$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: Vy9+VZ3wO6y5U1a6a1PMsV51PE1UUqkoD2zb2/UXir0= Subject key identifier: F3:5A:2B:2B:F5:E4:B5:0D:5E:76:D8:D9:92:6F:CE:8D:84:68:1D:12 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 81 Signing time: Fri 05 Sep 2025 07:07:21 +0000 Manifest this update: Fri 05 Sep 2025 07:07:20 +0000 Manifest next update: Fri 12 Sep 2025 07:07:20 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: wh5mQBJAvb44wfCfOCtLI6Jl8fVKldnDdqdOfRa9AAE=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Sep 5 07:07:20 2025 GMT Not After : Sep 12 07:07:20 2025 GMT Subject: CN=68ba8c29-aaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:50:36:91:69:33:93:83:d6:0b:82:04:b1: 04:34:b4:19:30:86:5c:82:81:c0:5a:b9:71:7f:00: 6c:2b:af:be:e2:d6:72:2c:cb:25:04:1f:44:e1:cc: ce:9d:70:81:0b:4e:67:c4:6f:89:93:04:77:a1:29: 5c:94:6f:78:9c:2f:d5:5d:81:af:77:3d:65:22:b0: c3:3e:9f:a2:ba:fd:b6:d5:bb:f1:78:41:bb:7c:5c: dc:d2:61:c2:c1:9d:19:44:06:a0:d1:50:7a:30:5d: 62:00:e9:a8:22:04:43:88:2d:d1:ae:b6:1b:e9:42: ed:32:d5:89:bc:72:a0:61:fb:f7:9d:62:23:27:0b: 38:89:12:aa:87:47:dd:88:fe:53:55:82:ce:8c:9f: 6b:b3:46:99:e9:0c:42:5f:31:bd:e1:24:2c:e0:05: 9c:42:a8:ad:2b:01:6b:51:c5:10:c8:cd:a3:18:c1: 11:bc:9d:b9:20:9b:1c:49:80:f7:a1:ae:94:57:ec: 2f:ff:ba:a6:6d:db:54:7c:89:ef:67:71:f2:62:6a: aa:01:1a:76:e5:f2:52:f6:79:93:9e:65:8a:56:da: 7f:1f:b8:9c:7a:c2:e0:ec:fc:ef:f4:d6:23:f5:20: 40:ff:53:6d:fc:ae:04:e9:44:a4:29:90:23:9e:99: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5A:2B:2B:F5:E4:B5:0D:5E:76:D8:D9:92:6F:CE:8D:84:68:1D:12 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a6:a6:ad:ec:cc:98:e8:16:83:83:23:73:71:73:43:78:e9: 21:bf:e9:13:2c:7e:8d:dd:93:48:dd:00:f3:4e:c6:b6:c6:9a: 61:d8:8e:bc:d6:6a:b3:2f:e7:1f:2e:13:9b:29:ef:3d:76:43: 61:e6:63:c5:a0:b7:f5:41:76:58:a5:8d:61:ba:a1:51:f1:a4: 6f:1e:e7:fd:55:db:de:58:22:5f:e0:3d:6e:5e:bd:11:44:13: 26:07:ec:f3:42:03:02:c2:e1:ce:16:c3:6f:40:8f:32:d1:50: ba:34:81:7e:f9:2d:39:26:3b:78:bb:3e:56:7a:52:06:59:df: ae:6c:fb:a6:0c:d2:7a:d4:32:6e:01:cc:1e:5e:cf:8b:46:d5: 2a:cd:64:42:21:dc:8d:02:f8:35:59:e3:be:d7:e4:0c:b6:09: 2e:0c:b2:eb:a0:6b:48:36:10:0e:16:da:fc:69:74:a2:90:5e: 97:12:e2:15:d6:f8:32:77:ac:f2:86:f8:f1:25:52:af:2c:a5: a2:89:39:35:e0:aa:6d:85:43:7d:0e:5a:05:84:45:65:77:4c: 79:93:08:0c:17:dd:56:3a:91:ca:bb:0d:22:b6:0c:09:0a:56: 51:42:c9:09:b5:8d:6d:be:f4:b7:12:95:32:3b:6b:84:be:a7: e8:aa:99:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDY1QThEMDhCMkVDOEY0MkQ0M0I5QUE3QTQyMzUxNzJC QjdFRDE2NjUwHhcNMjUwOTA1MDcwNzIwWhcNMjUwOTEyMDcwNzIwWjAYMRYwFAYD VQQDEw02OGJhOGMyOS1hYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI9QNpFpM5OD1guCBLEENLQZMIZcgoHAWrlxfwBsK6++4tZyLMslBB9E4czO nXCBC05nxG+JkwR3oSlclG94nC/VXYGvdz1lIrDDPp+iuv221bvxeEG7fFzc0mHC wZ0ZRAag0VB6MF1iAOmoIgRDiC3RrrYb6ULtMtWJvHKgYfv3nWIjJws4iRKqh0fd iP5TVYLOjJ9rs0aZ6QxCXzG94SQs4AWcQqitKwFrUcUQyM2jGMERvJ25IJscSYD3 oa6UV+wv/7qmbdtUfInvZ3HyYmqqARp25fJS9nmTnmWKVtp/H7icesLg7Pzv9NYj 9SBA/1Nt/K4E6USkKZAjnplGGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNaKyv1 5LUNXnbY2ZJvzo2EaB0SMB8GA1UdIwQYMBaAFGWo0IsuyPQtQ7mqekI1Fyu37RZl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82NEJBNEJBOEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlDMUR1YXA2UWpVWEs3ZnRG bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82NEJBNEJBOEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlD MUR1YXA2UWpVWEs3ZnRGbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUpqat7MyY6BaDgyNzcXNDeOkhv+kTLH6N3ZNI3QDzTsa2xpph2I68 1mqzL+cfLhObKe89dkNh5mPFoLf1QXZYpY1huqFR8aRvHuf9VdveWCJf4D1uXr0R RBMmB+zzQgMCwuHOFsNvQI8y0VC6NIF++S05Jjt4uz5WelIGWd+ubPumDNJ61DJu AcweXs+LRtUqzWRCIdyNAvg1WeO+1+QMtgkuDLLroGtINhAOFtr8aXSikF6XEuIV 1vgyd6zyhvjxJVKvLKWiiTk14KpthUN9DloFhEVld0x5kwgMF91WOpHKuw0itgwJ ClZRQskJtY1tvvS3EpUyO2uEvqfoqpm5 -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:17 2025 by rpki-client