$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: jmDFUVssJe5ozUaHAWGdDispknRvJvDwp00shY2tdTE= Subject key identifier: 69:5C:35:B4:C4:D6:63:CC:1C:F2:8F:48:F7:9B:83:BA:D8:6E:2C:44 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 089F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0899 Signing time: Sat 06 Sep 2025 20:46:41 +0000 Manifest this update: Sat 06 Sep 2025 20:46:41 +0000 Manifest next update: Sat 13 Sep 2025 20:46:41 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: ol7Hy/qOQA8aS+BQPrcLz2OB2lEYE35TQZuqFFrDIsE=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Sep 6 20:46:41 2025 GMT Not After : Sep 13 20:46:41 2025 GMT Subject: CN=68bc9db1-582d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:c8:39:40:87:f0:1a:fd:86:e6:a2:2b:34: bc:24:9b:9a:f3:ba:ba:0d:2e:64:28:94:20:1b:7c: 3c:a5:cb:5d:a0:ab:07:b5:6f:0d:ea:87:8a:7b:7c: 63:99:5c:a0:95:47:60:ac:a4:38:bb:92:58:56:59: 8e:51:94:f9:32:d5:a2:dc:6b:35:87:f4:ae:50:56: 05:16:6f:25:26:b9:3e:e4:c9:5b:85:ab:9f:d9:be: 16:de:e6:3c:30:6d:09:fe:57:a8:88:5c:40:d2:ea: ed:e0:1c:a1:47:f2:8d:27:ea:75:fc:a6:9e:19:d4: 85:0b:78:21:28:66:4c:29:f0:d4:06:62:f3:a2:02: 0b:eb:6e:ad:f8:c8:58:e1:35:6b:18:c3:5e:0f:71: f5:6b:4f:68:d6:98:08:4e:b6:73:db:95:5a:b0:41: fe:19:cb:3a:cd:e3:c4:f6:0e:1f:9c:45:ed:31:9e: 13:d2:9f:74:1b:dd:44:c7:1d:c0:10:75:12:8a:ec: 51:f0:c1:21:6a:88:87:bc:09:06:0c:c3:74:b5:99: e0:e6:34:83:e4:83:0e:a6:a4:c0:01:a8:67:13:cb: 18:0a:11:94:dc:de:72:88:53:1f:ad:3f:55:4f:b6: ea:fb:c9:6a:44:9c:39:f6:4f:f8:61:91:05:da:cd: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5C:35:B4:C4:D6:63:CC:1C:F2:8F:48:F7:9B:83:BA:D8:6E:2C:44 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:c1:8b:b4:f1:97:db:c1:f3:3d:ae:05:c0:d7:12:e7:c6: 4b:0b:aa:68:f7:58:2b:ba:e4:4d:8d:46:39:d1:73:2b:d7:4e: 51:76:22:5b:f0:ea:78:87:2c:3f:02:16:9c:c8:bf:5b:b9:e9: 22:72:b0:4c:d3:a1:d6:1b:09:cb:8c:57:55:4c:34:65:8f:c5: e4:34:25:9a:ad:fd:44:a5:ab:a0:f7:b8:37:f5:5d:ec:81:13: 96:98:c6:06:14:d3:16:71:3a:fe:c3:ae:94:51:45:7c:5f:4a: 1f:f1:8d:ba:95:0d:2e:ad:a4:72:c7:ea:9f:09:26:3d:34:3e: c5:68:02:7d:02:59:0c:73:98:03:ee:fb:2e:a1:ea:cd:ab:92: 37:89:33:2b:f5:05:b0:ad:dc:e6:fd:cf:90:26:9c:18:1d:47: 27:fc:c7:bc:e9:7d:b2:d1:31:ae:fb:64:a7:a4:b1:a9:ce:77: 96:ed:3d:11:e2:47:95:3e:e7:78:32:fd:a9:61:c8:76:58:d7: ae:c1:72:3c:87:8c:29:7d:30:5a:e4:16:fd:a0:55:bc:b7:49: 8c:6a:73:35:ab:18:46:cc:68:68:6f:8c:61:79:73:9a:b3:4a: fa:c7:7f:f3:cf:09:39:76:12:15:9e:53:48:6d:98:ed:da:f0: 7a:47:ed:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwOTA2MjA0NjQxWhcNMjUwOTEzMjA0NjQxWjAYMRYwFAYD VQQDEw02OGJjOWRiMS01ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvrIOUCH8Br9huaiKzS8JJua87q6DS5kKJQgG3w8pctdoKsHtW8N6oeKe3xj mVyglUdgrKQ4u5JYVlmOUZT5MtWi3Gs1h/SuUFYFFm8lJrk+5Mlbhauf2b4W3uY8 MG0J/leoiFxA0urt4ByhR/KNJ+p1/KaeGdSFC3ghKGZMKfDUBmLzogIL626t+MhY 4TVrGMNeD3H1a09o1pgITrZz25VasEH+Gcs6zePE9g4fnEXtMZ4T0p90G91Exx3A EHUSiuxR8MEhaoiHvAkGDMN0tZng5jSD5IMOpqTAAahnE8sYChGU3N5yiFMfrT9V T7bq+8lqRJw59k/4YZEF2s1fgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlcNbTE 1mPMHPKPSPebg7rYbixEMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaksGLtPGX28HzPa4FwNcS58ZLC6po91gruuRNjUY50XMr105RdiJb 8Op4hyw/AhacyL9buekicrBM06HWGwnLjFdVTDRlj8XkNCWarf1Epaug97g39V3s gROWmMYGFNMWcTr+w66UUUV8X0of8Y26lQ0uraRyx+qfCSY9ND7FaAJ9AlkMc5gD 7vsuoerNq5I3iTMr9QWwrdzm/c+QJpwYHUcn/Me86X2y0TGu+2SnpLGpzneW7T0R 4keVPud4Mv2pYch2WNeuwXI8h4wpfTBa5Bb9oFW8t0mManM1qxhGzGhob4xheXOa s0r6x3/zzwk5dhIVnlNIbZjt2vB6R+0o -----END CERTIFICATE-----Generated at Mon Sep 8 19:13:44 2025 by rpki-client