$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: qP45mmuL0p5uPJ/ejOMMNyytBpu1wKUgnqi3NHc//dw= Subject key identifier: 5A:79:91:4D:0A:CB:86:57:B8:77:FE:C6:D5:12:1D:F3:5D:E1:BF:B0 Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 015A Signing time: Thu 21 Aug 2025 04:21:33 +0000 Manifest this update: Thu 21 Aug 2025 04:21:33 +0000 Manifest next update: Thu 28 Aug 2025 04:21:33 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: tmSGam/b5pD2ghX+h1RSZdoHkCSfzJZ8lAfmU8u4au0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: Aug 21 04:21:33 2025 GMT Not After : Aug 28 04:21:33 2025 GMT Subject: CN=68a69ecd-6182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:28:87:cc:c3:74:4f:2c:4d:15:19:9e:d1: e2:8a:35:cd:6f:ff:f6:f0:97:01:56:a1:e7:f9:ca: e6:b5:7b:13:19:6c:aa:d9:51:da:96:6c:68:b4:7a: e4:5a:2a:12:b0:cb:3f:6a:aa:9e:29:83:a0:c3:34: 7b:30:8b:91:2c:ec:b3:33:f3:2a:cc:66:ff:48:66: 0c:50:51:e6:c1:6f:b3:c2:da:18:eb:6c:9c:d0:90: 4a:1c:60:6b:93:28:82:d9:61:27:df:6c:36:cd:29: bc:e6:f7:6f:79:b7:a3:33:da:f3:1d:6c:35:3c:08: ec:ed:1c:85:6d:ab:5a:e2:c3:ba:5f:73:17:e9:b6: 36:6f:a5:e8:4d:4c:4f:ff:af:57:35:1c:55:b4:56: 2a:2f:7d:b0:ea:94:0c:5f:2e:c7:d2:95:28:56:de: c1:0b:9b:e8:fe:f6:f6:49:27:cf:63:3f:3a:51:16: b1:58:25:0a:43:1c:05:58:82:5b:50:33:64:bf:4f: 9e:7f:13:ab:4a:76:0e:d2:d7:6b:a2:ce:51:e6:d5: 52:ad:33:ca:c0:f6:2d:2a:1e:96:66:19:62:3f:5f: 0b:60:6e:39:c5:ff:32:11:46:a9:0b:2a:b5:c3:14: e1:d2:ed:3e:03:b9:fd:00:fa:55:ed:e1:f0:19:1c: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:79:91:4D:0A:CB:86:57:B8:77:FE:C6:D5:12:1D:F3:5D:E1:BF:B0 X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:37:78:52:97:23:db:1e:1d:54:d9:97:3b:8f:25:31:f4:27: 5e:ce:7d:42:78:57:0d:e4:c0:1a:c0:91:6f:fe:2d:90:b6:57: 06:ee:40:51:17:8a:ef:60:a4:b5:2e:0d:de:54:75:08:89:bc: 49:ab:92:2e:ce:5a:94:14:9c:58:bb:c0:a0:85:34:44:05:70: d0:ac:2b:cf:f2:64:2e:f4:c8:9d:d0:ac:64:fd:b3:ec:e9:3a: 29:75:6c:d3:fc:4f:fd:3e:98:87:ea:8b:a8:7d:2b:d5:76:46: d6:3b:dd:f7:cf:26:65:6d:59:5d:ae:a7:c8:fa:3a:cb:18:01: d3:15:1c:d0:80:23:e9:b9:81:90:7e:6d:38:f3:af:32:74:94: c8:a4:31:a2:24:d0:ad:a7:21:36:2c:f2:a6:e5:06:3b:36:36: 69:8f:af:e2:e6:ed:f7:d3:34:ba:86:96:2a:16:4a:2c:c7:49: be:d2:5a:2e:c4:bd:ba:91:1b:ac:75:59:23:f6:78:82:7b:6f: aa:20:f1:ed:2d:bd:d9:c8:6c:1c:ce:2d:c0:53:49:99:c3:b2: ec:f4:45:49:a8:2d:9f:77:36:c5:1b:9c:f3:16:31:4a:66:00: df:fa:58:b4:6e:95:16:e1:4b:a8:46:90:31:5b:bb:ea:2e:67: 54:1a:61:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjUwODIxMDQyMTMzWhcNMjUwODI4MDQyMTMzWjAYMRYwFAYD VQQDEw02OGE2OWVjZC02MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm0oh8zDdE8sTRUZntHiijXNb//28JcBVqHn+crmtXsTGWyq2VHalmxotHrk WioSsMs/aqqeKYOgwzR7MIuRLOyzM/MqzGb/SGYMUFHmwW+zwtoY62yc0JBKHGBr kyiC2WEn32w2zSm85vdvebejM9rzHWw1PAjs7RyFbata4sO6X3MX6bY2b6XoTUxP /69XNRxVtFYqL32w6pQMXy7H0pUoVt7BC5vo/vb2SSfPYz86URaxWCUKQxwFWIJb UDNkv0+efxOrSnYO0tdros5R5tVSrTPKwPYtKh6WZhliP18LYG45xf8yEUapCyq1 wxTh0u0+A7n9APpV7eHwGRwOrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp5kU0K y4ZXuHf+xtUSHfNd4b+wMB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgN3hSlyPbHh1U2Zc7jyUx9Cdezn1CeFcN5MAawJFv/i2QtlcG7kBR F4rvYKS1Lg3eVHUIibxJq5IuzlqUFJxYu8CghTREBXDQrCvP8mQu9Mid0Kxk/bPs 6TopdWzT/E/9PpiH6ouofSvVdkbWO933zyZlbVldrqfI+jrLGAHTFRzQgCPpuYGQ fm04868ydJTIpDGiJNCtpyE2LPKm5QY7NjZpj6/i5u330zS6hpYqFkosx0m+0lou xL26kRusdVkj9niCe2+qIPHtLb3ZyGwczi3AU0mZw7Ls9EVJqC2fdzbFG5zzFjFK ZgDf+li0bpUW4UuoRpAxW7vqLmdUGmGc -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:13 2025 by rpki-client