:39:69:29:08:01:60:85: 8b:81:bf:3c:bf:fd:55:47:2b:79:98:35:54:ac:14:56:20:28: b8:e9:28:f7:d5:a1:c4:70:01:79:3e:57:07:a6:bf:f7:29:61: 6c:b2:d4:c0:f7:ae:65:1c:ae:2b:01:e0:c1:a2:02:f1:1d:b2: 7a:30:0e:44:d6:56:0d:05:ba:1e:f6:0d:ff:f6:66:0b:6d:5f: b8:1d:4a:a5:c7:85:d5:cf:d7:45:46:92:04:d9:cd:4f:0b:ea: 8a:ae:89:92:c1:7f:ea:64:0b:6a:fd:fc:9f:f9:67:ad:05:48: c5:3c:0f:88:6a:f9:5e:57:04:d3:5d:7a:bb:af:dd:25:5e:6a: 73:16:18:7f:6f:21:36:7b:78:05:c4:33:7d:d4:40:6b:5a:ca: 61:ee:4f:47:46:5d:03:de:ab:a5:5a:5b:97:b4:a6:5a:f0:63: 6d:44:3e:8a:01:f4:6b:5e:b0:b2:58:9a:3e:12:b7:3a:3c:45: ad:69:92:bb:1d:0a:08:51:cc:db:6c:ca:9e:78:0e:3f:d9:23: f1:8a:01:a2:2c:51:17:a1:27:2a:01:45:60:dc:9f:cf:52:af: c3:ee:95:0f:60:86:ea:67:79:3a:88:c9:0c:4f:50:8d:94:7e: d7:4d:bd:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUwODI0MTgxOTE0WhcNMjUwODMxMTgxOTE0WjAYMRYwFAYD VQQDEw02OGFiNTdhMi1lMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqxlcQknwkLjGgknsyfdj7aNLbn5ZMYdvO95QwDEin0W6Ir60ebFbSmeRjNb fowVeT6oipivZAW4Phx1YoA2sU2kX4FlVfKhnHS0wceJ/jzvhYSgjnz5ZhsOD/DW xiTLqJJ3MHwSJFCPv15udN0KAxjDZKUJOuXZhuK0dAgDl1zfpg6TbZvAna9yLCe+ 1BWbBW8KG74qsakKPPgvqlCsgJnD9/lPUqKrCpoXzUuMj6V9Q06DJ875pCXBTDZQ tU8Ba6NI+xFMAtkd3XRhrl+peQnT8rMew4jJTD+INCtOZs2U3a9QBGtwvYrTI1S4 dV4aQVTS5BWNVFNKOsqLpANmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+2RAwP isoyRO9u9upigdgor8CHMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvN7BqQBViDlGHljlpKQgBYIWLgb88v/1VRyt5mDVUrBRWICi46Sj3 1aHEcAF5PlcHpr/3KWFsstTA965lHK4rAeDBogLxHbJ6MA5E1lYNBboe9g3/9mYL bV+4HUqlx4XVz9dFRpIE2c1PC+qKromSwX/qZAtq/fyf+WetBUjFPA+IavleVwTT XXq7r90lXmpzFhh/byE2e3gFxDN91EBrWsph7k9HRl0D3qulWluXtKZa8GNtRD6K AfRrXrCyWJo+Erc6PEWtaZK7HQoIUczbbMqeeA4/2SPxigGiLFEXoScqAUVg3J/P Uq/D7pUPYIbqZ3k6iMkMT1CNlH7XTb2e -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:19 2025 by rpki-client