$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: HLyCTvSVzTvpk0nO+trPHNirVbJpqLDiabrK2UutPJ0= Subject key identifier: 6F:39:0D:2A:21:AE:77:6B:78:A6:A0:39:24:13:84:1F:0A:A9:12:D9 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 15CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 15CD Signing time: Sun 24 Aug 2025 16:44:36 +0000 Manifest this update: Sun 24 Aug 2025 16:44:35 +0000 Manifest next update: Sun 31 Aug 2025 16:44:35 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: HGB8Q5YlIXgcakjYKRYZYoPqCn+Y4PYNGz564RL7uMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5581 (0x15cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Aug 24 16:44:35 2025 GMT Not After : Aug 31 16:44:35 2025 GMT Subject: CN=68ab4173-6ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:94:fd:a9:5c:b8:4a:eb:06:86:92:ae:19:dd: 5f:15:72:e7:03:a4:85:28:44:37:19:af:f6:4b:bb: e8:66:3d:df:41:da:70:a9:53:89:ca:6a:0b:f4:1d: 44:92:85:07:46:6c:61:5c:42:96:59:80:f4:e0:6d: b0:e9:1a:58:1c:7b:1b:60:9f:f9:54:7a:22:7a:b0: 4d:be:b5:3f:1f:f3:df:83:04:77:90:87:ec:6e:af: 73:9f:f0:bc:01:e1:23:ae:36:e6:60:df:26:d1:b4: 43:be:93:71:f9:f7:d7:99:1c:f8:b7:e4:e2:4c:c9: 66:f3:ed:a5:97:8e:e7:c9:31:b1:43:27:5c:75:b6: 9c:4a:08:b7:db:b7:8f:a7:92:71:a4:59:4b:6b:10: ad:3e:b1:e4:5f:a9:bc:a9:13:09:b6:aa:9a:83:f9: 17:11:83:8f:c6:bd:36:2e:c6:0d:cb:16:4b:8a:53: 4f:a2:7f:8a:91:46:e8:73:a2:b1:e0:8d:9a:fa:15: 26:4c:d9:df:2b:e9:a2:2d:02:6e:79:a2:af:f5:c1: 50:c0:71:d6:db:25:68:af:a4:bc:bc:75:02:ff:19: de:27:9b:7e:d3:86:88:12:5e:1b:fd:48:b2:a7:02: 7d:31:6e:96:86:29:98:ee:5a:e9:40:68:21:95:62: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:39:0D:2A:21:AE:77:6B:78:A6:A0:39:24:13:84:1F:0A:A9:12:D9 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cc:b1:c1:0f:87:d6:36:83:25:96:63:0b:4d:54:bb:74:9a: 32:9c:28:c4:1c:3d:03:35:ec:55:0c:08:44:db:f6:b5:04:ba: d5:75:f4:72:2c:7a:83:27:48:2e:86:b1:d5:7a:26:4f:c2:da: 94:e9:5b:b4:8e:62:95:e8:35:0c:4a:8f:88:ae:89:ee:25:7f: 76:e5:9f:a2:64:39:fc:57:15:3a:eb:60:7d:25:66:be:73:84: 1c:a3:79:fa:6c:bc:bf:39:7c:ba:f5:f1:ac:be:41:36:a0:d6: ea:68:36:14:7a:ef:ea:10:bf:af:30:23:00:23:88:8e:53:17: 84:70:be:bd:4e:e6:25:db:d4:c1:59:ff:30:17:41:f1:bf:b4: c5:e2:e8:6f:b5:0d:52:26:e5:73:fe:5a:61:fb:bd:6b:ad:7f: 5b:d8:66:2a:1b:d1:96:99:5c:f7:2d:c6:40:d8:da:cc:24:8e: 5d:ea:b2:9e:80:d7:55:b6:15:97:2f:07:0e:29:b2:12:fa:c7: 46:de:71:ed:48:64:9a:15:18:56:a2:7a:3a:f3:22:fb:46:05: 47:9d:63:86:51:cb:f7:26:be:5b:ed:42:dc:9a:05:88:58:7e: b0:6b:34:02:59:c0:1d:d3:9a:4b:df:f0:a9:91:70:11:73:94: ef:3f:96:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUwODI0MTY0NDM1WhcNMjUwODMxMTY0NDM1WjAYMRYwFAYD VQQDEw02OGFiNDE3My02YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JT9qVy4SusGhpKuGd1fFXLnA6SFKEQ3Ga/2S7voZj3fQdpwqVOJymoL9B1E koUHRmxhXEKWWYD04G2w6RpYHHsbYJ/5VHoierBNvrU/H/PfgwR3kIfsbq9zn/C8 AeEjrjbmYN8m0bRDvpNx+ffXmRz4t+TiTMlm8+2ll47nyTGxQydcdbacSgi327eP p5JxpFlLaxCtPrHkX6m8qRMJtqqag/kXEYOPxr02LsYNyxZLilNPon+KkUboc6Kx 4I2a+hUmTNnfK+miLQJueaKv9cFQwHHW2yVor6S8vHUC/xneJ5t+04aIEl4b/Uiy pwJ9MW6WhimY7lrpQGghlWL6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG85DSoh rndreKagOSQThB8KqRLZMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlzLHBD4fWNoMllmMLTVS7dJoynCjEHD0DNexVDAhE2/a1BLrVdfRy LHqDJ0guhrHVeiZPwtqU6Vu0jmKV6DUMSo+IronuJX925Z+iZDn8VxU662B9JWa+ c4Qco3n6bLy/OXy69fGsvkE2oNbqaDYUeu/qEL+vMCMAI4iOUxeEcL69TuYl29TB Wf8wF0Hxv7TF4uhvtQ1SJuVz/lph+71rrX9b2GYqG9GWmVz3LcZA2NrMJI5d6rKe gNdVthWXLwcOKbIS+sdG3nHtSGSaFRhWono68yL7RgVHnWOGUcv3Jr5b7ULcmgWI WH6wazQCWcAd05pL3/CpkXARc5TvP5a/ -----END CERTIFICATE-----Generated at Sun Aug 24 22:05:02 2025 by rpki-client