$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: YudNpsLFtN7hiwgaWrf0HBGcxyleH+ZacXLxg0aZYVQ= Subject key identifier: E7:7D:38:BD:D9:B6:A9:B2:81:DC:EC:3C:D6:0C:45:07:86:58:75:B6 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 058C Signing time: Thu 18 Sep 2025 23:32:08 +0000 Manifest this update: Thu 18 Sep 2025 23:32:07 +0000 Manifest next update: Thu 25 Sep 2025 23:32:07 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: QI+EgnM/AYTps1MITV0Et1eKZ35vZfKrbxNovthaE7Q=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Sep 18 23:32:07 2025 GMT Not After : Sep 25 23:32:07 2025 GMT Subject: CN=68cc9678-db19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:ea:81:c1:72:5c:c2:61:5b:dc:94:92:01: 5e:41:43:e8:dd:a1:75:aa:b0:5a:7d:d7:91:e4:4f: 2c:1f:be:95:90:eb:7c:0b:99:86:04:10:b3:a2:41: 7a:1d:07:fb:59:96:f0:ad:f5:fe:08:82:df:41:00: 61:78:8d:38:74:90:2e:c4:b5:5e:fe:e1:94:c6:9a: 0d:67:3b:e6:37:09:ce:cb:d4:ee:e2:64:0b:6d:f9: 36:a7:d2:9a:4f:9f:a8:e9:2c:e7:c3:a8:07:91:b2: 9f:17:ae:5e:58:26:e1:37:d8:42:fd:27:72:98:b1: 52:54:59:f4:30:5a:51:e7:76:28:a7:71:a9:fc:4f: e3:da:dd:ac:6a:4b:1e:03:80:f1:8c:2c:1a:c0:20: 8a:7f:11:e8:4d:7a:9f:64:88:c2:4b:34:aa:d5:36: d4:88:5d:8e:7e:2a:80:4a:c1:28:27:fd:5e:13:a1: d9:eb:1b:e9:72:a6:3f:ad:c9:0d:06:ed:ce:34:d3: cd:e5:91:94:dd:50:80:37:b5:39:74:21:12:62:98: 1b:37:09:b9:2d:2b:1d:65:2c:6a:df:4b:7b:fa:24: f8:72:4e:5f:28:d5:41:38:a3:d8:47:1c:de:27:0a: 72:da:9f:57:56:bd:67:9d:68:42:cf:d8:86:59:4e: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:38:BD:D9:B6:A9:B2:81:DC:EC:3C:D6:0C:45:07:86:58:75:B6 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:25:8d:5f:33:7c:9a:9f:07:bd:10:a1:47:3f:1c:4e:79:11: 05:c6:e7:46:60:56:5f:75:cf:bc:cb:e7:d5:4b:2d:20:53:33: f4:e4:f9:69:07:bc:69:31:9a:1f:1c:07:53:4d:e2:9e:4e:d4: f9:e4:c5:67:c6:91:8c:11:81:a2:c1:c2:8d:5f:a0:a3:5a:2a: 06:48:48:0b:e4:02:e4:f0:a3:e7:9b:3c:b2:3e:6d:bf:5f:86: ba:7d:62:16:f3:84:3b:a8:be:4e:e5:0c:4b:9d:a4:3b:c2:5c: b3:c5:d5:fc:16:09:b3:25:29:c6:39:a3:47:cf:90:93:9e:9e: 99:07:0d:6f:24:47:55:28:69:e5:97:c6:55:d6:64:0d:e5:81: d0:59:0b:aa:c0:51:10:e5:ba:eb:a6:ec:c0:02:9c:ef:06:f6: 9d:8b:32:70:56:ce:07:de:95:40:6a:32:90:1d:bc:ed:7f:50: 7c:03:de:40:e7:20:9b:e7:e4:ca:81:70:e1:03:4c:d0:e7:a2: 34:22:0e:91:60:91:ea:ee:53:e0:b7:68:56:e6:de:51:2b:ff: 3f:36:08:29:59:ab:16:2d:c3:16:5f:ce:63:c2:dd:17:5d:ed: 1b:ff:5e:bc:b3:2d:bc:24:4b:78:54:41:23:d3:80:85:14:9a: f0:51:40:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwOTE4MjMzMjA3WhcNMjUwOTI1MjMzMjA3WjAYMRYwFAYD VQQDEw02OGNjOTY3OC1kYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8nqgcFyXMJhW9yUkgFeQUPo3aF1qrBafdeR5E8sH76VkOt8C5mGBBCzokF6 HQf7WZbwrfX+CILfQQBheI04dJAuxLVe/uGUxpoNZzvmNwnOy9Tu4mQLbfk2p9Ka T5+o6Sznw6gHkbKfF65eWCbhN9hC/SdymLFSVFn0MFpR53Yop3Gp/E/j2t2sakse A4DxjCwawCCKfxHoTXqfZIjCSzSq1TbUiF2OfiqASsEoJ/1eE6HZ6xvpcqY/rckN Bu3ONNPN5ZGU3VCAN7U5dCESYpgbNwm5LSsdZSxq30t7+iT4ck5fKNVBOKPYRxze Jwpy2p9XVr1nnWhCz9iGWU5BoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd9OL3Z tqmygdzsPNYMRQeGWHW2MB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkJY1fM3yanwe9EKFHPxxOeREFxudGYFZfdc+8y+fVSy0gUzP05Plp B7xpMZofHAdTTeKeTtT55MVnxpGMEYGiwcKNX6CjWioGSEgL5ALk8KPnmzyyPm2/ X4a6fWIW84Q7qL5O5QxLnaQ7wlyzxdX8FgmzJSnGOaNHz5CTnp6ZBw1vJEdVKGnl l8ZV1mQN5YHQWQuqwFEQ5brrpuzAApzvBvadizJwVs4H3pVAajKQHbztf1B8A95A 5yCb5+TKgXDhA0zQ56I0Ig6RYJHq7lPgt2hW5t5RK/8/NggpWasWLcMWX85jwt0X Xe0b/168sy28JEt4VEEj04CFFJrwUUCq -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:28 2025 by rpki-client