$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: lt5inmbmpaSWNe+SrCZ1k3bzyKuTsqI+gd3NY5iFafo= Subject key identifier: D5:38:13:24:E6:90:08:01:E2:12:16:E5:4D:08:00:B9:D2:F2:A0:CF Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 2325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 2316 Signing time: Sun 24 Aug 2025 15:48:53 +0000 Manifest this update: Sun 24 Aug 2025 15:48:53 +0000 Manifest next update: Sun 31 Aug 2025 15:48:53 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: g8qGUAckRKu9abH6UNZu0aVGWEGvrsR2avJQGw3SgB0=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8997 (0x2325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Aug 24 15:48:53 2025 GMT Not After : Aug 31 15:48:53 2025 GMT Subject: CN=68ab3465-111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:e1:96:08:72:2d:25:08:88:c4:48:f1:31: 88:f7:e3:af:4b:b0:ab:bd:94:a7:3e:62:6c:88:53: 46:b8:c2:53:9d:40:91:d5:6a:bd:b8:d3:74:77:0c: 12:32:e7:14:cd:d9:4d:4a:08:97:0a:69:b2:61:1e: 5b:61:e8:5a:a8:0c:08:34:ce:42:e6:fb:c8:ce:13: cd:e3:c6:c8:45:81:68:07:5b:bc:3e:54:87:4d:64: 80:f3:5e:55:d8:cd:0a:63:28:84:76:27:20:14:02: a3:49:24:0f:ee:31:08:0d:1d:0e:a5:a6:fa:10:ec: dc:f0:76:bf:81:bf:4b:8e:6b:79:4a:65:63:c0:c3: 78:25:fd:f9:b7:84:49:01:ad:64:69:34:bb:3e:9c: 17:99:95:a6:6f:9b:2d:17:47:60:ef:b3:29:b2:9a: bf:7b:2a:9b:6c:ad:d2:bf:9b:53:aa:9e:95:74:24: 34:77:a2:df:86:fd:92:0e:aa:7f:a9:6c:3b:a8:45: 16:2d:c2:85:c3:4c:67:0e:a0:d7:15:b2:54:43:71: 6a:23:8f:80:2d:f4:ff:a7:a8:b9:e7:39:7a:da:9b: 45:36:53:2b:b0:8d:f6:5e:19:0e:da:ff:de:e4:92: ba:5b:3e:6d:68:7d:15:9b:9e:60:5f:35:99:9f:de: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:38:13:24:E6:90:08:01:E2:12:16:E5:4D:08:00:B9:D2:F2:A0:CF X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:47:23:ae:92:5b:2b:6c:df:ef:d4:ac:0f:31:f7:2f:5c:84: c7:3a:b7:62:c6:0e:18:4e:d3:c5:c7:d2:65:88:ce:5b:0c:28: 4f:95:47:49:e1:ef:e6:f5:54:74:6b:83:cb:04:e2:b9:61:3f: 8e:97:42:fc:e3:35:ff:3e:fe:c5:75:30:a9:58:10:27:5b:74: 83:4a:44:a2:6c:60:46:50:d0:9c:91:e0:73:f7:49:59:00:c4: c4:bb:8a:69:57:c7:9e:d0:95:76:1d:16:c7:b9:ef:60:ae:b7: 5d:7a:35:8c:18:7e:2f:18:c8:ff:c2:b9:c9:4d:a7:81:c7:83: eb:76:d7:99:7f:b8:2d:5f:bb:c5:da:3a:5b:31:5c:ae:27:4c: 9c:54:6e:76:5c:cf:a4:cf:7c:6a:82:50:75:f0:e8:89:35:3a: 7d:b1:c4:9b:2b:53:ac:38:3b:14:f7:35:23:1f:51:8a:d3:35: ef:f7:4f:45:31:2d:ee:4e:54:d9:20:3a:56:7f:c6:0a:9b:c3: 21:2e:7d:f9:0a:2d:4a:00:61:99:53:a4:94:e4:83:e3:4f:49: 10:d7:5b:dd:33:5a:20:6e:51:1b:5d:41:b4:9d:37:ab:95:07: 4c:b1:1b:93:c3:62:1d:94:16:f6:6d:ec:e4:e0:10:ce:6e:3b: 5b:53:8a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUwODI0MTU0ODUzWhcNMjUwODMxMTU0ODUzWjAYMRYwFAYD VQQDEw02OGFiMzQ2NS0xMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0nhlghyLSUIiMRI8TGI9+OvS7CrvZSnPmJsiFNGuMJTnUCR1Wq9uNN0dwwS MucUzdlNSgiXCmmyYR5bYehaqAwINM5C5vvIzhPN48bIRYFoB1u8PlSHTWSA815V 2M0KYyiEdicgFAKjSSQP7jEIDR0Opab6EOzc8Ha/gb9Ljmt5SmVjwMN4Jf35t4RJ Aa1kaTS7PpwXmZWmb5stF0dg77Mpspq/eyqbbK3Sv5tTqp6VdCQ0d6Lfhv2SDqp/ qWw7qEUWLcKFw0xnDqDXFbJUQ3FqI4+ALfT/p6i55zl62ptFNlMrsI32XhkO2v/e 5JK6Wz5taH0Vm55gXzWZn94eUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNU4EyTm kAgB4hIW5U0IALnS8qDPMB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6RyOuklsrbN/v1KwPMfcvXITHOrdixg4YTtPFx9JliM5bDChPlUdJ 4e/m9VR0a4PLBOK5YT+Ol0L84zX/Pv7FdTCpWBAnW3SDSkSibGBGUNCckeBz90lZ AMTEu4ppV8ee0JV2HRbHue9grrddejWMGH4vGMj/wrnJTaeBx4PrdteZf7gtX7vF 2jpbMVyuJ0ycVG52XM+kz3xqglB18OiJNTp9scSbK1OsODsU9zUjH1GK0zXv909F MS3uTlTZIDpWf8YKm8MhLn35Ci1KAGGZU6SU5IPjT0kQ11vdM1ogblEbXUG0nTer lQdMsRuTw2IdlBb2bezk4BDObjtbU4pP -----END CERTIFICATE-----Generated at Sun Aug 24 21:56:21 2025 by rpki-client