$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: m8ELMxabYG7FBTFRykmHoVmSnUHTDYCOwFd+O+5Uhtc= Subject key identifier: 55:8D:23:D4:40:BB:81:47:AA:0C:7D:05:A7:B0:BF:E7:7D:AE:25:7E Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0CD5 Signing time: Sun 24 Aug 2025 18:03:33 +0000 Manifest this update: Sun 24 Aug 2025 18:03:32 +0000 Manifest next update: Sun 31 Aug 2025 18:03:32 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: gFroI5Td6xS+bjmtH2/iovYiLijVq1MaSE1yUl2Ukec=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: +d8JTMdE/OZF41ywsfLWbdDiFe60dYPx5jzZe3nPzII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Aug 24 18:03:32 2025 GMT Not After : Aug 31 18:03:32 2025 GMT Subject: CN=68ab53f5-76a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:ff:25:b7:25:ef:79:48:ac:bb:fb:8a:96: e1:a7:eb:32:18:04:02:fc:fd:b8:66:be:58:f9:24: b1:dd:02:0f:7e:15:e3:ca:3b:41:e2:ef:c0:87:9e: 36:4c:e2:d2:41:a2:5b:6a:e7:a9:e0:81:23:45:34: 90:b3:3f:44:1c:1d:e1:19:09:d7:73:39:a6:3f:4b: bd:69:e8:fe:e5:80:9f:3e:16:9b:0a:26:2d:43:62: b5:aa:90:2d:cd:d2:8c:cf:fc:3d:41:06:96:61:94: bd:23:e5:4b:bf:ea:c9:10:f0:a6:6b:0b:57:11:93: 34:d3:df:67:cb:3a:99:b5:d2:c2:71:85:39:59:cf: 39:c9:21:12:15:07:60:1b:f9:ff:00:3f:05:d1:17: c2:65:bc:f0:4b:54:86:79:87:2e:f6:0e:74:18:06: 9e:30:1f:be:37:95:08:3c:43:78:94:c3:06:41:ec: 56:5e:64:7e:71:7f:29:0c:a8:55:d5:e4:8f:42:2b: 6a:fb:a0:71:d6:05:34:00:d8:9f:78:ae:fe:bc:4d: d0:06:19:d5:c3:f3:50:c5:a9:ea:07:ad:96:c6:34: 6d:21:e4:25:8c:76:75:41:a4:db:ca:71:fd:ef:c8: e8:7c:0b:c0:20:df:c9:c4:06:c9:b0:d7:ea:60:bb: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:23:D4:40:BB:81:47:AA:0C:7D:05:A7:B0:BF:E7:7D:AE:25:7E X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b3:d1:d2:ce:e3:d3:4a:3a:ab:89:b7:82:de:55:c4:ef:62: 75:ea:6e:1a:52:9c:31:f3:3a:13:82:f0:cb:7f:03:3c:59:0f: 9f:6f:72:93:4b:51:8f:0c:bc:39:ea:b9:9b:f5:2c:02:4f:ae: 3e:45:de:77:96:7d:bf:81:02:46:0f:f2:a0:12:4e:a5:42:2a: 3a:86:5b:c2:35:6c:21:ee:33:39:ac:20:1b:9b:be:f9:8e:9a: d4:7d:3e:a0:1c:5a:37:db:a0:25:de:85:6f:b1:cf:57:b0:19: 68:b2:77:a7:9b:60:89:d1:b2:e4:dc:13:d8:db:cb:54:f2:c9: c9:7c:9d:80:4d:3a:c6:61:de:ef:1b:29:c8:c8:72:8b:40:5c: 2b:83:49:33:de:8e:cc:b1:0d:79:7c:de:14:ac:65:d3:c1:4d: 10:c3:fc:04:67:20:8d:0a:80:29:15:9f:49:fd:a6:f5:12:81: 00:c5:fa:c8:39:95:cf:aa:2a:d1:c8:f9:fe:ee:65:6c:96:ac: 65:c9:b6:2a:df:16:34:e3:e8:b4:09:fb:d0:45:a8:e6:a3:ad: bc:13:d3:14:37:ce:31:e3:43:be:3b:b1:cb:d1:91:60:68:7c: 11:24:18:40:3a:a4:08:8c:e0:d5:9b:99:be:e6:b3:dc:14:f3: 65:84:05:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUwODI0MTgwMzMyWhcNMjUwODMxMTgwMzMyWjAYMRYwFAYD VQQDEw02OGFiNTNmNS03NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQ3/Jbcl73lIrLv7ipbhp+syGAQC/P24Zr5Y+SSx3QIPfhXjyjtB4u/Ah542 TOLSQaJbauep4IEjRTSQsz9EHB3hGQnXczmmP0u9aej+5YCfPhabCiYtQ2K1qpAt zdKMz/w9QQaWYZS9I+VLv+rJEPCmawtXEZM0099nyzqZtdLCcYU5Wc85ySESFQdg G/n/AD8F0RfCZbzwS1SGeYcu9g50GAaeMB++N5UIPEN4lMMGQexWXmR+cX8pDKhV 1eSPQitq+6Bx1gU0ANifeK7+vE3QBhnVw/NQxanqB62WxjRtIeQljHZ1QaTbynH9 78jofAvAIN/JxAbJsNfqYLtBZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWNI9RA u4FHqgx9Baewv+d9riV+MB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVs9HSzuPTSjqribeC3lXE72J16m4aUpwx8zoTgvDLfwM8WQ+fb3KT S1GPDLw56rmb9SwCT64+Rd53ln2/gQJGD/KgEk6lQio6hlvCNWwh7jM5rCAbm775 jprUfT6gHFo326Al3oVvsc9XsBlosnenm2CJ0bLk3BPY28tU8snJfJ2ATTrGYd7v GynIyHKLQFwrg0kz3o7MsQ15fN4UrGXTwU0Qw/wEZyCNCoApFZ9J/ab1EoEAxfrI OZXPqirRyPn+7mVslqxlybYq3xY04+i0CfvQRajmo628E9MUN84x40O+O7HL0ZFg aHwRJBhAOqQIjODVm5m+5rPcFPNlhAWD -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:10 2025 by rpki-client