$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft File: aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json) Hash identifier: UuBLYIyvbt1869v3GXq7aq4fFD0E/+JAATkpjEFuEts= Subject key identifier: 8E:CC:C4:DF:C8:EA:E7:2A:8C:F5:F9:F2:6F:1C:29:4B:BE:EF:F3:4B Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft Manifest number: 06C8 Signing time: Thu 18 Sep 2025 22:20:47 +0000 Manifest this update: Thu 18 Sep 2025 22:20:47 +0000 Manifest next update: Thu 25 Sep 2025 22:20:47 +0000 Files and hashes: 1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: 8sURe6g591vFSro97Z4C8DxJ7r7CskKrTClkf7Bz1FQ=) 2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: qir+UT8zyDGjYz1YRKkq2v/pYcPeSxEZXiWVhwGwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Validity Not Before: Sep 18 22:20:47 2025 GMT Not After : Sep 25 22:20:47 2025 GMT Subject: CN=68cc85bf-e924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:e5:eb:d0:b9:ee:bc:d1:29:8b:b0:37:f7: ed:03:12:69:01:e5:5c:6f:e2:48:45:a5:74:98:10: c8:cf:b7:72:9a:41:da:63:1e:42:82:5f:10:b8:f0: 72:1e:09:60:88:88:1c:89:fe:e8:0c:c8:a0:c3:48: 52:ad:89:6c:50:f3:89:e4:24:d5:be:ee:81:f3:ca: 15:5d:b0:4b:fe:64:76:08:01:f8:16:87:96:b4:a8: 06:c3:45:26:d9:f4:62:ec:bd:d2:fb:4c:98:8a:b2: 2f:42:1d:f8:c3:03:e5:5c:75:2f:13:dc:1a:d0:2c: 0b:2f:45:78:eb:ce:a9:a4:1e:93:89:92:f4:1b:ec: ec:b5:4e:f7:55:76:5a:a5:6c:3c:3e:68:14:01:f8: a4:d3:50:b9:8c:61:af:6d:d5:8b:76:ee:96:45:46: 60:d7:cc:db:b9:70:8f:07:db:71:0f:21:30:05:be: 2b:55:9d:76:d7:62:0a:fc:18:3c:ea:3f:a5:98:88: 41:75:ad:ad:c8:bd:98:38:8c:a6:66:6a:7e:ae:f9: 1c:a7:78:51:35:a3:66:39:1b:11:b1:ca:a5:81:5b: 9c:8a:82:98:68:45:7f:d5:7e:46:61:dc:0f:eb:01: 22:ff:bc:7d:5d:bb:51:37:59:67:c2:cf:1b:ba:44: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CC:C4:DF:C8:EA:E7:2A:8C:F5:F9:F2:6F:1C:29:4B:BE:EF:F3:4B X509v3 Authority Key Identifier: keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7d:cd:26:4c:fa:c1:ca:43:2c:b3:28:af:c8:71:03:8a:81: fb:7d:d4:dc:a7:f8:2d:99:81:97:b8:7a:cb:64:58:df:6d:51: ab:ce:d4:30:92:14:0f:5e:c6:e9:fa:3e:e9:d4:4d:41:c9:d8: 69:f9:ae:e8:4e:bd:30:fa:94:8b:25:f4:72:86:62:b7:7c:83: 0d:c1:cf:1b:c6:de:97:48:7d:1f:ea:2a:4b:fd:7b:7e:1b:14: 73:cd:76:04:d1:54:05:24:77:21:7d:a2:57:0e:19:57:2a:4f: 28:58:ee:71:cc:bb:c1:a8:1f:2a:c4:0c:37:5c:7d:3c:36:a3: 8e:dd:26:81:b4:f2:e6:76:d5:94:ac:b3:85:8b:77:69:28:9f: 66:37:1c:02:4f:ac:8f:fd:59:2f:1b:63:90:68:98:18:23:c2: 79:a0:96:66:61:58:9e:ad:50:d8:cc:fe:80:98:d2:11:00:80: d2:c3:1d:8a:b5:2d:f6:92:45:cd:76:b1:65:e4:18:46:58:41: 62:ba:05:37:fd:8f:2e:ec:05:9b:1b:df:b4:3a:51:6a:2c:f2: 3c:5a:94:d0:2d:bb:d6:5a:64:6e:89:91:d8:ea:66:78:f0:97: 35:9b:6a:b1:98:04:25:af:2c:d7:62:0b:1b:d4:55:b3:78:56: 93:30:d8:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzRUUxMTAvBgNVBAUTKDY5NkFGMjNEOTMyOTVDMkY1RkRERjMyQTk1NTEzQjJE REJCRkNFMUIwHhcNMjUwOTE4MjIyMDQ3WhcNMjUwOTI1MjIyMDQ3WjAYMRYwFAYD VQQDEw02OGNjODViZi1lOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+Pl69C57rzRKYuwN/ftAxJpAeVcb+JIRaV0mBDIz7dymkHaYx5Cgl8QuPBy HglgiIgcif7oDMigw0hSrYlsUPOJ5CTVvu6B88oVXbBL/mR2CAH4FoeWtKgGw0Um 2fRi7L3S+0yYirIvQh34wwPlXHUvE9wa0CwLL0V4686ppB6TiZL0G+zstU73VXZa pWw8PmgUAfik01C5jGGvbdWLdu6WRUZg18zbuXCPB9txDyEwBb4rVZ1212IK/Bg8 6j+lmIhBda2tyL2YOIymZmp+rvkcp3hRNaNmORsRscqlgVucioKYaEV/1X5GYdwP 6wEi/7x9XbtRN1lnws8bukT8RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7MxN/I 6ucqjPX58m8cKUu+7/NLMB8GA1UdIwQYMBaAFGlq8j2TKVwvX93zKpVROy3bv84b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNFRS81Qjk3QThCODcw MTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhDOWYzZk1xbFZFN0xkdV96 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcnlQWk1wWEM5ZjNmTXFsVkU3TGR1X3pocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNFRS81Qjk3QThCODcwMTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhD OWYzZk1xbFZFN0xkdV96aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFfc0mTPrBykMssyivyHEDioH7fdTcp/gtmYGXuHrLZFjfbVGrztQw khQPXsbp+j7p1E1Bydhp+a7oTr0w+pSLJfRyhmK3fIMNwc8bxt6XSH0f6ipL/Xt+ GxRzzXYE0VQFJHchfaJXDhlXKk8oWO5xzLvBqB8qxAw3XH08NqOO3SaBtPLmdtWU rLOFi3dpKJ9mNxwCT6yP/VkvG2OQaJgYI8J5oJZmYVierVDYzP6AmNIRAIDSwx2K tS32kkXNdrFl5BhGWEFiugU3/Y8u7AWbG9+0OlFqLPI8WpTQLbvWWmRuiZHY6mZ4 8Jc1m2qxmAQlryzXYgsb1FWzeFaTMNjr -----END CERTIFICATE-----Generated at Fri Sep 19 09:09:47 2025 by rpki-client