$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: N3nGiBEWAv69mkyNPDu1d/AuW5Da4Xkop30zlTje1ps= Subject key identifier: 78:FE:36:39:F8:66:C3:5A:EF:41:A1:88:91:35:E7:1E:BB:9B:30:6A Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 0145 Signing time: Tue 09 Sep 2025 04:29:08 +0000 Manifest this update: Tue 09 Sep 2025 04:29:07 +0000 Manifest next update: Tue 16 Sep 2025 04:29:07 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: +dePel8E3oUNCEhJ33nXqEpiCKdMVkzbMla2h0BrfsQ=) 2: A4FA29BC750411F09F0F3145C4F9AE02.roa (hash: eq3Foq5M9QUghcS91tb93v1XHbNde25fjNDc1FX1j6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Sep 9 04:29:07 2025 GMT Not After : Sep 16 04:29:07 2025 GMT Subject: CN=68bfad14-705a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:31:82:d1:e3:b9:51:19:96:7b:b4:c2:1c: f1:91:e4:4b:a8:02:47:f3:3f:b5:94:68:3d:34:bc: f0:4f:90:ae:46:56:0a:93:73:54:83:bd:25:18:78: 09:20:ba:93:f2:46:b3:8e:4f:a9:31:6d:22:b7:dc: 76:02:30:5c:5d:6b:e7:26:b0:bf:f5:00:e5:65:4e: c5:32:4b:48:d1:72:f1:bc:d6:2b:84:e0:d3:4e:36: 8d:c7:a4:52:aa:da:a1:e9:10:10:4b:59:65:2b:b6: a7:71:50:8a:b3:21:fd:b1:55:be:ae:c7:00:8c:50: 48:2e:3c:73:0e:25:d0:b0:b3:e7:4c:27:80:f0:c1: 36:77:e5:1d:3d:a6:57:7e:95:b1:71:e9:e9:dc:9e: 46:d9:cc:d1:e6:8d:c0:e5:6f:11:b6:7a:a2:42:53: 3d:56:cd:95:50:ec:21:9b:46:f0:40:27:dd:7a:b9: 64:4e:75:28:86:7c:b7:aa:d7:00:8d:4c:ab:dc:66: 91:48:21:71:fc:d4:19:79:0d:da:8f:4a:e4:39:16: 41:86:81:f5:9f:45:53:20:1e:5a:bb:14:67:e4:ec: 49:4f:b7:61:11:0b:66:d5:8a:79:a2:b6:d0:e7:44: e0:06:89:cd:34:f4:f0:27:a1:ee:71:28:3f:3c:d6: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FE:36:39:F8:66:C3:5A:EF:41:A1:88:91:35:E7:1E:BB:9B:30:6A X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:98:4d:1a:8b:a3:1f:23:22:40:9a:03:94:8a:08:83:59: 13:e2:be:bd:7c:a7:ad:08:4e:e4:15:ea:cc:c4:9f:3f:38:a3: f3:ae:1b:53:7c:2f:31:66:7a:28:09:b6:35:8c:93:9f:47:d2: a7:13:e7:92:af:64:0a:c5:c6:35:49:e4:1d:6d:69:88:7b:63: 1e:fc:3d:b1:dd:44:b7:9e:2c:cd:fc:55:49:58:01:28:fd:b3: 89:c9:c3:5c:75:69:cc:2d:ef:f8:3a:9c:18:fa:4c:2f:27:f0: 73:db:e4:1e:ae:94:6b:5f:08:8a:11:82:41:7c:47:6d:b8:b9: 2f:92:ca:0a:6a:cc:73:c0:71:7a:65:66:51:d0:5b:64:a5:e5: 1e:51:72:ad:53:b6:48:ff:39:4a:cc:80:61:a2:60:b1:58:ae: 35:b0:17:ce:e5:be:fc:c1:67:7c:80:8e:d2:92:7d:2a:0f:17: ed:a7:9f:fd:ab:26:70:6d:f3:2d:13:49:22:7a:8c:12:37:55: ed:7c:be:4e:64:5c:68:4f:0b:50:c2:ba:86:df:84:db:f3:d3: 38:5b:85:a1:02:7e:ff:8a:50:d0:21:92:c1:72:3f:82:ba:bf: 5e:76:8b:65:aa:84:e5:d1:ec:c7:16:01:29:a6:ef:38:28:f8: 76:e8:26:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjUwOTA5MDQyOTA3WhcNMjUwOTE2MDQyOTA3WjAYMRYwFAYD VQQDEw02OGJmYWQxNC03MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4oxgtHjuVEZlnu0whzxkeRLqAJH8z+1lGg9NLzwT5CuRlYKk3NUg70lGHgJ ILqT8kazjk+pMW0it9x2AjBcXWvnJrC/9QDlZU7FMktI0XLxvNYrhODTTjaNx6RS qtqh6RAQS1llK7ancVCKsyH9sVW+rscAjFBILjxzDiXQsLPnTCeA8ME2d+UdPaZX fpWxcenp3J5G2czR5o3A5W8RtnqiQlM9Vs2VUOwhm0bwQCfderlkTnUohny3qtcA jUyr3GaRSCFx/NQZeQ3aj0rkORZBhoH1n0VTIB5auxRn5OxJT7dhEQtm1Yp5orbQ 50TgBonNNPTwJ6HucSg/PNbWpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj+Njn4 ZsNa70GhiJE15x67mzBqMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAddZhNGoujHyMiQJoDlIoIg1kT4r69fKetCE7kFerMxJ8/OKPzrhtT fC8xZnooCbY1jJOfR9KnE+eSr2QKxcY1SeQdbWmIe2Me/D2x3US3nizN/FVJWAEo /bOJycNcdWnMLe/4OpwY+kwvJ/Bz2+QerpRrXwiKEYJBfEdtuLkvksoKasxzwHF6 ZWZR0FtkpeUeUXKtU7ZI/zlKzIBhomCxWK41sBfO5b78wWd8gI7Skn0qDxftp5/9 qyZwbfMtE0kieowSN1XtfL5OZFxoTwtQwrqG34Tb89M4W4WhAn7/ilDQIZLBcj+C ur9edotlqoTl0ezHFgEppu84KPh26Cbz -----END CERTIFICATE-----Generated at Wed Sep 10 07:51:03 2025 by rpki-client