$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json) Hash identifier: Ukp30iHgTa0BNYc7XnkCcIYb/rUK6Vkpl1DMlEP5E9U= Subject key identifier: F1:5D:D9:02:1E:FD:92:00:F7:03:76:3A:4D:27:39:E4:F4:EC:BF:7E Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft Manifest number: 016C Signing time: Sat 23 Aug 2025 03:58:30 +0000 Manifest this update: Sat 23 Aug 2025 03:58:30 +0000 Manifest next update: Sat 30 Aug 2025 03:58:30 +0000 Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: EznTNvGl1YvKab7TOvys4TTfibogfToX5yrbnaAfRFU=) 2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: F6++iy8cEbKQfe1Q/Aey0VLsmUU4uYp21N+gDBYbdrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAD4, serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Validity Not Before: Aug 23 03:58:30 2025 GMT Not After : Aug 30 03:58:30 2025 GMT Subject: CN=68a93c66-1b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:5e:69:49:3c:b4:5e:b5:c8:a2:b0:5a:6c: ef:fd:a8:f1:46:57:6e:0c:50:57:ee:40:46:4c:a3: 1d:a4:59:2d:6f:73:9b:62:3e:b5:51:87:53:c7:d3: eb:8d:c1:f7:7c:6d:c9:4d:8b:ad:14:8f:f7:54:ac: 4a:dc:22:f9:f2:26:c0:76:ec:4c:5b:4f:5a:33:1f: 6d:18:6b:56:f0:2d:ec:7a:34:7e:a8:1a:a7:da:c9: c7:c9:f8:49:07:18:68:43:c5:4f:86:ab:83:76:ff: 8a:3a:f0:82:e0:23:ea:fd:5c:c6:81:3f:0b:4f:07: c5:6f:eb:69:f3:60:62:a4:1b:22:96:cf:d3:4a:e5: 50:a1:70:0c:11:a5:fb:88:28:bf:29:b1:59:c7:d4: f6:08:f0:78:3e:a2:5c:3b:c3:c5:bd:5b:57:07:43: d5:67:0e:b4:35:19:9d:39:e2:1c:c5:db:96:c8:6f: 0e:fc:17:b0:c8:2d:af:50:2c:70:84:22:57:8f:cf: bb:f3:1f:cf:e6:65:81:ce:35:99:0f:db:fe:e1:d2: c6:1c:8c:82:e5:6f:34:78:13:f7:7e:48:f4:b1:d3: fb:2f:4e:34:ab:9f:39:d4:00:0d:ad:6b:ca:e0:11: 3d:0d:82:90:67:04:07:ad:09:b1:44:86:dd:23:aa: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:D9:02:1E:FD:92:00:F7:03:76:3A:4D:27:39:E4:F4:EC:BF:7E X509v3 Authority Key Identifier: keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:55:b4:ff:52:f6:a5:26:41:06:85:49:e9:e7:9d:de:17:f5: f7:7a:42:03:93:0d:f7:f6:49:dd:92:88:67:78:ca:48:a9:53: 3d:b9:4a:e9:aa:d2:84:ed:ed:fb:42:01:d5:2b:7c:2b:fc:30: bb:15:21:c8:5e:e1:a4:b3:f9:5b:63:94:13:81:18:7e:0a:de: 24:ef:d6:9a:f5:c8:63:57:db:bb:d6:e8:89:8e:af:be:67:6d: 38:45:1d:d0:07:d8:03:6b:4b:47:a5:00:3c:b5:ab:dc:04:37: 18:d5:b6:e7:3b:60:83:95:e7:08:52:87:03:f7:3f:63:58:b5: 49:4e:e3:61:0d:f6:f4:61:53:20:da:98:a2:03:c8:95:1c:d1: 8f:16:32:6f:d0:d2:d4:30:dd:88:96:98:1a:e4:13:f3:a3:71: 9e:6b:c1:ed:c8:fb:45:92:7e:2b:d3:6a:3d:c5:45:13:18:c8: f7:d7:4b:1f:4d:11:31:3e:20:ff:02:96:73:92:06:0a:04:d6: de:f9:cc:dd:f4:4c:5f:0b:97:c9:7e:98:42:b1:17:50:c6:87: 78:d2:a3:44:c2:c1:fe:59:dd:3f:4c:b0:09:8a:07:2c:94:7f: cc:3f:43:0e:91:4f:4a:29:eb:6e:31:df:b3:55:78:9c:8e:0b: 6e:61:91:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBRDQxMTAvBgNVBAUTKENGNDc2NjQyODA0RkNGRjlENzA5Mjg5NjM1ODM1NUQ1 QUMwMEVBNzMwHhcNMjUwODIzMDM1ODMwWhcNMjUwODMwMDM1ODMwWjAYMRYwFAYD VQQDEw02OGE5M2M2Ni0xYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eBeaUk8tF61yKKwWmzv/ajxRlduDFBX7kBGTKMdpFktb3ObYj61UYdTx9Pr jcH3fG3JTYutFI/3VKxK3CL58ibAduxMW09aMx9tGGtW8C3sejR+qBqn2snHyfhJ BxhoQ8VPhquDdv+KOvCC4CPq/VzGgT8LTwfFb+tp82BipBsils/TSuVQoXAMEaX7 iCi/KbFZx9T2CPB4PqJcO8PFvVtXB0PVZw60NRmdOeIcxduWyG8O/BewyC2vUCxw hCJXj8+78x/P5mWBzjWZD9v+4dLGHIyC5W80eBP3fkj0sdP7L040q5851AANrWvK 4BE9DYKQZwQHrQmxRIbdI6pP2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFd2QIe /ZIA9wN2Ok0nOeT07L9+MB8GA1UdIwQYMBaAFM9HZkKAT8/51wkoljWDVdWsAOpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFENC8wREQ4Rjc5RTUx QkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpfblhDU2lXTllOVjFhd0E2 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owZG1Rb0JQel9uWENTaVdOWU5WMWF3QTZuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFENC8wREQ4Rjc5RTUxQkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpf blhDU2lXTllOVjFhd0E2bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwVbT/UvalJkEGhUnp553eF/X3ekIDkw339kndkohneMpIqVM9uUrp qtKE7e37QgHVK3wr/DC7FSHIXuGks/lbY5QTgRh+Ct4k79aa9chjV9u71uiJjq++ Z204RR3QB9gDa0tHpQA8tavcBDcY1bbnO2CDlecIUocD9z9jWLVJTuNhDfb0YVMg 2piiA8iVHNGPFjJv0NLUMN2Ilpga5BPzo3Gea8HtyPtFkn4r02o9xUUTGMj310sf TRExPiD/ApZzkgYKBNbe+czd9ExfC5fJfphCsRdQxod40qNEwsH+Wd0/TLAJigcs lH/MP0MOkU9KKetuMd+zVXicjgtuYZHB -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:48 2025 by rpki-client