$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: kQ4gEE+vV7+xvPGymihe/z6DgPQywy6XJVl+lWrrJpk= Subject key identifier: 4F:87:E3:C0:CF:78:25:06:55:CD:77:F3:F7:E3:B5:9C:5D:EA:21:EA Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 45 Signing time: Thu 21 Aug 2025 07:37:47 +0000 Manifest this update: Thu 21 Aug 2025 07:37:46 +0000 Manifest next update: Thu 28 Aug 2025 07:37:46 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: YLSGF6zCwOhGDScyu7p5vw30d01mNiqk8qAMb19QRqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Aug 21 07:37:46 2025 GMT Not After : Aug 28 07:37:46 2025 GMT Subject: CN=68a6cccb-e762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:b2:f9:e1:b9:c1:76:e9:be:8f:64:7b:30: 58:2e:95:26:e1:49:2a:36:11:90:92:ac:49:0a:10: 6f:7e:63:ae:2f:b5:48:c1:89:e2:20:10:88:d7:d8: d8:bb:7d:19:de:b0:52:c8:5f:12:31:9f:2a:77:66: e4:17:ac:df:aa:3b:e1:9d:17:a9:f3:62:ca:73:6a: d6:c8:13:ef:59:6b:0e:f7:d7:e1:72:b1:8f:54:e7: e0:29:43:10:35:d6:81:ad:65:c0:60:12:b1:fc:26: 56:2a:4c:6d:ff:6c:28:b9:89:d8:36:27:96:23:7a: e8:d1:45:9d:bb:25:c8:fb:d7:99:ab:99:07:26:7f: fb:cd:03:64:ee:97:d1:58:53:01:c4:ef:fc:41:59: 79:99:60:88:21:d5:ca:44:02:75:ba:8d:10:85:34: 60:aa:cc:fd:04:2b:ca:b5:e0:54:d7:16:6a:05:b4: fe:55:14:d7:7e:f6:25:9b:82:e5:3b:8b:14:2f:3f: 72:61:c8:e7:8c:91:54:9d:37:70:94:35:79:53:d5: e9:98:17:42:34:6d:72:f3:d6:90:22:47:7a:d9:bd: f6:c7:a7:f7:33:41:1d:25:6e:32:10:cf:69:c6:69: 7c:7a:c7:62:2f:bb:d9:f9:d3:7c:32:8f:23:d1:42: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:E3:C0:CF:78:25:06:55:CD:77:F3:F7:E3:B5:9C:5D:EA:21:EA X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:8b:43:af:f9:3b:ad:30:19:26:30:ef:06:28:3d:d7:43:02: a3:21:d1:6a:bd:74:fd:48:b7:e8:70:e8:5d:2b:5a:fa:06:a8: a5:7d:86:51:e4:0a:5d:9c:70:66:cf:75:37:f2:dc:69:5b:15: d0:af:fe:2d:99:bf:fc:b6:4b:b9:55:d1:d5:49:bd:b8:d4:f9: be:f1:ca:4f:2e:70:c4:c7:05:d3:a2:9f:86:f3:4b:e3:fc:1b: d9:f0:0f:83:9b:3f:44:11:63:77:dc:b3:7b:b2:2f:fd:d1:74: 56:fa:9d:c2:79:95:45:20:b4:a6:62:80:b1:4e:48:b1:7a:a7: 0e:8c:9f:d1:93:0f:08:61:0c:aa:28:57:cf:65:90:fa:00:10: c4:7d:dc:e3:56:60:b1:10:6b:6d:27:6c:7a:13:72:6d:0a:8e: c6:04:9d:69:ce:95:9f:f4:94:32:8e:b4:f1:5d:36:e3:40:4f: 38:13:50:de:b7:58:8a:85:9b:cf:00:ec:c6:83:a3:b1:87:3c: c1:fd:1f:e3:77:4e:39:5f:8b:0f:a9:c6:a9:5d:c2:8f:2e:54: a4:53:7c:47:65:ed:91:96:14:12:02:a8:66:9d:6e:ec:8e:8f: be:3f:6d:53:e2:85:50:e6:c2:19:b0:62:73:51:45:a8:6c:0c: 66:6c:05:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTA4MjEwNzM3NDZaFw0yNTA4MjgwNzM3NDZaMBgxFjAUBgNV BAMTDTY4YTZjY2NiLWU3NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzW7L54bnBdum+j2R7MFgulSbhSSo2EZCSrEkKEG9+Y64vtUjBieIgEIjX2Ni7 fRnesFLIXxIxnyp3ZuQXrN+qO+GdF6nzYspzatbIE+9Zaw731+FysY9U5+ApQxA1 1oGtZcBgErH8JlYqTG3/bCi5idg2J5YjeujRRZ27Jcj715mrmQcmf/vNA2Tul9FY UwHE7/xBWXmZYIgh1cpEAnW6jRCFNGCqzP0EK8q14FTXFmoFtP5VFNd+9iWbguU7 ixQvP3JhyOeMkVSdN3CUNXlT1emYF0I0bXLz1pAiR3rZvfbHp/czQR0lbjIQz2nG aXx6x2Ivu9n503wyjyPRQgrbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT4fjwM94 JQZVzXfz9+O1nF3qIeowHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHCLQ6/5O60wGSYw7wYoPddDAqMh0Wq9dP1It+hw6F0rWvoGqKV9hlHk Cl2ccGbPdTfy3GlbFdCv/i2Zv/y2S7lV0dVJvbjU+b7xyk8ucMTHBdOin4bzS+P8 G9nwD4ObP0QRY3fcs3uyL/3RdFb6ncJ5lUUgtKZigLFOSLF6pw6Mn9GTDwhhDKoo V89lkPoAEMR93ONWYLEQa20nbHoTcm0KjsYEnWnOlZ/0lDKOtPFdNuNATzgTUN63 WIqFm88A7MaDo7GHPMH9H+N3Tjlfiw+pxqldwo8uVKRTfEdl7ZGWFBICqGadbuyO j74/bVPihVDmwhmwYnNRRahsDGZsBcs= -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:13 2025 by rpki-client