$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: JAopon24x8Kt2x6gdG2EO4dnaLb02vG84FX5xnMJrq0= Subject key identifier: FF:4C:C8:94:B4:46:86:CA:D2:76:E5:69:F8:E8:76:E8:C1:2A:72:F1 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: EA Signing time: Fri 19 Sep 2025 05:55:59 +0000 Manifest this update: Fri 19 Sep 2025 05:55:58 +0000 Manifest next update: Fri 26 Sep 2025 05:55:58 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: 7uypI9GB4mbNuv1auxKqoUMUnO/w1vqLaELPEl5Lnws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Sep 19 05:55:58 2025 GMT Not After : Sep 26 05:55:58 2025 GMT Subject: CN=68ccf06f-fc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:e6:d0:81:b9:65:31:a5:30:bd:b2:8b:ab: 5d:0d:44:b5:92:f5:ef:9b:cd:4c:db:2c:6d:5a:0f: ad:83:2b:a4:62:98:c3:c8:4b:18:3c:27:10:f1:89: 69:f9:1d:01:f2:47:76:84:c9:11:8b:97:32:a1:d9: ce:73:e7:3d:ee:8b:fb:8a:c3:60:35:85:43:0a:d7: ce:1b:70:06:22:75:23:32:34:f8:aa:11:4c:b4:2c: 87:76:b4:8c:f4:31:7f:e4:6f:a7:8f:d4:a7:d0:e4: 83:9c:95:e5:51:bb:e1:d4:ec:b7:ab:fc:61:c8:d2: fa:5a:d2:68:00:e8:77:0b:de:ce:31:a5:34:72:f3: 4e:bf:59:13:4a:4c:d1:2d:52:b6:fe:26:a3:42:92: 42:97:94:e3:65:47:80:22:e2:8b:29:b5:e1:a9:1e: 2b:81:8a:41:f3:33:6a:c2:a7:4f:d8:fb:2f:4f:3e: 76:75:f4:43:06:ac:f0:5f:7f:38:04:5e:77:54:4c: ae:6c:7d:6c:ca:68:53:07:df:94:f8:09:44:dc:4a: d9:8a:26:bc:82:37:ee:80:3e:06:13:53:21:9c:6b: db:50:1d:13:76:9a:31:75:6a:68:e7:cc:b9:f6:8d: 1b:90:36:0c:81:75:53:0a:1d:cc:3e:bb:ba:b1:89: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:C8:94:B4:46:86:CA:D2:76:E5:69:F8:E8:76:E8:C1:2A:72:F1 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d0:6e:7a:2f:ee:0f:84:7c:37:d9:51:99:40:be:a2:11:28: 22:5e:fa:c5:6f:58:99:ca:e7:2f:28:ff:96:bf:43:2e:52:db: f4:1c:d3:1d:79:d5:30:1f:e4:17:cc:56:3f:8d:1f:3f:4e:99: 41:e0:0b:9b:9f:e5:fe:d8:43:02:92:79:ea:a2:37:66:7b:fe: 31:9d:b1:c6:79:18:14:70:09:1e:51:09:47:5c:52:99:5c:be: 09:8d:8b:ad:e5:cf:b9:75:7f:68:f7:44:ba:6e:58:51:74:87: 10:eb:01:30:dc:73:78:a4:3b:4b:b0:24:53:ce:1d:1b:ef:44: 1b:8b:11:93:95:01:81:ae:19:33:3b:30:b1:09:3c:d8:84:f8: 73:9c:7c:e5:61:41:8e:cb:92:d0:2b:33:6f:1d:36:cb:54:24: 18:28:76:38:78:6b:1e:5b:8c:18:28:29:aa:d4:78:d9:e8:a7: 24:0d:b7:01:d4:b4:59:a5:45:00:0b:b9:f2:cf:24:4f:c9:24: 86:19:a3:50:91:e8:e9:a8:97:16:a9:f6:c4:4c:c9:64:ff:2e: 09:84:e9:7e:11:0f:8b:62:1c:4e:7c:2c:70:5c:02:a8:a8:12: 4f:ad:45:a0:ad:d0:cc:e5:d2:d6:c3:d8:3a:22:6d:14:6d:f1: dc:7e:da:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUwOTE5MDU1NTU4WhcNMjUwOTI2MDU1NTU4WjAYMRYwFAYD VQQDEw02OGNjZjA2Zi1mYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T3m0IG5ZTGlML2yi6tdDUS1kvXvm81M2yxtWg+tgyukYpjDyEsYPCcQ8Ylp +R0B8kd2hMkRi5cyodnOc+c97ov7isNgNYVDCtfOG3AGInUjMjT4qhFMtCyHdrSM 9DF/5G+nj9Sn0OSDnJXlUbvh1Oy3q/xhyNL6WtJoAOh3C97OMaU0cvNOv1kTSkzR LVK2/iajQpJCl5TjZUeAIuKLKbXhqR4rgYpB8zNqwqdP2PsvTz52dfRDBqzwX384 BF53VEyubH1symhTB9+U+AlE3ErZiia8gjfugD4GE1MhnGvbUB0TdpoxdWpo58y5 9o0bkDYMgXVTCh3MPru6sYkyKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9MyJS0 RobK0nblafjodujBKnLxMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa0G56L+4PhHw32VGZQL6iESgiXvrFb1iZyucvKP+Wv0MuUtv0HNMd edUwH+QXzFY/jR8/TplB4Aubn+X+2EMCknnqojdme/4xnbHGeRgUcAkeUQlHXFKZ XL4JjYut5c+5dX9o90S6blhRdIcQ6wEw3HN4pDtLsCRTzh0b70QbixGTlQGBrhkz OzCxCTzYhPhznHzlYUGOy5LQKzNvHTbLVCQYKHY4eGseW4wYKCmq1HjZ6KckDbcB 1LRZpUUAC7nyzyRPySSGGaNQkejpqJcWqfbETMlk/y4JhOl+EQ+LYhxOfCxwXAKo qBJPrUWgrdDM5dLWw9g6Im0UbfHcftp/ -----END CERTIFICATE-----Generated at Fri Sep 19 10:16:52 2025 by rpki-client