$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: gyAgph3c9AcwGN/QCJ+h/bgMtXByZvSjMfpuKtkQc2A= Subject key identifier: 8F:FE:BB:C3:73:C4:7D:ED:5D:B3:C5:82:43:77:F5:1C:8C:34:59:00 Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 07B5 Signing time: Thu 18 Sep 2025 21:34:06 +0000 Manifest this update: Thu 18 Sep 2025 21:34:06 +0000 Manifest next update: Thu 25 Sep 2025 21:34:06 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: luChALAp6tenT923mlCo6Q+U9anF7cBOmg5BYO2Gwxs=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Sep 18 21:34:06 2025 GMT Not After : Sep 25 21:34:06 2025 GMT Subject: CN=68cc7ace-e16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3b:ff:fc:6e:55:7c:91:1d:7e:e0:2b:73:bf: e0:ba:f8:d9:64:6f:44:5e:3a:25:c0:71:90:ca:ea: 13:c6:3e:6b:ef:4f:d2:c1:ed:5b:74:3d:2e:15:23: 22:94:85:4c:e9:8c:c9:35:3e:ce:28:25:ed:58:a5: 01:e1:2b:a6:a6:7d:c6:fa:7a:d4:d0:3f:97:d9:17: 8d:06:d6:20:70:ff:8a:99:55:b1:cf:bd:50:0f:7a: 79:b4:45:d1:fa:64:28:b9:c9:13:71:85:4d:c3:65: 62:27:c7:fc:f8:49:f2:02:ea:a8:e9:52:e4:ea:ad: 2b:3c:c5:56:89:1f:0d:1c:f8:41:80:0d:e9:c8:0e: e6:81:47:71:16:8a:72:bd:98:87:bc:d8:d4:43:be: c5:30:5b:57:b0:94:60:5e:12:ea:e2:dd:9f:b2:57: 2d:f5:e8:11:57:7c:96:c3:2f:0d:24:42:45:60:ce: 17:eb:22:7c:c0:d7:37:87:f8:f8:79:d4:cb:24:c3: 6b:f4:ea:7d:21:3c:1f:cc:b9:85:18:5a:25:ac:de: ed:06:8e:0d:49:9d:47:0d:dd:34:84:30:59:42:f4: 4a:20:f6:29:14:6b:85:95:fa:5c:09:0d:22:a1:cf: fc:c4:1a:1f:0c:28:21:57:6d:86:a9:e6:a5:e1:9d: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:BB:C3:73:C4:7D:ED:5D:B3:C5:82:43:77:F5:1C:8C:34:59:00 X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:ce:36:33:ab:f6:32:85:1f:43:66:55:46:41:f5:c2:28: a3:fc:43:ef:94:72:d9:6d:44:cf:ff:e8:2c:97:25:29:f0:d3: d4:96:ed:79:d6:ef:0a:1f:65:60:75:26:8f:43:1a:e0:b8:57: aa:a2:3e:62:0f:de:15:fb:fd:34:40:12:dd:ee:4b:d2:32:6b: 1d:54:d0:a0:89:44:bc:71:d5:af:f4:3e:f3:f5:56:d0:5a:f1: b7:a9:dc:01:52:20:68:db:72:98:3f:5c:19:cb:a9:c6:8a:a9: 78:3a:77:20:5e:25:45:57:9a:e5:ed:dd:84:0d:cc:a5:15:92: 5c:b8:bf:21:22:45:ab:e2:7f:7b:24:0b:b6:4f:b4:04:0b:cc: 47:98:c1:fe:cd:30:8c:4d:f1:9e:c6:51:f7:86:9c:46:94:7a: fd:9b:ce:ee:90:e0:f7:4b:55:a6:2b:02:58:4e:4d:91:4b:e6: 2b:2d:a6:cd:2b:35:da:ed:b4:96:f6:f8:ca:38:8f:c3:65:ae: 70:bc:df:0a:e9:d2:dc:b2:d8:70:66:86:f2:01:03:ed:a3:15: 22:b2:51:c6:7c:75:ad:89:85:9c:10:62:13:d7:0d:ed:7b:37: f8:84:89:32:51:0b:de:46:54:fe:25:d8:5f:07:2c:92:d0:ea: 48:d4:d0:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjUwOTE4MjEzNDA2WhcNMjUwOTI1MjEzNDA2WjAYMRYwFAYD VQQDEw02OGNjN2FjZS1lMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jv//G5VfJEdfuArc7/guvjZZG9EXjolwHGQyuoTxj5r70/Swe1bdD0uFSMi lIVM6YzJNT7OKCXtWKUB4Sumpn3G+nrU0D+X2ReNBtYgcP+KmVWxz71QD3p5tEXR +mQouckTcYVNw2ViJ8f8+EnyAuqo6VLk6q0rPMVWiR8NHPhBgA3pyA7mgUdxFopy vZiHvNjUQ77FMFtXsJRgXhLq4t2fslct9egRV3yWwy8NJEJFYM4X6yJ8wNc3h/j4 edTLJMNr9Op9ITwfzLmFGFolrN7tBo4NSZ1HDd00hDBZQvRKIPYpFGuFlfpcCQ0i oc/8xBofDCghV22Gqeal4Z0HgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/+u8Nz xH3tXbPFgkN39RyMNFkAMB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQps42M6v2MoUfQ2ZVRkH1wiij/EPvlHLZbUTP/+gslyUp8NPUlu15 1u8KH2VgdSaPQxrguFeqoj5iD94V+/00QBLd7kvSMmsdVNCgiUS8cdWv9D7z9VbQ WvG3qdwBUiBo23KYP1wZy6nGiql4OncgXiVFV5rl7d2EDcylFZJcuL8hIkWr4n97 JAu2T7QEC8xHmMH+zTCMTfGexlH3hpxGlHr9m87ukOD3S1WmKwJYTk2RS+YrLabN KzXa7bSW9vjKOI/DZa5wvN8K6dLcsthwZobyAQPtoxUislHGfHWtiYWcEGIT1w3t ezf4hIkyUQveRlT+JdhfByyS0OpI1NCC -----END CERTIFICATE-----Generated at Fri Sep 19 02:42:13 2025 by rpki-client