$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: u50vAY6R4AgarZ1Huvm4h7SyMgcifXNcrPcglzxj5jM= Subject key identifier: 97:04:FD:6E:11:3D:96:66:E7:01:D2:18:B5:62:A5:12:1F:2B:18:1B Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 27F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 27EA Signing time: Wed 20 Aug 2025 15:40:12 +0000 Manifest this update: Wed 20 Aug 2025 15:40:11 +0000 Manifest next update: Wed 27 Aug 2025 15:40:11 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: OfKNvtJBl9G6IjqnpTeCFQLN2D7vZ0Iu7dlP9AS34Zk=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10232 (0x27f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Aug 20 15:40:11 2025 GMT Not After : Aug 27 15:40:11 2025 GMT Subject: CN=68a5ec5b-4553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:e6:8f:5a:7b:fe:da:43:84:c4:74:ae:4e: e0:2b:21:77:ed:b0:54:fd:ab:b9:ec:54:51:ca:52: 0a:8c:96:7b:17:70:00:fc:1c:ea:de:19:26:3e:9b: eb:89:3f:5e:18:ac:60:96:51:12:13:20:fb:d1:4d: 34:aa:14:09:a5:3d:0e:07:d0:ab:0c:96:3b:ab:b3: 87:f4:a4:29:ba:7e:b2:37:e8:82:93:5b:77:a6:2d: ca:69:4b:34:bd:27:06:a4:0f:f2:8b:a8:5e:9e:98: f3:8f:5d:31:5c:82:ad:46:6c:50:f4:91:72:c5:23: 7f:d1:95:08:47:e9:1b:5a:be:fc:6f:9d:60:19:95: fe:77:47:d3:38:6d:28:13:64:a9:53:22:3a:1c:8c: c3:ee:2a:b1:c8:3c:07:1d:6d:b3:4b:cf:57:d7:ba: 22:04:52:3e:a0:67:1f:78:89:1a:6d:e9:c0:43:f5: 44:98:0b:2d:39:46:4e:02:96:65:7d:e0:41:86:e8: 5c:68:7d:c7:68:f4:4f:05:5d:da:cd:3a:54:60:5d: 83:2a:e0:96:f2:67:56:c4:39:f0:8d:61:15:61:5a: ef:06:5a:f7:1a:46:85:28:2b:48:ac:24:dd:92:bf: bc:0a:a0:8f:15:ab:0e:a5:a0:e0:fa:4d:e0:b5:bd: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:04:FD:6E:11:3D:96:66:E7:01:D2:18:B5:62:A5:12:1F:2B:18:1B X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7d:33:0d:fa:c3:c9:10:ea:80:3f:08:3e:f6:23:2f:70:4a: 2e:95:7f:32:2a:56:2d:8e:ce:9d:1a:6f:39:82:a8:55:bf:ba: f7:da:b6:c8:bc:02:79:85:d6:8e:9e:d6:75:25:2c:61:b5:51: 43:6a:d3:c5:b0:ec:eb:82:e0:97:bd:09:14:bf:e6:6a:98:a8: ae:bc:17:08:23:5f:64:d8:4d:b6:e6:e9:d7:95:a9:9f:c0:75: 51:ae:5d:9b:73:7c:04:5f:f9:3b:aa:be:33:92:dc:da:1b:41: 09:3c:fe:52:13:d7:2b:8a:cc:fe:e5:53:69:8c:97:55:d5:1f: b9:a5:98:09:35:3e:c9:35:75:3b:d0:2b:d8:a1:47:e6:09:ba: 3e:3f:95:b6:81:4a:a5:af:79:56:91:cb:02:3b:b0:bc:b1:41: 7d:f4:36:7a:cc:f3:23:3c:75:13:3b:c2:f6:af:ac:d0:d4:0a: f5:ac:8c:5c:ec:08:ad:d9:62:dd:07:6d:41:99:f6:2a:bf:77: f7:b8:f2:e4:2f:8e:2d:3e:ee:21:d9:66:e9:7f:5d:95:db:a5: 8f:6a:72:45:b4:b2:c3:e9:37:e1:e7:51:aa:1b:23:5e:a6:58: f2:c1:4e:93:de:35:d2:3e:b2:5c:f2:93:97:10:77:08:66:c5: 88:84:d9:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUwODIwMTU0MDExWhcNMjUwODI3MTU0MDExWjAYMRYwFAYD VQQDEw02OGE1ZWM1Yi00NTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xXmj1p7/tpDhMR0rk7gKyF37bBU/au57FRRylIKjJZ7F3AA/Bzq3hkmPpvr iT9eGKxgllESEyD70U00qhQJpT0OB9CrDJY7q7OH9KQpun6yN+iCk1t3pi3KaUs0 vScGpA/yi6henpjzj10xXIKtRmxQ9JFyxSN/0ZUIR+kbWr78b51gGZX+d0fTOG0o E2SpUyI6HIzD7iqxyDwHHW2zS89X17oiBFI+oGcfeIkabenAQ/VEmAstOUZOApZl feBBhuhcaH3HaPRPBV3azTpUYF2DKuCW8mdWxDnwjWEVYVrvBlr3GkaFKCtIrCTd kr+8CqCPFasOpaDg+k3gtb3ebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcE/W4R PZZm5wHSGLVipRIfKxgbMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqfTMN+sPJEOqAPwg+9iMvcEoulX8yKlYtjs6dGm85gqhVv7r32rbI vAJ5hdaOntZ1JSxhtVFDatPFsOzrguCXvQkUv+ZqmKiuvBcII19k2E225unXlamf wHVRrl2bc3wEX/k7qr4zktzaG0EJPP5SE9crisz+5VNpjJdV1R+5pZgJNT7JNXU7 0CvYoUfmCbo+P5W2gUqlr3lWkcsCO7C8sUF99DZ6zPMjPHUTO8L2r6zQ1Ar1rIxc 7Ait2WLdB21BmfYqv3f3uPLkL44tPu4h2Wbpf12V26WPanJFtLLD6Tfh51GqGyNe pljywU6T3jXSPrJc8pOXEHcIZsWIhNlw -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:18 2025 by rpki-client