$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: NwAKB7VK+HQ2ysauB25F6n1Kwh8HRWpSX/RJRU/bqYc= Subject key identifier: 14:59:E4:1E:85:AB:9B:D0:14:80:5C:71:81:FB:F9:EF:26:99:BB:44 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2DB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D92 Signing time: Thu 18 Sep 2025 15:34:53 +0000 Manifest this update: Thu 18 Sep 2025 15:34:53 +0000 Manifest next update: Thu 25 Sep 2025 15:34:53 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: tEdsYOhUYtsnPGfQey85mnxMo9nTNve7oZxQcUYfO5o=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11700 (0x2db4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Sep 18 15:34:53 2025 GMT Not After : Sep 25 15:34:53 2025 GMT Subject: CN=68cc269d-fadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:d5:ba:65:c1:a3:77:60:24:41:b7:92:b7: fd:fb:2d:3e:fc:50:7c:1a:7c:94:0d:b1:e8:0e:42: fd:9e:3c:31:da:a7:3a:80:9a:25:6c:0e:80:d7:35: f2:98:33:fc:7a:38:46:56:87:08:c9:b8:82:ce:18: eb:4f:eb:32:23:7d:47:2d:80:17:3a:2d:77:27:33: cc:8d:ca:23:16:d8:ce:6c:0b:a3:0c:04:26:4c:31: 67:8e:aa:da:96:0a:a1:30:82:23:12:0f:02:53:f4: 7f:d9:93:8c:44:8c:ad:c6:ec:15:2b:2e:af:45:23: 6d:c1:41:4a:1c:92:2c:b3:d8:47:63:02:5f:f0:87: 4d:95:30:0c:3a:77:10:15:f4:ca:c1:8e:d9:51:7f: 53:76:83:68:07:65:e2:10:ef:33:f7:ff:e0:12:6a: 7b:7d:01:1b:33:09:91:68:0e:55:d0:a5:42:de:d2: fc:01:eb:4f:53:03:7f:6e:9b:a2:a0:9c:d3:b4:aa: 86:ec:05:bd:a9:a3:ac:1b:97:b3:fe:a1:40:55:fe: 44:ba:5e:f2:41:a2:77:dc:c0:a9:9a:67:6a:74:d1: f7:f2:9a:ba:90:4a:18:37:7d:c1:4f:18:9b:06:84: 64:ef:91:54:e7:a2:63:1d:a7:58:04:97:2f:c1:7e: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:E4:1E:85:AB:9B:D0:14:80:5C:71:81:FB:F9:EF:26:99:BB:44 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:df:91:83:7c:8b:79:5f:43:81:44:1d:ad:4e:c9:bd:36:a0: 20:90:24:5a:93:ca:a5:30:a1:ca:21:95:aa:4e:cb:1e:05:f2: 7e:4b:86:d3:d1:89:40:63:9f:67:68:19:69:ba:2d:b9:e5:3a: 32:0f:26:f4:a5:3d:fe:81:6d:01:64:da:17:ff:0e:93:d7:6d: 7e:1a:19:ae:29:32:d5:4c:b5:26:4f:c8:f5:01:c4:01:08:d1: 72:f0:57:97:31:b4:c1:6b:b4:2c:4a:3a:d5:3b:c4:bf:08:f3: d7:d1:8d:0d:1a:88:b3:7d:ac:30:45:78:b3:ac:13:3b:ee:2b: 77:dc:5f:d0:4a:26:a9:af:6e:49:08:a4:71:4d:dc:b6:a1:f7: d6:bb:78:42:13:89:22:80:6b:26:ff:31:9e:3c:8c:0e:65:a0: fc:64:bf:c9:b9:d3:7a:a2:ad:78:9f:3a:6f:68:71:ce:9b:05: b7:a2:69:b9:42:5e:86:61:7b:4e:56:2a:e0:25:71:6f:b0:9f: b3:a8:c2:1d:42:4e:ee:30:42:ad:ac:6b:d3:80:59:ee:09:91: 66:0b:7d:9a:9b:85:23:99:4c:30:13:b9:f3:9f:68:98:cb:8c: d6:28:9d:b9:ca:e7:06:ae:96:f9:5e:76:42:0b:54:3b:f0:80: 16:67:7e:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwOTE4MTUzNDUzWhcNMjUwOTI1MTUzNDUzWjAYMRYwFAYD VQQDEw02OGNjMjY5ZC1mYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMPVumXBo3dgJEG3krf9+y0+/FB8GnyUDbHoDkL9njwx2qc6gJolbA6A1zXy mDP8ejhGVocIybiCzhjrT+syI31HLYAXOi13JzPMjcojFtjObAujDAQmTDFnjqra lgqhMIIjEg8CU/R/2ZOMRIytxuwVKy6vRSNtwUFKHJIss9hHYwJf8IdNlTAMOncQ FfTKwY7ZUX9TdoNoB2XiEO8z9//gEmp7fQEbMwmRaA5V0KVC3tL8AetPUwN/bpui oJzTtKqG7AW9qaOsG5ez/qFAVf5Eul7yQaJ33MCpmmdqdNH38pq6kEoYN33BTxib BoRk75FU56JjHadYBJcvwX4gAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRZ5B6F q5vQFIBccYH7+e8mmbtEMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO35GDfIt5X0OBRB2tTsm9NqAgkCRak8qlMKHKIZWqTsseBfJ+S4bT 0YlAY59naBlpui255ToyDyb0pT3+gW0BZNoX/w6T121+GhmuKTLVTLUmT8j1AcQB CNFy8FeXMbTBa7QsSjrVO8S/CPPX0Y0NGoizfawwRXizrBM77it33F/QSiapr25J CKRxTdy2offWu3hCE4kigGsm/zGePIwOZaD8ZL/JudN6oq14nzpvaHHOmwW3omm5 Ql6GYXtOVirgJXFvsJ+zqMIdQk7uMEKtrGvTgFnuCZFmC32am4UjmUwwE7nzn2iY y4zWKJ25yucGrpb5XnZCC1Q78IAWZ34F -----END CERTIFICATE-----Generated at Thu Sep 18 23:31:42 2025 by rpki-client