$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: FV24oBQA2MLGxbTYWZbtJVN7O9MktqqetN1vBrZhgJY= Subject key identifier: B9:8E:F4:3D:10:0F:AC:46:0B:B1:6B:4B:D9:98:FC:B4:AC:BF:A5:92 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FD0 Signing time: Sun 24 Aug 2025 17:29:00 +0000 Manifest this update: Sun 24 Aug 2025 17:28:59 +0000 Manifest next update: Sun 31 Aug 2025 17:28:59 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: nrwv0gqzOqubAXkwm0bntWlCPwTN91bHdod4tBmucJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Aug 24 17:28:59 2025 GMT Not After : Aug 31 17:28:59 2025 GMT Subject: CN=68ab4bdc-932a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:52:d3:2b:12:4e:22:3d:00:b0:9f:d7:a0: 01:c0:f4:0d:9f:e3:5c:3b:54:a3:2e:9a:33:55:e0: e0:6d:69:e8:e8:7c:c6:d2:ec:4e:e4:70:a8:e4:ab: 89:cc:fa:69:a2:29:1c:a4:be:b4:2d:44:b5:08:e6: 01:9c:f1:80:56:58:67:82:b8:59:8d:47:03:d3:cf: 9a:78:72:63:99:05:f9:86:db:81:46:d4:33:58:78: 55:af:8a:da:f1:bd:ca:38:45:5e:0f:51:b4:4c:d4: bc:10:79:1e:21:ed:c1:9f:d2:63:dd:41:5f:ba:85: 64:95:e2:d7:a3:d1:76:f7:92:b3:5b:97:e5:b8:f2: ed:d9:56:f5:d5:9b:12:98:4b:2d:49:f7:83:5d:24: 55:64:45:dc:fd:b2:66:2c:67:3b:bd:b8:96:11:4d: 80:7c:c1:4b:4b:d1:cf:22:18:1d:e4:af:4c:80:9e: 4d:83:90:49:dc:af:52:3a:0a:cd:5a:25:c0:25:a1: 9a:42:ae:79:17:6e:33:b3:06:6a:54:a7:5d:aa:44: c2:eb:8c:bc:bf:39:bd:b3:69:3a:51:17:5a:67:b4: 16:a0:f2:67:d2:60:9b:9d:f7:fc:88:9c:3f:a4:ac: b9:7d:43:a2:93:6d:a2:f6:8e:07:1e:f4:7c:6d:98: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8E:F4:3D:10:0F:AC:46:0B:B1:6B:4B:D9:98:FC:B4:AC:BF:A5:92 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:33:ea:9a:68:bd:7e:2f:ac:24:ba:b4:58:f2:67:0f:21:ff: 8e:a0:a9:ff:1c:2d:dc:82:c5:7c:66:d5:a4:10:49:9a:66:5d: be:b2:24:8c:aa:ed:41:5c:4b:cd:64:bc:e0:d9:e8:63:5b:62: 45:05:8b:3b:d3:10:58:43:df:cc:ea:38:4d:22:f9:44:bc:c1: 4a:5a:b1:29:bc:5d:f3:16:f6:67:f2:8e:32:09:91:42:f9:5b: 79:05:c2:3d:85:b6:eb:28:88:b7:4b:c6:6f:e4:04:06:ef:87: 66:4b:e8:fd:a3:22:f6:70:8e:06:4f:47:10:7d:18:d8:ad:e7: b1:3b:1d:db:87:b5:03:4d:89:64:9f:6e:97:f6:b9:df:64:a1: d2:cf:fd:1a:1d:ee:19:cb:18:d6:70:10:25:5f:21:2a:5e:68: 29:3d:4a:2d:de:db:3e:d7:ec:ce:e3:85:d8:4e:96:cc:03:9b: 04:9a:4f:3b:a8:f7:80:10:66:a2:4e:da:32:12:42:f5:26:55: 76:61:a0:6e:e5:d8:ab:28:34:af:a9:af:8b:f6:c2:e5:9b:2d: d1:87:a0:c2:7a:8d:1e:05:13:ea:3a:a4:9b:19:97:7c:0d:41: dc:6b:c7:28:97:3a:2f:6d:e3:5e:6f:9e:59:64:a4:6a:2b:fa: 8f:38:42:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUwODI0MTcyODU5WhcNMjUwODMxMTcyODU5WjAYMRYwFAYD VQQDEw02OGFiNGJkYy05MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAww5S0ysSTiI9ALCf16ABwPQNn+NcO1SjLpozVeDgbWno6HzG0uxO5HCo5KuJ zPppoikcpL60LUS1COYBnPGAVlhngrhZjUcD08+aeHJjmQX5htuBRtQzWHhVr4ra 8b3KOEVeD1G0TNS8EHkeIe3Bn9Jj3UFfuoVkleLXo9F295KzW5fluPLt2Vb11ZsS mEstSfeDXSRVZEXc/bJmLGc7vbiWEU2AfMFLS9HPIhgd5K9MgJ5Ng5BJ3K9SOgrN WiXAJaGaQq55F24zswZqVKddqkTC64y8vzm9s2k6URdaZ7QWoPJn0mCbnff8iJw/ pKy5fUOik22i9o4HHvR8bZgyDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmO9D0Q D6xGC7FrS9mY/LSsv6WSMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8M+qaaL1+L6wkurRY8mcPIf+OoKn/HC3cgsV8ZtWkEEmaZl2+siSM qu1BXEvNZLzg2ehjW2JFBYs70xBYQ9/M6jhNIvlEvMFKWrEpvF3zFvZn8o4yCZFC +Vt5BcI9hbbrKIi3S8Zv5AQG74dmS+j9oyL2cI4GT0cQfRjYreexOx3bh7UDTYlk n26X9rnfZKHSz/0aHe4ZyxjWcBAlXyEqXmgpPUot3ts+1+zO44XYTpbMA5sEmk87 qPeAEGaiTtoyEkL1JlV2YaBu5dirKDSvqa+L9sLlmy3Rh6DCeo0eBRPqOqSbGZd8 DUHca8colzovbeNeb55ZZKRqK/qPOELY -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:59 2025 by rpki-client