$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: WRb66yGDq/mynSk/6dPeVjOTsgCR0E9nyvMgmcELKI4= Subject key identifier: 49:B7:1B:43:A5:7E:E1:DD:B3:7F:30:C8:D3:D8:4F:A2:47:0E:A9:73 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0C0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0C06 Signing time: Sun 24 Aug 2025 18:43:48 +0000 Manifest this update: Sun 24 Aug 2025 18:43:47 +0000 Manifest next update: Sun 31 Aug 2025 18:43:47 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: 3I474P+bog4RoCvrH25UKfui2cUuf89ImlgwMYOxGxA=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Aug 24 18:43:47 2025 GMT Not After : Aug 31 18:43:47 2025 GMT Subject: CN=68ab5d63-bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a6:38:d3:6f:0f:85:9e:23:8c:b1:2a:b8:96: cc:62:0f:20:e0:fd:ab:f4:b6:09:a5:18:a9:41:ee: c8:30:ab:00:11:3b:cc:4b:1b:ca:23:02:c9:6f:cc: b9:ec:f9:0d:2d:89:09:51:31:c6:f2:56:ac:d3:e2: b4:ab:df:56:42:9c:a7:74:9b:da:b4:43:18:eb:2e: e2:ab:c2:7b:2b:e6:58:00:69:38:43:52:e8:22:25: ae:d7:3b:9a:f2:df:ff:84:6a:a4:28:26:5b:f7:89: c7:c2:d5:87:30:8f:0c:17:f3:18:c2:b1:86:d2:19: ad:78:42:19:d6:e9:7b:ed:79:0a:8a:18:6f:c7:e9: cd:b2:73:82:c6:e8:0a:5a:32:12:c1:c6:54:8e:85: 71:37:54:e3:60:42:e3:21:f7:0d:20:11:80:02:4b: ad:6b:5d:a7:8d:3e:65:ea:0d:20:cc:d6:9f:1d:0d: 35:da:4e:f5:67:11:7a:5d:9a:bf:aa:d0:5f:ae:1e: 17:ae:b6:91:f9:31:06:33:e3:e5:7c:d4:ea:82:63: 4b:fd:4d:8d:07:1d:60:dd:44:f0:3f:9a:e2:a1:a6: b3:eb:fd:a7:ff:ee:e6:3f:d2:4c:cc:32:fc:c1:fa: 3b:b5:bf:f0:6b:ed:3f:f4:12:7b:43:13:04:f8:90: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:1B:43:A5:7E:E1:DD:B3:7F:30:C8:D3:D8:4F:A2:47:0E:A9:73 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:43:31:fe:84:1b:57:43:ad:18:11:31:4f:51:35:c9:27:a4: 59:41:f3:54:ae:29:c7:ab:fa:ba:d3:ae:f0:ad:32:27:14:93: 06:97:cf:df:12:08:73:d7:48:04:82:d2:27:2d:31:4a:a3:9d: 87:20:6a:c0:30:3b:14:a5:7a:b3:d0:fc:fa:ea:81:b6:ca:7b: 11:fc:1d:84:2f:7a:93:f2:ec:27:25:7a:80:8a:bb:3d:94:96: 61:87:6d:da:56:ba:a9:96:58:64:09:c1:d8:d7:fd:31:99:77: 4f:57:61:2a:93:a8:02:21:a8:fc:aa:ba:55:9f:93:1c:be:f4: 13:43:0f:da:98:25:c8:2a:78:d5:48:e9:71:d7:74:fa:b2:c5: d4:d1:d9:fe:97:00:00:cd:d9:58:45:03:57:52:8d:80:4c:3e: 02:80:a2:e0:85:fe:ea:20:a1:8d:90:fb:c4:27:74:e9:38:58: c7:84:14:d8:24:66:bc:8a:57:44:87:7e:2a:01:9c:7b:3c:6b: 0b:aa:b1:42:5e:c4:be:b1:51:19:68:b2:2a:5a:96:fc:89:0c: c9:d2:24:1f:1f:3b:25:4d:b4:08:dc:b4:5a:73:50:a1:cb:12: a6:ff:a5:2d:35:93:3c:99:db:26:70:8f:bb:f0:56:3e:ea:61: 0c:d7:0d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjUwODI0MTg0MzQ3WhcNMjUwODMxMTg0MzQ3WjAYMRYwFAYD VQQDEw02OGFiNWQ2My1iYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aY4028PhZ4jjLEquJbMYg8g4P2r9LYJpRipQe7IMKsAETvMSxvKIwLJb8y5 7PkNLYkJUTHG8las0+K0q99WQpyndJvatEMY6y7iq8J7K+ZYAGk4Q1LoIiWu1zua 8t//hGqkKCZb94nHwtWHMI8MF/MYwrGG0hmteEIZ1ul77XkKihhvx+nNsnOCxugK WjISwcZUjoVxN1TjYELjIfcNIBGAAkuta12njT5l6g0gzNafHQ012k71ZxF6XZq/ qtBfrh4XrraR+TEGM+PlfNTqgmNL/U2NBx1g3UTwP5rioaaz6/2n/+7mP9JMzDL8 wfo7tb/wa+0/9BJ7QxME+JAatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm3G0Ol fuHds38wyNPYT6JHDqlzMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQzH+hBtXQ60YETFPUTXJJ6RZQfNUrinHq/q6067wrTInFJMGl8/f Eghz10gEgtInLTFKo52HIGrAMDsUpXqz0Pz66oG2ynsR/B2EL3qT8uwnJXqAirs9 lJZhh23aVrqpllhkCcHY1/0xmXdPV2Eqk6gCIaj8qrpVn5McvvQTQw/amCXIKnjV SOlx13T6ssXU0dn+lwAAzdlYRQNXUo2ATD4CgKLghf7qIKGNkPvEJ3TpOFjHhBTY JGa8ildEh34qAZx7PGsLqrFCXsS+sVEZaLIqWpb8iQzJ0iQfHzslTbQI3LRac1Ch yxKm/6UtNZM8mdsmcI+78FY+6mEM1w0o -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:05 2025 by rpki-client