$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json) Hash identifier: G/mHtLl/nNB99w5m6SgbPi5QnMvLn/uNMpUduI1jC20= Subject key identifier: 68:8F:6E:80:55:31:61:2E:25:FB:2B:71:BF:86:0E:EC:47:94:D9:63 Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft Manifest number: 4E Signing time: Wed 17 Sep 2025 08:03:37 +0000 Manifest this update: Wed 17 Sep 2025 08:03:37 +0000 Manifest next update: Wed 24 Sep 2025 08:03:37 +0000 Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: oQdWK3bKCffmnkOyEsshN98JwLj8O+qWfYEpkBTzcdA=) 2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: ziKAkTq8TDHqlAMGRhZZxal4YT5BAAI3FkEOnc8uPao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Validity Not Before: Sep 17 08:03:37 2025 GMT Not After : Sep 24 08:03:37 2025 GMT Subject: CN=68ca6b59-39f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:9f:9a:30:b2:4d:0b:ba:28:f6:74:97:4c: 73:16:80:97:15:c5:65:79:cd:fc:8c:0c:63:06:07: bf:14:77:33:f5:34:bf:61:be:68:2d:64:b2:86:18: 44:45:fd:62:60:bd:bf:e5:63:e7:21:de:6d:31:2a: 50:99:6b:18:89:93:3b:8e:8c:5a:c2:2a:3a:e5:b8: e7:c1:41:16:05:cd:dc:e4:99:cc:80:b8:88:eb:68: cc:b5:1d:e2:9e:d5:e6:55:97:1e:9a:39:e5:ad:8e: 4f:4b:c3:e4:db:4e:00:ac:c3:19:25:d2:eb:8d:4d: e2:1b:da:9b:91:f1:ef:d1:9f:60:7d:9f:7e:50:eb: fa:8b:aa:2e:e8:a2:2c:8f:e4:60:79:1a:6b:c4:ce: b9:34:62:12:5e:45:0d:b3:51:42:2a:f5:18:18:f6: c8:f7:1e:52:25:4e:a9:93:2b:2d:6a:6b:4f:49:ca: f5:34:86:67:71:d7:e8:23:b8:11:2d:81:b3:3c:55: 26:08:0f:02:d3:fd:1b:38:9e:b4:2c:e1:79:33:c8: 2d:52:e2:d1:63:af:f1:f8:9b:34:09:47:2c:73:6d: 17:cd:07:26:a5:94:30:fa:ce:51:f3:fb:d6:35:38: 49:2a:58:c0:f5:f0:01:6e:60:16:f0:d7:05:aa:0f: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8F:6E:80:55:31:61:2E:25:FB:2B:71:BF:86:0E:EC:47:94:D9:63 X509v3 Authority Key Identifier: keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:33:7a:19:5d:94:c1:44:ed:33:f0:68:76:d2:f2:3a:5d:1a: d4:46:19:72:37:92:33:b4:2b:7d:93:a9:27:87:85:15:70:bb: a6:f7:75:45:b3:ce:56:26:55:3c:70:df:01:a7:9b:46:18:b2: 04:a9:da:9a:c2:26:1c:da:64:44:5e:85:37:fe:03:5d:2f:da: cc:82:23:b8:bb:0e:48:0b:ba:80:44:42:96:90:6e:1d:90:6e: 59:c5:db:a9:66:b5:82:cf:23:89:4a:49:fe:3f:4b:c3:62:7e: bb:6a:f3:51:dd:ab:3b:94:d3:db:f0:0a:7e:76:8f:d1:0b:b3: ca:53:d6:df:5a:60:76:0c:55:66:83:99:30:da:b1:c0:31:6a: f5:01:72:14:68:bf:06:b7:a8:83:83:f0:7d:b2:19:13:e1:13: 04:a9:ea:e5:a7:e1:0e:5e:d9:12:56:d0:d3:48:30:29:01:20: e7:76:69:ee:91:ef:d1:83:33:3b:38:34:aa:dc:76:c8:23:5e: 02:26:a7:e3:df:2a:47:2c:75:8b:15:f6:3e:73:19:83:1a:0c: 1f:40:71:a5:b3:82:ba:a4:98:93:3f:a3:18:4f:0d:a4:50:47: 88:7f:11:aa:26:5b:8f:95:4a:9b:73:35:d1:88:9a:ee:f0:ac: 73:28:ac:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REE5RTExMC8GA1UEBRMoNjZDMzA2RDIzRjhCRkVBQUE0NENDQ0M1NTczOTY5NTFG OTg2QzZCRDAeFw0yNTA5MTcwODAzMzdaFw0yNTA5MjQwODAzMzdaMBgxFjAUBgNV BAMTDTY4Y2E2YjU5LTM5ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG25+aMLJNC7oo9nSXTHMWgJcVxWV5zfyMDGMGB78UdzP1NL9hvmgtZLKGGERF /WJgvb/lY+ch3m0xKlCZaxiJkzuOjFrCKjrluOfBQRYFzdzkmcyAuIjraMy1HeKe 1eZVlx6aOeWtjk9Lw+TbTgCswxkl0uuNTeIb2puR8e/Rn2B9n35Q6/qLqi7ooiyP 5GB5GmvEzrk0YhJeRQ2zUUIq9RgY9sj3HlIlTqmTKy1qa09JyvU0hmdx1+gjuBEt gbM8VSYIDwLT/Rs4nrQs4XkzyC1S4tFjr/H4mzQJRyxzbRfNByallDD6zlHz+9Y1 OEkqWMD18AFuYBbw1wWqD3FxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaI9ugFUx YS4l+ytxv4YO7EeU2WMwHwYDVR0jBBgwFoAUZsMG0j+L/qqkTMzFVzlpUfmGxr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQTlFL0QxQkU4MDlDMUYz MjExRjBCRDIyQkE2OEM0RjlBRTAyL1pzTUcwai1MX3Fxa1RNekZWemxwVWZtR3hy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNNRzBqLUxfcXFrVE16RlZ6bHBVZm1HeHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QTlFL0QxQkU4MDlDMUYzMjExRjBCRDIyQkE2OEM0RjlBRTAyL1pzTUcwai1MX3Fx a1RNekZWemxwVWZtR3hyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0zehldlMFE7TPwaHbS8jpdGtRGGXI3kjO0K32TqSeHhRVwu6b3dUWz zlYmVTxw3wGnm0YYsgSp2prCJhzaZERehTf+A10v2syCI7i7DkgLuoBEQpaQbh2Q blnF26lmtYLPI4lKSf4/S8Nifrtq81HdqzuU09vwCn52j9ELs8pT1t9aYHYMVWaD mTDascAxavUBchRovwa3qIOD8H2yGRPhEwSp6uWn4Q5e2RJW0NNIMCkBIOd2ae6R 79GDMzs4NKrcdsgjXgImp+PfKkcsdYsV9j5zGYMaDB9AcaWzgrqkmJM/oxhPDaRQ R4h/EaomW4+VSptzNdGImu7wrHMorCY= -----END CERTIFICATE-----Generated at Fri Sep 19 04:23:31 2025 by rpki-client