$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: q9qH5P5O1nP72S1pK3sK5UgjumPbgONTuIUt5VPe4QE= Subject key identifier: E3:07:E7:34:84:A0:B4:06:97:1A:09:B7:19:3A:22:1F:31:E6:5F:68 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B46 Signing time: Thu 18 Sep 2025 16:24:04 +0000 Manifest this update: Thu 18 Sep 2025 16:24:03 +0000 Manifest next update: Thu 25 Sep 2025 16:24:03 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: 6z7jfH09MP/Lh7BVEQRvUg8YKuoPn8DfwRXm0NGwdh0=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7006 (0x1b5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Sep 18 16:24:03 2025 GMT Not After : Sep 25 16:24:03 2025 GMT Subject: CN=68cc3224-c7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2e:55:15:4a:54:0e:d7:f4:e0:67:da:b8:86: b9:d8:56:e2:67:21:14:d3:90:1d:a8:e9:22:e5:99: ff:90:df:32:0e:c0:b6:56:ab:06:cc:2a:75:65:d4: dc:db:e7:38:a7:66:f5:79:0e:34:8d:8a:12:16:df: e5:8d:ab:fc:06:8c:51:b2:85:9e:35:40:64:fb:21: d2:9b:02:c9:fd:c4:c2:f4:5f:9a:e9:69:4d:d0:b4: aa:35:da:5c:6f:5e:d8:23:ca:30:a4:6a:75:59:2c: 5f:bf:a6:e4:84:92:f5:7f:d6:5a:dd:3e:ff:85:bf: 12:96:66:53:2b:ad:1a:97:97:3d:ce:99:c7:ef:fa: 03:98:b5:20:2b:84:d6:6d:e7:75:f9:d8:a2:ca:6b: c8:07:5e:41:28:2d:a3:36:ed:ac:98:dd:47:3f:f5: f2:8a:99:39:25:37:08:7a:11:a7:a5:d9:38:be:9c: bf:b8:f7:14:15:05:bb:3f:5f:86:14:d8:66:6b:dd: 7f:92:33:fc:43:4d:13:44:7d:c5:10:c7:e2:1f:65: 2d:dd:d5:4f:06:40:f2:d9:50:2f:8d:7a:5d:83:51: 5e:c0:1b:c5:53:63:91:b5:54:c7:dc:a6:01:1d:7b: 68:3c:99:1a:b6:cc:35:99:f6:90:58:f9:b1:96:22: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:E7:34:84:A0:B4:06:97:1A:09:B7:19:3A:22:1F:31:E6:5F:68 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:8b:5d:b2:f9:34:dd:e2:27:4d:c2:c5:0e:3e:6d:7c:c4:b6: ca:99:5f:9e:fb:dd:74:71:9f:b1:a9:5d:8a:47:08:9a:ec:f7: 2a:2b:76:ad:6a:fd:3b:cd:50:9a:3e:49:52:4f:ce:9c:9a:8e: 9e:8a:2d:37:1e:cd:c2:4c:8b:38:1e:33:11:a6:05:57:15:50: d9:6c:1f:30:28:5f:96:9e:4a:b5:66:59:cb:f8:35:dd:fa:a3: 5e:e0:b7:74:ed:f7:76:2d:cd:35:85:de:ec:9a:65:98:39:12: 72:82:a4:e0:24:78:9e:59:2f:af:5f:b9:5e:49:8b:bf:a6:82: 4a:a3:f8:05:e8:2f:59:52:8c:3a:0d:5b:93:8d:32:db:53:54: 91:76:ef:8a:f1:eb:48:33:11:4e:17:1b:a9:66:7c:54:f3:e2: 5f:62:c7:8c:2f:3c:88:60:98:3c:d7:2a:c9:eb:ea:18:a6:54: 81:78:0c:5d:17:4e:19:40:ce:d3:e9:00:96:8a:ef:49:02:71: 24:2e:8b:3c:9c:c2:33:f6:2c:7a:38:14:65:79:5a:28:96:ac: 4d:f8:86:9c:6c:e9:0f:e5:81:4e:8d:52:a9:d5:20:57:64:f6: 5c:69:f2:26:32:4a:ef:5a:61:1d:10:25:70:53:76:ea:06:a2: 67:de:ef:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwOTE4MTYyNDAzWhcNMjUwOTI1MTYyNDAzWjAYMRYwFAYD VQQDEw02OGNjMzIyNC1jN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5C5VFUpUDtf04GfauIa52FbiZyEU05AdqOki5Zn/kN8yDsC2VqsGzCp1ZdTc 2+c4p2b1eQ40jYoSFt/ljav8BoxRsoWeNUBk+yHSmwLJ/cTC9F+a6WlN0LSqNdpc b17YI8owpGp1WSxfv6bkhJL1f9Za3T7/hb8SlmZTK60al5c9zpnH7/oDmLUgK4TW bed1+diiymvIB15BKC2jNu2smN1HP/Xyipk5JTcIehGnpdk4vpy/uPcUFQW7P1+G FNhma91/kjP8Q00TRH3FEMfiH2Ut3dVPBkDy2VAvjXpdg1FewBvFU2ORtVTH3KYB HXtoPJkatsw1mfaQWPmxliJjTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMH5zSE oLQGlxoJtxk6Ih8x5l9oMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJi12y+TTd4idNwsUOPm18xLbKmV+e+910cZ+xqV2KRwia7PcqK3at av07zVCaPklST86cmo6eii03Hs3CTIs4HjMRpgVXFVDZbB8wKF+Wnkq1ZlnL+DXd +qNe4Ld07fd2Lc01hd7smmWYORJygqTgJHieWS+vX7leSYu/poJKo/gF6C9ZUow6 DVuTjTLbU1SRdu+K8etIMxFOFxupZnxU8+JfYseMLzyIYJg81yrJ6+oYplSBeAxd F04ZQM7T6QCWiu9JAnEkLos8nMIz9ix6OBRleVoolqxN+IacbOkP5YFOjVKp1SBX ZPZcafImMkrvWmEdECVwU3bqBqJn3u/w -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:26 2025 by rpki-client