$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: BZWEWVE2G5KWgmTyrP7PfiCynuvpV7LxYoneoTI6Eyo= Subject key identifier: 5F:92:CB:2D:92:40:B3:92:04:58:69:48:A2:BF:70:B5:2E:6A:31:79 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 01CF Signing time: Tue 19 Aug 2025 03:07:53 +0000 Manifest this update: Tue 19 Aug 2025 03:07:52 +0000 Manifest next update: Tue 26 Aug 2025 03:07:52 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: 35F2xMQGLrdGVc5QnHI6fJ4/b0LBclpYYA5/6ThsF4o=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: vkUKnag58zCpuCP8+f6HBj43+NKzxFLQMFl2RAEd1t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Aug 19 03:07:52 2025 GMT Not After : Aug 26 03:07:52 2025 GMT Subject: CN=68a3ea88-7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:6b:97:1a:03:38:61:aa:ff:8e:56:94:42: b6:a3:3b:e6:51:23:63:f8:0c:94:cc:6e:df:57:36: 63:4d:2d:e1:65:c1:67:d2:ec:8a:3d:e2:d6:39:49: b0:ac:07:fe:c9:b7:6b:e8:cb:63:6b:ae:44:38:c0: ac:02:13:69:73:57:17:bd:8c:43:5b:f5:96:56:07: 79:60:47:26:00:a4:61:c9:c8:5c:e0:df:74:77:dd: b3:e8:0b:58:c3:d1:34:40:71:91:d2:ca:18:b7:71: 9f:7d:da:d7:c0:a3:1f:85:4f:09:58:3d:92:ca:07: 4f:ae:58:a3:6d:1a:f9:47:0f:ef:91:04:91:31:67: a7:94:b0:48:59:bd:34:1e:9a:60:29:81:1d:d3:71: 76:b0:37:05:6a:e8:90:5b:d5:83:0b:56:f2:6c:ef: 61:22:50:82:85:89:76:9b:af:d3:88:5c:04:0a:ab: 57:8f:23:ea:f3:67:67:85:eb:b9:55:5c:7b:a5:46: c3:38:da:ce:04:c3:f2:2d:d3:01:91:01:6d:f2:0c: b0:6a:f9:be:6c:c1:93:82:03:f3:71:6d:ee:34:52: 3a:ad:79:31:5e:71:a8:2e:44:09:bc:a8:db:b2:e3: b2:b4:89:a0:1c:c1:d1:0f:ed:7e:9d:1f:22:c2:2f: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:CB:2D:92:40:B3:92:04:58:69:48:A2:BF:70:B5:2E:6A:31:79 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:05:41:68:41:0f:b7:00:b9:c3:06:4e:b7:c1:9a:e6:f6:4f: ec:19:96:cb:ae:e9:f7:ee:74:c1:e2:b4:35:50:44:b6:89:12: 0d:5e:70:23:71:bf:2a:84:82:d5:b8:a1:ad:d4:b1:7a:e5:fa: 7e:e3:8b:a9:94:89:3e:1a:0d:81:37:b0:51:48:80:f5:79:90: 11:a7:78:96:bb:6c:00:22:be:d4:db:c5:d3:f9:98:1a:ea:f1: 6a:5e:46:99:69:1b:3c:de:bd:d3:f4:72:64:7e:2c:fd:45:f1: a4:11:3a:15:53:5c:19:32:a7:a3:10:1f:11:52:a1:d5:d9:92: 63:a2:d3:f9:f9:1c:cc:a2:58:a4:d6:62:01:5e:99:cc:53:f0: 7b:a1:a2:69:9b:f5:a8:44:05:cd:8d:6d:88:25:02:c9:9a:14: df:74:ba:75:30:ad:c7:a6:d1:60:0b:aa:59:e7:b1:79:0b:cf: f3:cb:7a:a6:be:90:11:44:cc:e9:b0:b3:b5:e1:4f:0f:a6:e5: ef:fd:27:08:0f:c8:fa:7c:3e:2b:ae:23:56:d1:6e:46:26:df: ba:a9:ea:65:c3:d7:dd:fb:b8:9b:bc:45:4e:68:d6:e0:7f:1d: f0:40:ee:bc:8c:50:03:6a:ee:ba:94:51:07:72:9d:58:02:22: 37:fa:13:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjUwODE5MDMwNzUyWhcNMjUwODI2MDMwNzUyWjAYMRYwFAYD VQQDEw02OGEzZWE4OC03MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU5rlxoDOGGq/45WlEK2ozvmUSNj+AyUzG7fVzZjTS3hZcFn0uyKPeLWOUmw rAf+ybdr6Mtja65EOMCsAhNpc1cXvYxDW/WWVgd5YEcmAKRhychc4N90d92z6AtY w9E0QHGR0soYt3GffdrXwKMfhU8JWD2SygdPrlijbRr5Rw/vkQSRMWenlLBIWb00 HppgKYEd03F2sDcFauiQW9WDC1bybO9hIlCChYl2m6/TiFwECqtXjyPq82dnheu5 VVx7pUbDONrOBMPyLdMBkQFt8gywavm+bMGTggPzcW3uNFI6rXkxXnGoLkQJvKjb suOytImgHMHRD+1+nR8iwi9kyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Syy2S QLOSBFhpSKK/cLUuajF5MB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSBUFoQQ+3ALnDBk63wZrm9k/sGZbLrun37nTB4rQ1UES2iRINXnAj cb8qhILVuKGt1LF65fp+44uplIk+Gg2BN7BRSID1eZARp3iWu2wAIr7U28XT+Zga 6vFqXkaZaRs83r3T9HJkfiz9RfGkEToVU1wZMqejEB8RUqHV2ZJjotP5+RzMolik 1mIBXpnMU/B7oaJpm/WoRAXNjW2IJQLJmhTfdLp1MK3HptFgC6pZ57F5C8/zy3qm vpARRMzpsLO14U8PpuXv/ScID8j6fD4rriNW0W5GJt+6qeplw9fd+7ibvEVOaNbg fx3wQO68jFADau66lFEHcp1YAiI3+hP6 -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:17 2025 by rpki-client