$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft File: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json) Hash identifier: +EqF17MvgpHf0pKtQvQ1U5KtC2xcTUdTjfsmjz7RJF8= Subject key identifier: 3A:26:55:19:B0:5E:58:37:EE:A5:60:36:D7:A8:4E:6E:6A:1F:F5:AE Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft Manifest number: 16 Signing time: Wed 17 Sep 2025 08:49:37 +0000 Manifest this update: Wed 17 Sep 2025 08:49:37 +0000 Manifest next update: Wed 24 Sep 2025 08:49:37 +0000 Files and hashes: 1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: 0TpptHsIXV30k71llnLe0q20npZBt6afnjJYFNXog/Q=) 2: 43B0D4D6860B11F0AA069368C4F9AE02.roa (hash: j4MN4GDiZALuh9mzrRymlr+JVjstJ2rpB7t0KrHzUnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Validity Not Before: Sep 17 08:49:37 2025 GMT Not After : Sep 24 08:49:37 2025 GMT Subject: CN=68ca7621-9162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:ef:82:2c:01:35:7f:24:62:a3:fe:38:36: 67:ae:1a:fc:b9:bb:e7:5e:47:60:cf:bb:57:b9:8b: 92:d6:12:a6:60:05:e3:10:10:8c:df:24:12:7a:d3: 2f:d9:cf:ee:dc:bf:1d:b6:67:6f:1a:42:94:0c:f1: 7b:d8:c0:5d:31:a2:9d:a9:25:5e:93:3d:7e:bc:03: 49:83:4b:50:21:48:95:68:ab:ba:95:2a:ee:e3:eb: a2:52:58:1c:94:ac:71:85:d1:bb:ae:fc:a5:59:b6: 99:ef:82:c2:b7:8f:48:15:1f:46:f8:8b:a5:c8:c5: aa:c3:1a:8f:d2:ec:6d:39:69:2f:b3:56:62:c4:95: 61:1c:aa:35:41:c7:64:f8:10:9e:86:ef:c8:27:19: 99:c2:b9:20:73:6d:7f:60:57:3c:7a:27:f1:fb:33: ee:c5:14:0b:08:ad:12:f6:3e:6b:b3:06:1d:bb:83: b5:65:b0:f6:3d:84:ad:2e:44:c2:bb:d1:e0:96:c1: b3:26:6d:88:22:6c:21:09:f8:99:ec:1f:07:df:3d: 68:2b:21:61:a0:70:8c:fc:82:8f:6c:e9:67:85:18: f6:25:04:56:91:94:84:fc:6a:0f:c1:de:a7:5f:2a: a1:a6:71:fc:48:78:58:cd:f0:05:30:15:06:38:a9: fa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:26:55:19:B0:5E:58:37:EE:A5:60:36:D7:A8:4E:6E:6A:1F:F5:AE X509v3 Authority Key Identifier: keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7b:24:1a:32:3f:e1:a9:67:bf:de:a1:d2:28:37:4d:76:58: c7:16:2f:31:56:3b:4a:e8:97:ae:d2:b5:df:56:95:7a:10:24: 72:d3:bd:8a:f1:0f:c0:0d:64:3a:a6:5a:59:54:8a:b9:57:25: db:f1:e6:98:84:50:b9:cc:ca:15:c2:7c:ac:23:10:64:6d:1e: b2:6b:9d:b2:8d:05:90:e6:8e:76:31:13:c5:cc:74:e1:1b:b6: 71:3a:1e:cf:f1:b0:f3:63:e8:3e:c6:00:d9:d6:40:7d:f3:28: 04:55:85:aa:58:98:5f:bc:d8:8e:29:d5:22:f8:c8:5d:b9:e7: ec:b8:26:8f:07:33:9f:55:06:dc:53:7d:12:c1:00:c3:e4:2d: bc:ea:80:a1:af:cd:64:8c:6e:75:73:92:4e:53:d7:b6:91:e5: 26:4b:3e:1b:04:23:07:7e:6d:e9:2b:e7:b7:f8:28:57:18:b2: 05:b4:3f:68:45:31:e5:d3:23:2d:48:93:85:e5:4d:49:1d:91: 86:c9:a5:04:98:54:c1:01:b7:bb:98:2c:2b:19:10:4b:ed:69: 50:56:3e:43:6f:d0:58:cc:b0:66:c4:b7:47:48:8c:b4:d2:d9: 3f:8e:88:96:23:80:12:62:b6:c2:ea:a8:4c:60:fa:d8:73:95: 6d:9a:3f:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzA2NTExMC8GA1UEBRMoNjU0QkNGRDcwQUJDNjBCNTQxMzkyODUzMDVFRkQwRTMx NUMzMzY4RTAeFw0yNTA5MTcwODQ5MzdaFw0yNTA5MjQwODQ5MzdaMBgxFjAUBgNV BAMTDTY4Y2E3NjIxLTkxNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdRO+CLAE1fyRio/44NmeuGvy5u+deR2DPu1e5i5LWEqZgBeMQEIzfJBJ60y/Z z+7cvx22Z28aQpQM8XvYwF0xop2pJV6TPX68A0mDS1AhSJVoq7qVKu7j66JSWByU rHGF0buu/KVZtpnvgsK3j0gVH0b4i6XIxarDGo/S7G05aS+zVmLElWEcqjVBx2T4 EJ6G78gnGZnCuSBzbX9gVzx6J/H7M+7FFAsIrRL2PmuzBh27g7VlsPY9hK0uRMK7 0eCWwbMmbYgibCEJ+JnsHwffPWgrIWGgcIz8go9s6WeFGPYlBFaRlIT8ag/B3qdf KqGmcfxIeFjN8AUwFQY4qfqjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOiZVGbBe WDfupWA216hObmof9a4wHwYDVR0jBBgwFoAUZUvP1wq8YLVBOShTBe/Q4xXDNo4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMDY1L0RCMzUxNEIwODIz MzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5v NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlV2UDF3cThZTFZCT1NoVEJlX1E0eFhETm80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MDY1L0RCMzUxNEIwODIzMzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxW Qk9TaFRCZV9RNHhYRE5vNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADR7JBoyP+GpZ7/eodIoN012WMcWLzFWO0rol67Std9WlXoQJHLTvYrx D8ANZDqmWllUirlXJdvx5piEULnMyhXCfKwjEGRtHrJrnbKNBZDmjnYxE8XMdOEb tnE6Hs/xsPNj6D7GANnWQH3zKARVhapYmF+82I4p1SL4yF255+y4Jo8HM59VBtxT fRLBAMPkLbzqgKGvzWSMbnVzkk5T17aR5SZLPhsEIwd+bekr57f4KFcYsgW0P2hF MeXTIy1Ik4XlTUkdkYbJpQSYVMEBt7uYLCsZEEvtaVBWPkNv0FjMsGbEt0dIjLTS 2T+OiJYjgBJitsLqqExg+thzlW2aP3M= -----END CERTIFICATE-----Generated at Fri Sep 19 00:56:31 2025 by rpki-client