$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json) Hash identifier: hnMFu0iWzuj+G1r26ZxEPBNi/OxK0t4ojKO5yqdMMtg= Subject key identifier: D7:81:CB:93:82:E3:D8:82:7D:0E:F6:36:F9:F5:07:B9:30:D0:EC:24 Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80 Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft Manifest number: 34B0 Signing time: Sun 24 Aug 2025 14:40:53 +0000 Manifest this update: Sun 24 Aug 2025 14:40:52 +0000 Manifest next update: Sun 31 Aug 2025 14:40:52 +0000 Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: 5rRcCuZI9t2xfFz4W3/VtJQlzo+nsIOvsVUgr3KiXM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580 Validity Not Before: Aug 24 14:40:52 2025 GMT Not After : Aug 31 14:40:52 2025 GMT Subject: CN=68ab2474-f7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:de:d5:04:53:37:04:0b:f5:9c:d6:c9:01: 04:80:e2:e6:dc:b2:52:36:51:74:b7:b1:4f:7b:60: 46:52:5b:9e:4f:86:95:6a:b8:05:59:e8:af:e4:b3: f7:94:7a:94:2e:95:c9:bd:b9:7b:93:6c:83:76:fd: 50:59:47:09:74:55:36:56:8b:10:02:16:45:2d:90: d5:5d:8c:a7:f8:b3:c9:61:86:d8:1f:b4:9b:30:84: 5e:60:f7:47:48:c9:76:29:47:e0:41:bb:83:df:7f: 72:e2:91:31:e8:8d:93:da:73:20:8f:05:ef:46:cf: 54:f6:1e:ba:65:73:cf:d2:50:84:72:17:ca:ba:d9: 94:6e:e4:54:ef:83:5e:09:38:f8:c9:4b:31:b8:ba: f0:ef:d0:a8:17:7b:ee:50:e4:d0:16:ff:a0:02:3c: 10:e1:98:f4:38:a7:36:cc:40:12:78:44:51:73:7c: f7:f0:48:85:8e:3a:ee:f1:2c:28:d4:45:28:2b:ff: f3:20:e1:b0:6c:cd:b7:05:c8:81:7d:6c:fc:c5:d7: 7f:71:3d:0d:49:cb:91:f2:29:30:bf:d9:f9:36:9d: 3b:1d:92:80:9e:76:05:4a:1c:3f:c4:1c:ab:24:02: 40:46:c2:cc:98:38:60:08:15:f5:50:9f:6b:8d:f8: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:CB:93:82:E3:D8:82:7D:0E:F6:36:F9:F5:07:B9:30:D0:EC:24 X509v3 Authority Key Identifier: keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:67:82:40:ba:be:98:e5:24:3e:5a:b9:fb:b1:5b:6f:52:1c: 4c:f4:f0:d0:1b:25:b8:cd:72:c9:85:b5:c5:db:75:08:d4:df: 13:f0:3e:52:b3:66:ed:87:62:0e:c6:c5:d9:9e:f7:6d:09:d3: 7f:09:2e:6e:e8:42:5d:35:2c:57:36:67:60:75:66:07:a4:eb: 94:20:c8:44:e0:70:3f:ab:33:9d:70:6b:bb:55:e7:2c:fa:9b: ab:61:85:12:3d:24:5d:65:8a:d5:82:da:89:a2:ac:21:e6:21: 49:71:2a:ff:19:79:04:b7:2b:7c:f5:6a:91:61:57:fc:82:24: 48:55:a3:c3:e7:dc:75:bf:2f:fe:25:7f:7f:77:e3:df:ff:07: 45:99:2f:e5:34:1d:81:a0:ae:22:1e:1c:5c:a6:96:59:66:a2: 01:4f:ed:90:62:64:35:a1:1d:77:ac:77:f4:47:4f:7c:d8:d3: 74:a8:9a:03:0e:9e:07:8a:1e:75:45:fd:5d:75:f3:15:60:70: 22:cf:73:1f:cf:b7:85:37:21:ae:52:3b:62:6c:47:c8:0d:37: c3:a9:e8:7d:c5:ad:a5:22:c7:e6:f7:74:fe:31:fb:44:90:34: fd:40:6c:cf:57:d7:dd:b4:5c:73:b3:11:9c:4d:44:11:5c:13: 96:b0:d6:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RDREExMTAvBgNVBAUTKDY3MDZEOTg0RTczMTY4MTIwMjE4OEQyOTlFRDM1RjAw NUIwMTc1ODAwHhcNMjUwODI0MTQ0MDUyWhcNMjUwODMxMTQ0MDUyWjAYMRYwFAYD VQQDEw02OGFiMjQ3NC1mN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU/e1QRTNwQL9ZzWyQEEgOLm3LJSNlF0t7FPe2BGUlueT4aVargFWeiv5LP3 lHqULpXJvbl7k2yDdv1QWUcJdFU2VosQAhZFLZDVXYyn+LPJYYbYH7SbMIReYPdH SMl2KUfgQbuD339y4pEx6I2T2nMgjwXvRs9U9h66ZXPP0lCEchfKutmUbuRU74Ne CTj4yUsxuLrw79CoF3vuUOTQFv+gAjwQ4Zj0OKc2zEASeERRc3z38EiFjjru8Swo 1EUoK//zIOGwbM23BciBfWz8xdd/cT0NScuR8ikwv9n5Np07HZKAnnYFShw/xByr JAJARsLMmDhgCBX1UJ9rjfjibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeBy5OC 49iCfQ72Nvn1B7kw0OwkMB8GA1UdIwQYMBaAFGcG2YTnMWgSAhiNKZ7TXwBbAXWA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RENEQS8xOTJFNzFGNjFE OTAxMUUyQjI5NUFCRUYwOEIwMkNEMi9ad2JaaE9jeGFCSUNHSTBwbnROZkFGc0Jk WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3YlpoT2N4YUJJQ0dJMHBudE5mQUZzQmRZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RENEQS8xOTJFNzFGNjFEOTAxMUUyQjI5NUFCRUYwOEIwMkNEMi9ad2JaaE9jeGFC SUNHSTBwbnROZkFGc0JkWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRZ4JAur6Y5SQ+Wrn7sVtvUhxM9PDQGyW4zXLJhbXF23UI1N8T8D5S s2bth2IOxsXZnvdtCdN/CS5u6EJdNSxXNmdgdWYHpOuUIMhE4HA/qzOdcGu7Vecs +purYYUSPSRdZYrVgtqJoqwh5iFJcSr/GXkEtyt89WqRYVf8giRIVaPD59x1vy/+ JX9/d+Pf/wdFmS/lNB2BoK4iHhxcppZZZqIBT+2QYmQ1oR13rHf0R0982NN0qJoD Dp4Hih51Rf1ddfMVYHAiz3Mfz7eFNyGuUjtibEfIDTfDqeh9xa2lIsfm93T+MftE kDT9QGzPV9fdtFxzsxGcTUQRXBOWsNYX -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:32 2025 by rpki-client