$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: DrXk1X4wzaUgFQzA3uBox0M6fkddT8MavbdwjkiaUWM= Subject key identifier: A2:E7:02:E5:D7:95:2C:DC:58:E0:9E:C7:0F:B7:AC:3B:A6:C0:8A:C1 Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 0356 Signing time: Tue 09 Sep 2025 01:04:30 +0000 Manifest this update: Tue 09 Sep 2025 01:04:30 +0000 Manifest next update: Tue 16 Sep 2025 01:04:30 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: KwstiwgRSR5jCVPQridFTZvwrGq0V/T7CYI0U7/e4G8=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: uq2UtIcvHFOXxicW+V2m6gHu891OMQA/M+oL5jc7QTE=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: 35hCo0g/r7FxI8+/jeqVhnAOkZ//we7adpPQGUSCnXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: Sep 9 01:04:30 2025 GMT Not After : Sep 16 01:04:30 2025 GMT Subject: CN=68bf7d1e-3ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:41:25:ba:dd:b4:75:39:81:dd:da:d4:9e: 3b:a5:fe:5a:aa:9b:71:ed:45:27:75:f5:6c:f1:07: 87:63:1b:a1:87:12:a9:14:22:c7:f8:86:de:0b:fc: ca:8c:c1:74:44:8e:78:0a:8a:86:17:13:f0:85:a4: 10:52:23:ae:05:98:80:17:89:41:ec:25:10:0b:22: 4a:1a:5f:3b:23:6a:09:39:2d:26:5d:89:b4:44:0d: 18:6a:41:6d:90:f0:f6:42:fc:e2:88:6d:73:40:b0: f7:8e:74:32:4a:6d:df:53:7d:7a:cc:4a:71:46:e0: ae:e8:b5:a1:e9:a7:50:12:17:e8:40:72:45:cc:80: 2b:e3:30:7c:55:80:86:12:f2:9c:19:c8:85:5b:ab: 25:d6:0a:8d:55:73:d5:10:1e:75:7c:a7:57:d1:15: 7f:fe:95:89:4f:47:a1:a2:c7:18:47:1f:6e:75:9a: a5:85:d8:f8:8f:a9:ed:21:01:6d:a6:dc:58:c9:5c: 42:de:09:56:ae:8a:2d:60:5f:12:d0:c6:d4:be:00: 8e:d1:c2:00:23:34:c8:10:33:1b:fd:fc:75:0e:77: d6:90:14:ed:ca:54:44:04:b4:d8:05:de:69:f5:6a: 7a:c5:ff:f5:a2:7f:e6:ed:47:01:d4:44:d6:65:e2: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E7:02:E5:D7:95:2C:DC:58:E0:9E:C7:0F:B7:AC:3B:A6:C0:8A:C1 X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c4:92:99:8d:0e:e0:39:35:68:bc:bc:ea:2e:69:b8:9c:b8: 5e:df:ae:0a:ff:8a:a6:00:92:a3:b8:9b:5f:4d:71:f6:67:f3: a8:2a:39:c1:aa:a9:86:c1:7c:5f:90:dd:51:7d:9f:75:4d:43: 82:71:1e:5f:c9:c9:63:69:94:96:82:bf:ef:1b:00:fb:9a:a8: fc:a5:a4:e0:26:0c:2a:49:9f:ed:a4:5f:6d:91:41:a3:bb:56: 88:17:8c:ba:35:a2:26:88:2c:04:e5:7b:cc:41:da:68:33:63: 87:fa:12:a2:e1:23:53:98:3e:70:ab:57:b4:68:2c:4a:51:f9: 2c:d1:16:29:d1:2d:e3:ee:17:51:08:1c:21:d4:7b:c3:99:48: 1e:58:da:41:c4:63:2b:39:05:4c:cb:76:2b:27:be:12:78:7f: a1:79:2f:68:ef:0b:2f:04:b5:6b:94:c0:b1:cf:b0:9c:ef:e1: a5:39:72:8b:54:f6:13:4a:73:4e:3d:1f:b1:63:25:ce:2e:61: 6d:1a:20:56:0a:e8:9e:8b:5f:5b:f0:23:5a:2f:b4:fd:bf:fb: 0a:f5:42:55:37:a2:dc:d4:db:f9:40:a2:cd:e5:57:a1:03:cf: 92:0d:b0:c5:8a:de:cd:5a:62:46:8b:8f:5c:45:41:2b:0f:b6: e0:27:50:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUwOTA5MDEwNDMwWhcNMjUwOTE2MDEwNDMwWjAYMRYwFAYD VQQDEw02OGJmN2QxZS0zYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuatBJbrdtHU5gd3a1J47pf5aqptx7UUndfVs8QeHYxuhhxKpFCLH+IbeC/zK jMF0RI54CoqGFxPwhaQQUiOuBZiAF4lB7CUQCyJKGl87I2oJOS0mXYm0RA0YakFt kPD2QvziiG1zQLD3jnQySm3fU316zEpxRuCu6LWh6adQEhfoQHJFzIAr4zB8VYCG EvKcGciFW6sl1gqNVXPVEB51fKdX0RV//pWJT0ehoscYRx9udZqlhdj4j6ntIQFt ptxYyVxC3glWrootYF8S0MbUvgCO0cIAIzTIEDMb/fx1DnfWkBTtylREBLTYBd5p 9Wp6xf/1on/m7UcB1ETWZeI0PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLnAuXX lSzcWOCexw+3rDumwIrBMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpxJKZjQ7gOTVovLzqLmm4nLhe364K/4qmAJKjuJtfTXH2Z/OoKjnB qqmGwXxfkN1RfZ91TUOCcR5fycljaZSWgr/vGwD7mqj8paTgJgwqSZ/tpF9tkUGj u1aIF4y6NaImiCwE5XvMQdpoM2OH+hKi4SNTmD5wq1e0aCxKUfks0RYp0S3j7hdR CBwh1HvDmUgeWNpBxGMrOQVMy3YrJ74SeH+heS9o7wsvBLVrlMCxz7Cc7+GlOXKL VPYTSnNOPR+xYyXOLmFtGiBWCuiei19b8CNaL7T9v/sK9UJVN6Lc1Nv5QKLN5Veh A8+SDbDFit7NWmJGi49cRUErD7bgJ1De -----END CERTIFICATE-----Generated at Wed Sep 10 00:02:38 2025 by rpki-client