$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft File: sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json) Hash identifier: EYvKcbYfT97VIjbhdiEmRFqV059jglB/asm9Twwz6rI= Subject key identifier: B2:53:C5:8A:EC:2E:C7:A3:4F:E8:E8:A9:E1:5C:F5:CA:F3:17:5A:B0 Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC Certificate issuer: /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft Manifest number: 0189 Signing time: Thu 21 Aug 2025 03:40:07 +0000 Manifest this update: Thu 21 Aug 2025 03:40:07 +0000 Manifest next update: Thu 28 Aug 2025 03:40:07 +0000 Files and hashes: 1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: t3qN6fRY4929jhONAFZ+PvslQ5xCFe3tyziC5i+r6aQ=) 2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: nABejWMWIKR8qcS8KhtXdqBPw2NE9lHrgwgK6ncqFFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC Validity Not Before: Aug 21 03:40:07 2025 GMT Not After : Aug 28 03:40:07 2025 GMT Subject: CN=68a69517-ddbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:ca:96:d3:e2:fd:a7:53:81:10:d8:2c:e2: b0:94:4f:b4:a8:ed:ef:47:b4:09:b7:b4:b7:f6:03: 93:b7:5e:af:57:41:fb:cf:ab:0d:29:e0:d1:a1:af: a6:c1:e9:ec:a4:26:ec:27:df:e8:9e:e0:da:d7:3d: 38:45:84:bc:b5:8f:4b:ca:22:37:5c:96:15:49:f0: bd:57:bd:e2:b3:ab:93:60:d3:cc:1f:dd:d7:7b:8b: 3c:a8:10:b6:fa:e5:dd:b2:54:08:85:bb:1d:cc:fc: 73:d7:e6:e2:a7:85:20:98:d7:89:18:f7:68:f4:09: e0:5c:0e:19:1f:3c:45:30:49:7e:2f:c9:56:c0:91: e2:ea:22:03:34:00:70:a0:49:a0:5a:aa:ce:47:00: 59:4e:74:fa:14:08:6c:28:fa:84:eb:8e:b5:5a:be: ba:88:f4:7f:d2:54:df:d3:a2:09:a7:ba:5c:6b:a5: 93:45:a6:fa:a2:32:2c:9f:b5:f6:56:ac:ec:92:68: 89:6c:ab:9f:11:8e:d7:99:23:70:64:93:28:53:60: a1:b0:69:ae:b4:27:a8:aa:c2:f5:fc:04:08:bd:47: cc:c4:50:b4:19:09:c8:45:37:f0:87:25:9c:46:3f: 44:40:58:35:4d:a2:fb:b2:dc:c4:5d:1f:cb:6b:3e: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:53:C5:8A:EC:2E:C7:A3:4F:E8:E8:A9:E1:5C:F5:CA:F3:17:5A:B0 X509v3 Authority Key Identifier: keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d0:21:41:70:ad:e7:33:53:6d:1c:c1:da:9c:27:46:58:b1: 01:bf:d0:b7:0e:ee:1e:1a:a3:ef:e3:65:9a:f1:e5:aa:e8:06: 26:d9:d0:41:ad:7b:6d:2c:9b:ea:2d:28:ea:fe:54:d8:4d:1c: 6c:84:f0:89:81:2a:41:18:e2:96:ee:f2:8f:9b:f7:fe:d3:1e: 9f:28:6d:5d:79:93:6f:a2:b1:09:cf:b2:8a:0d:20:01:56:eb: ee:39:b6:7f:da:3a:1f:fb:5b:a5:5f:f2:e2:b2:e9:c0:ad:01: be:cf:af:50:a1:31:30:1e:58:09:83:f4:1a:c4:f8:99:49:54: d9:83:4f:55:43:91:e6:40:e0:01:1a:bf:bb:36:a7:4a:84:bd: b2:17:07:34:b9:9c:c1:e5:5c:bb:7c:81:bf:1d:b5:26:1c:e7: 68:3e:58:5a:a8:e8:47:44:7c:28:36:b9:0f:92:7c:83:2c:ed: 4c:24:28:97:aa:1a:37:85:5c:aa:b0:ef:cd:16:f5:5c:2b:0c: 54:9b:ef:66:67:d7:79:4c:36:1b:59:c6:2b:05:a6:00:64:63: ad:9c:a8:63:03:e8:37:dc:b3:a5:97:1a:32:0f:77:eb:02:6e: 68:74:55:df:c7:83:40:b8:8a:e2:a6:bf:5a:9a:ce:0a:4e:2a: 37:68:06:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFREYxMTAvBgNVBAUTKEIxOTJBRDQ0NERFMUYyREU3NUJFQkExRUVGRDEyMkVF Q0Y3RDc3Q0MwHhcNMjUwODIxMDM0MDA3WhcNMjUwODI4MDM0MDA3WjAYMRYwFAYD VQQDEw02OGE2OTUxNy1kZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aLKltPi/adTgRDYLOKwlE+0qO3vR7QJt7S39gOTt16vV0H7z6sNKeDRoa+m wenspCbsJ9/onuDa1z04RYS8tY9LyiI3XJYVSfC9V73is6uTYNPMH93Xe4s8qBC2 +uXdslQIhbsdzPxz1+bip4UgmNeJGPdo9AngXA4ZHzxFMEl+L8lWwJHi6iIDNABw oEmgWqrORwBZTnT6FAhsKPqE6461Wr66iPR/0lTf06IJp7pca6WTRab6ojIsn7X2 VqzskmiJbKufEY7XmSNwZJMoU2ChsGmutCeoqsL1/AQIvUfMxFC0GQnIRTfwhyWc Rj9EQFg1TaL7stzEXR/Laz4mxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJTxYrs LsejT+joqeFc9crzF1qwMB8GA1UdIwQYMBaAFLGSrURN4fLedb66Hu/RIu7PfXfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREVERi9CMkQ2MDk5RTJC MjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0NTF2cm9lNzlFaTdzOTlk OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaS3RSRTNoOHQ1MXZyb2U3OUVpN3M5OWQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REVERi9CMkQ2MDk5RTJCMjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0 NTF2cm9lNzlFaTdzOTlkOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr0CFBcK3nM1NtHMHanCdGWLEBv9C3Du4eGqPv42Wa8eWq6AYm2dBB rXttLJvqLSjq/lTYTRxshPCJgSpBGOKW7vKPm/f+0x6fKG1deZNvorEJz7KKDSAB VuvuObZ/2jof+1ulX/LisunArQG+z69QoTEwHlgJg/QaxPiZSVTZg09VQ5HmQOAB Gr+7NqdKhL2yFwc0uZzB5Vy7fIG/HbUmHOdoPlhaqOhHRHwoNrkPknyDLO1MJCiX qho3hVyqsO/NFvVcKwxUm+9mZ9d5TDYbWcYrBaYAZGOtnKhjA+g33LOllxoyD3fr Am5odFXfx4NAuIripr9ams4KTio3aAZx -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:41 2025 by rpki-client