$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: VgF4/swM3uR4jUMRblVArlCy++B/M0STSeB/OGOoDbk= Subject key identifier: B3:8B:62:9C:B2:31:79:80:56:91:F8:D7:D5:73:AA:0C:49:AD:09:E1 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0C7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0C76 Signing time: Thu 04 Sep 2025 18:32:31 +0000 Manifest this update: Thu 04 Sep 2025 18:32:31 +0000 Manifest next update: Thu 11 Sep 2025 18:32:31 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: R82sVG7kZ1hwOK+vw/ELkTSce67iyPjBzZjIjVx1reI=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: QfGMdR7Uov5mHwO7nve3pQizSQl2DkOhX5cYoqv4O50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 18:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Sep 4 18:32:31 2025 GMT Not After : Sep 11 18:32:31 2025 GMT Subject: CN=68b9db3f-ee0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:5b:86:9b:1c:b4:c5:0d:1c:58:3f:55:ab: 1e:07:cd:9d:9c:6d:64:32:e0:9e:46:89:de:b3:ca: f5:56:9e:ea:30:ef:49:48:4d:6d:38:4c:60:8c:b5: 4a:75:bc:04:8e:29:d9:42:6e:7d:fb:ed:46:b6:43: 7b:29:b0:da:58:ef:43:db:4b:32:66:21:7f:a3:54: d7:6d:51:84:6c:2f:35:eb:8f:d9:a0:39:f8:1f:f6: 36:aa:95:36:eb:d5:c1:a0:eb:88:08:a8:54:45:80: b2:fb:8e:1f:37:e3:5e:53:93:68:b1:54:fc:78:9a: 76:b4:87:dd:73:b1:b2:3e:20:11:07:30:9f:29:c9: 14:97:0b:7b:40:1c:b4:25:b9:d2:2b:6e:c6:1f:35: 6d:03:4a:66:ed:eb:86:2c:92:b5:f6:3d:b0:dc:8a: 5f:90:63:30:e9:ab:a2:4d:32:24:fe:f7:9d:f8:2d: f0:1c:ec:6f:19:8a:f6:9c:20:c1:58:35:27:6b:3b: 7c:1e:48:c6:9d:67:88:1c:21:ca:41:ea:93:5f:42: d0:6d:4d:cc:01:5e:22:41:6c:0d:3d:49:6d:63:04: 13:8b:3d:ad:68:fb:59:8c:46:38:ad:b6:78:3c:f3: c6:29:81:01:af:e2:07:9c:f5:85:80:0d:e0:23:22: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8B:62:9C:B2:31:79:80:56:91:F8:D7:D5:73:AA:0C:49:AD:09:E1 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fa:4a:e0:c7:49:62:91:34:c7:8e:c8:6c:5e:ed:15:2c:74: f5:00:0f:f2:3b:4c:b8:68:69:2d:4f:5e:e9:8d:fa:85:6e:98: 91:94:d6:3d:19:9b:cc:9a:5f:44:d1:22:01:2f:e6:db:94:61: 45:7a:0f:f2:87:1e:ca:e9:fd:de:ce:6c:59:66:12:6e:e7:10: 35:6b:39:78:f6:df:dd:5b:b7:fe:0a:99:6b:42:1f:b5:9d:30: 64:09:41:37:97:87:10:56:60:91:3f:55:fa:8b:c2:da:d7:71: 63:fe:16:16:fa:19:2b:c0:2d:97:47:37:0a:a4:35:7d:68:f3: 09:95:ef:e0:67:a0:0e:1c:24:f6:ae:b6:48:0e:49:08:aa:43: ae:92:3c:87:c4:b6:c1:8e:10:fc:44:8a:bf:a6:91:84:54:ae: 85:bf:44:f5:41:d6:4a:bc:e5:8a:4e:3c:b8:3e:cd:9b:8e:ee: 81:8c:42:1d:5d:9c:0e:77:ac:4e:14:f2:9e:51:f5:14:12:86: a5:96:36:60:06:9f:5a:de:a9:06:20:02:eb:2c:c8:74:6a:64: 4f:ec:41:ea:1b:ff:77:7f:2b:11:14:6c:b6:d5:88:16:bf:02: 5a:b1:92:30:aa:1b:ba:c6:56:21:e2:b5:bb:1c:c4:96:3a:29: d9:32:01:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjUwOTA0MTgzMjMxWhcNMjUwOTExMTgzMjMxWjAYMRYwFAYD VQQDEw02OGI5ZGIzZi1lZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0NbhpsctMUNHFg/VaseB82dnG1kMuCeRones8r1Vp7qMO9JSE1tOExgjLVK dbwEjinZQm59++1GtkN7KbDaWO9D20syZiF/o1TXbVGEbC8164/ZoDn4H/Y2qpU2 69XBoOuICKhURYCy+44fN+NeU5NosVT8eJp2tIfdc7GyPiARBzCfKckUlwt7QBy0 JbnSK27GHzVtA0pm7euGLJK19j2w3IpfkGMw6auiTTIk/ved+C3wHOxvGYr2nCDB WDUnazt8HkjGnWeIHCHKQeqTX0LQbU3MAV4iQWwNPUltYwQTiz2taPtZjEY4rbZ4 PPPGKYEBr+IHnPWFgA3gIyJ7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOLYpyy MXmAVpH419VzqgxJrQnhMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2+krgx0likTTHjshsXu0VLHT1AA/yO0y4aGktT17pjfqFbpiRlNY9 GZvMml9E0SIBL+bblGFFeg/yhx7K6f3ezmxZZhJu5xA1azl49t/dW7f+CplrQh+1 nTBkCUE3l4cQVmCRP1X6i8La13Fj/hYW+hkrwC2XRzcKpDV9aPMJle/gZ6AOHCT2 rrZIDkkIqkOukjyHxLbBjhD8RIq/ppGEVK6Fv0T1QdZKvOWKTjy4Ps2bju6BjEId XZwOd6xOFPKeUfUUEoalljZgBp9a3qkGIALrLMh0amRP7EHqG/93fysRFGy21YgW vwJasZIwqhu6xlYh4rW7HMSWOinZMgE3 -----END CERTIFICATE-----Generated at Sat Sep 6 15:40:12 2025 by rpki-client