$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: vHCpkF1uBh4c/7nBFnJ8TSuIgGKLeeQ4fkUyZGezqBo= Subject key identifier: BF:43:27:B1:E7:CA:41:52:05:F6:64:4A:C7:71:70:BA:07:6E:A9:CA Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: FC Signing time: Sun 07 Sep 2025 05:51:53 +0000 Manifest this update: Sun 07 Sep 2025 05:51:52 +0000 Manifest next update: Sun 14 Sep 2025 05:51:52 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: uKL5XQdnQWn8ZKqIey31Xc36lwTh66hlrjnReWsi+Kw=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Sep 7 05:51:52 2025 GMT Not After : Sep 14 05:51:52 2025 GMT Subject: CN=68bd1d79-3617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:1c:6a:c8:a6:86:24:a3:fd:ce:f3:a9:97: 2d:86:e4:71:f8:00:94:1f:a9:55:91:db:c7:99:7a: ae:ce:14:a0:a4:ab:a7:93:fe:df:67:4d:1b:68:3a: ff:74:fe:97:18:3b:98:c1:fe:00:ce:6d:5b:d4:d1: e4:58:35:a7:ec:a1:f0:c9:ab:1a:c5:38:ce:3d:2c: 40:36:fc:f0:60:0e:68:f0:9d:51:87:b1:dc:84:b1: d2:ca:1c:a7:86:8f:bb:2d:6b:9b:11:fa:dd:c1:dd: c4:33:e7:61:08:b0:de:bc:a9:ab:44:3b:92:5c:6b: c7:5f:01:90:27:d0:da:ea:4c:ed:ea:6e:36:a4:a6: f4:0b:c1:dd:62:b8:9f:d2:4e:93:0a:05:7e:f9:39: 13:ee:d8:34:5f:c0:76:3e:38:42:72:01:cc:d4:bc: dd:62:20:6c:77:a1:83:ea:dc:44:d4:4c:86:fc:bd: aa:ed:21:e2:a9:5d:77:fb:08:39:1e:98:d4:c5:8f: 42:f3:e4:48:17:e0:2b:18:3e:d0:f2:67:cc:b2:7f: 69:6e:35:f1:b7:94:ca:94:be:88:d0:14:72:8d:59: e3:81:db:4e:4b:69:71:f7:86:23:6c:2f:54:26:5e: aa:c2:3c:da:f0:e3:bc:82:1b:7b:ce:05:e0:16:e7: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:43:27:B1:E7:CA:41:52:05:F6:64:4A:C7:71:70:BA:07:6E:A9:CA X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:eb:fa:06:2a:0b:ec:44:76:3b:e2:3d:da:5c:6c:20:5e:c3: 83:8b:4d:59:45:0d:a0:c0:3a:fe:0a:9c:09:ef:38:82:d4:f1: bb:60:9c:18:2b:69:f2:39:ca:5e:f5:98:5e:30:c0:ab:97:13: 70:e4:e7:7a:1e:35:53:91:9c:e3:9a:d8:d9:31:ee:68:8e:d1: 9f:a0:e4:c6:ae:18:28:af:97:02:94:44:17:20:e0:f0:7d:a2: ae:2c:52:14:b5:5d:6f:ed:ca:40:76:73:44:00:dc:d3:1b:84: ba:0d:fb:76:1d:56:f0:1e:ed:bd:ed:72:fe:48:7b:93:89:0c: 12:d1:19:25:05:d5:26:9e:f5:5f:ed:97:c2:29:1d:44:f5:f1: 1e:07:c6:4d:b2:9b:ee:0b:89:05:26:95:2f:18:8a:b3:d5:88: 23:47:d2:60:d4:0f:32:94:97:e3:83:f0:b4:6b:14:40:24:58: ef:36:af:e7:5c:a7:71:28:f1:b8:95:f5:a3:9e:af:43:1a:72: 4d:e5:22:45:6a:2e:6f:79:7b:1b:d3:b0:4a:55:a1:c4:4e:ed: b7:cf:aa:43:7f:b3:c4:53:4b:ad:a1:5b:04:b8:85:8b:56:65: 1a:69:37:e1:90:0e:b9:b9:a7:03:75:a8:47:c7:bb:15:79:9c: b0:cb:5b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwOTA3MDU1MTUyWhcNMjUwOTE0MDU1MTUyWjAYMRYwFAYD VQQDEw02OGJkMWQ3OS0zNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUYcasimhiSj/c7zqZcthuRx+ACUH6lVkdvHmXquzhSgpKunk/7fZ00baDr/ dP6XGDuYwf4Azm1b1NHkWDWn7KHwyasaxTjOPSxANvzwYA5o8J1Rh7HchLHSyhyn ho+7LWubEfrdwd3EM+dhCLDevKmrRDuSXGvHXwGQJ9Da6kzt6m42pKb0C8HdYrif 0k6TCgV++TkT7tg0X8B2PjhCcgHM1LzdYiBsd6GD6txE1EyG/L2q7SHiqV13+wg5 HpjUxY9C8+RIF+ArGD7Q8mfMsn9pbjXxt5TKlL6I0BRyjVnjgdtOS2lx94YjbC9U Jl6qwjza8OO8ght7zgXgFucrxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9DJ7Hn ykFSBfZkSsdxcLoHbqnKMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN6/oGKgvsRHY74j3aXGwgXsODi01ZRQ2gwDr+CpwJ7ziC1PG7YJwY K2nyOcpe9ZheMMCrlxNw5Od6HjVTkZzjmtjZMe5ojtGfoOTGrhgor5cClEQXIODw faKuLFIUtV1v7cpAdnNEANzTG4S6Dft2HVbwHu297XL+SHuTiQwS0RklBdUmnvVf 7ZfCKR1E9fEeB8ZNspvuC4kFJpUvGIqz1YgjR9Jg1A8ylJfjg/C0axRAJFjvNq/n XKdxKPG4lfWjnq9DGnJN5SJFai5veXsb07BKVaHETu23z6pDf7PEU0utoVsEuIWL VmUaaTfhkA65uacDdahHx7sVeZywy1tF -----END CERTIFICATE-----Generated at Sun Sep 7 14:30:10 2025 by rpki-client