$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: g7cKiUjBqZ66o5wCuohfrjCpt2xCjGnHUFMih46qZLI= Subject key identifier: 86:87:1B:36:37:C4:D3:84:49:07:F0:3E:B4:5F:DE:53:1B:81:0F:0C Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 6E Signing time: Wed 17 Sep 2025 07:39:12 +0000 Manifest this update: Wed 17 Sep 2025 07:39:11 +0000 Manifest next update: Wed 24 Sep 2025 07:39:11 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: Dd45ol2zH105BqUVT8r0sTst+3aD1BGCWPw/HZKeWNI=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Sep 17 07:39:11 2025 GMT Not After : Sep 24 07:39:11 2025 GMT Subject: CN=68ca65a0-21c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:a2:2b:63:32:8a:97:fa:57:80:a2:a9:8b: bf:10:e0:f4:21:f3:11:4a:2c:9b:e5:64:8b:65:fa: d5:21:d3:87:78:af:f7:bd:74:c4:03:bf:36:86:59: 0f:b0:28:16:05:8a:62:46:7b:b2:cb:43:7d:bf:cd: 8b:33:da:cf:7e:b0:90:be:52:1c:23:9b:4f:0d:88: 79:06:48:e2:14:17:39:04:3f:ac:31:c0:0f:4a:34: d6:12:d1:85:15:cc:61:9f:77:3e:c7:ba:31:16:c6: f8:c0:5a:7c:2a:83:da:cd:4c:12:53:93:5c:b2:ea: 30:98:3a:c1:b9:3b:da:f2:54:bd:49:4d:5e:4a:cb: 9d:45:62:f3:0f:87:5d:3d:75:9f:d3:9c:84:f8:43: d4:79:de:54:08:c1:91:05:8f:38:6e:57:33:7c:70: e0:cb:0c:e0:ab:b0:39:a0:10:a4:44:55:2e:d9:02: fa:17:84:f7:69:b2:f5:eb:4f:5c:0c:0e:cf:b5:18: 62:e7:8d:7d:24:67:2a:d0:f8:37:f5:cf:eb:3e:4b: 4e:e9:33:16:6c:26:03:93:69:a2:23:53:38:2e:a3: c6:c9:d0:f3:e3:de:9c:6c:a5:c2:9a:47:02:d9:2d: da:39:b2:54:be:77:90:a7:36:03:f1:1e:d3:b7:41: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:1B:36:37:C4:D3:84:49:07:F0:3E:B4:5F:DE:53:1B:81:0F:0C X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5d:31:c7:10:f5:b0:71:bc:97:d0:ba:57:b7:09:69:2b:bc: 35:db:8f:9e:1f:d1:4b:51:dc:c7:07:a3:3d:0a:f8:17:31:f0: 8c:e5:69:2a:4a:ee:81:c6:8a:e7:2e:a9:b7:fa:b0:68:66:a7: cf:bc:1f:93:b4:c2:90:aa:1b:7a:ee:ff:f8:cf:b3:47:b0:0b: fb:f7:fa:fa:9d:62:14:00:b0:71:b0:21:d0:37:0c:92:9a:da: 8f:e9:68:9d:70:cd:bd:33:d1:88:e1:76:ff:0f:40:52:6d:5f: 80:6c:33:68:68:9c:48:21:ac:fd:2a:10:46:67:53:9d:71:da: 11:e3:91:6a:2e:53:f8:3d:7d:6a:19:df:70:a4:9f:a7:6a:88: d5:5b:2b:4c:40:38:b6:1d:c0:99:6f:71:a3:27:9b:1f:41:93: 1f:31:75:88:06:68:33:0f:21:70:a5:9e:ee:c6:fc:b0:82:00: f9:df:1e:e3:a7:56:b4:6a:f5:a0:eb:4c:6b:af:b1:ca:39:f9: 78:1d:a9:c8:c2:1f:9a:42:3c:81:b3:8a:dc:c2:7a:02:78:38: 37:fe:fe:c0:54:ba:50:6f:74:a1:6b:6e:3d:9b:49:bf:dd:5e: fb:6a:01:89:18:a8:9f:31:78:d7:be:b8:10:6f:ad:7a:de:43: 47:b0:0e:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUY4NjExMC8GA1UEBRMoNjc0MTJGMEM3MzBEOUY0NTQ2N0E1MjZDMzgyNUVDMzhG RTcwMEI2MzAeFw0yNTA5MTcwNzM5MTFaFw0yNTA5MjQwNzM5MTFaMBgxFjAUBgNV BAMTDTY4Y2E2NWEwLTIxYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0z6IrYzKKl/pXgKKpi78Q4PQh8xFKLJvlZItl+tUh04d4r/e9dMQDvzaGWQ+w KBYFimJGe7LLQ32/zYsz2s9+sJC+Uhwjm08NiHkGSOIUFzkEP6wxwA9KNNYS0YUV zGGfdz7HujEWxvjAWnwqg9rNTBJTk1yy6jCYOsG5O9ryVL1JTV5Ky51FYvMPh109 dZ/TnIT4Q9R53lQIwZEFjzhuVzN8cODLDOCrsDmgEKREVS7ZAvoXhPdpsvXrT1wM Ds+1GGLnjX0kZyrQ+Df1z+s+S07pMxZsJgOTaaIjUzguo8bJ0PPj3pxspcKaRwLZ Ldo5slS+d5CnNgPxHtO3QRzDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhocbNjfE 04RJB/A+tF/eUxuBDwwwHwYDVR0jBBgwFoAUZ0EvDHMNn0VGelJsOCXsOP5wC2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1Rjg2Lzg4RUQ1Qzg0RUYy QzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0My TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjBFdkRITU5uMFZHZWxKc09DWHNPUDV3QzJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 Rjg2Lzg4RUQ1Qzg0RUYyQzExRUY5QzNGM0M3QkM0RjlBRTAyL1owRXZESE1ObjBW R2VsSnNPQ1hzT1A1d0MyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGRdMccQ9bBxvJfQule3CWkrvDXbj54f0UtR3McHoz0K+Bcx8IzlaSpK 7oHGiucuqbf6sGhmp8+8H5O0wpCqG3ru//jPs0ewC/v3+vqdYhQAsHGwIdA3DJKa 2o/paJ1wzb0z0Yjhdv8PQFJtX4BsM2honEghrP0qEEZnU51x2hHjkWouU/g9fWoZ 33Ckn6dqiNVbK0xAOLYdwJlvcaMnmx9Bkx8xdYgGaDMPIXClnu7G/LCCAPnfHuOn VrRq9aDrTGuvsco5+XgdqcjCH5pCPIGzitzCegJ4ODf+/sBUulBvdKFrbj2bSb/d XvtqAYkYqJ8xeNe+uBBvrXreQ0ewDn8= -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:18 2025 by rpki-client