$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json) Hash identifier: PdiFFLD43tYdgyWMc+YeVQPYtmV2DMH0ze4Bw99DHO4= Subject key identifier: 68:83:E0:79:96:9C:B3:4A:16:96:E3:A6:49:EB:94:E9:40:58:E4:B1 Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft Manifest number: 01AA Signing time: Sat 09 Aug 2025 03:43:54 +0000 Manifest this update: Sat 09 Aug 2025 03:43:53 +0000 Manifest next update: Sat 16 Aug 2025 03:43:53 +0000 Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: tvUuShqul7I/YArU4R8RgKep/fos4LxjYGH4xj+kwPc=) 2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=) 3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=) 4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=) 5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=) 6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Validity Not Before: Aug 9 03:43:53 2025 GMT Not After : Aug 16 03:43:53 2025 GMT Subject: CN=6896c3f9-729e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:4c:71:2e:a6:63:00:fe:71:5c:d8:07:df: 3b:84:4b:21:2e:da:05:de:66:4b:b2:3e:65:6b:16: b4:ef:a8:2f:67:04:24:ca:70:08:07:7b:c4:50:dd: f6:1b:12:65:84:e0:71:cc:9a:c0:55:13:64:8e:25: 59:a7:de:7b:59:50:ec:7a:a1:bd:9b:82:82:12:8d: f6:ab:13:64:7d:53:a7:ba:24:f7:f1:24:c3:0f:7e: 81:87:93:82:b6:45:a4:a2:0e:34:2e:b9:a4:16:9b: 43:f8:ed:cf:d1:73:f6:20:d9:50:93:01:7e:45:66: b7:ac:cc:c9:4b:b1:bb:51:57:36:84:89:7b:2f:62: 1d:ca:f5:a7:4f:e6:f3:a9:b2:cd:04:4a:80:a6:f9: 10:06:06:76:f9:45:67:ea:7b:e3:6a:c2:8f:db:da: dd:95:1e:6c:8a:94:a5:68:4e:53:07:80:0e:9f:94: 97:e7:03:69:98:69:ff:7e:7a:df:35:30:4a:6a:33: b6:e3:97:23:2d:7a:39:92:5b:d0:4f:da:61:57:b6: d2:6f:7d:3b:9f:ea:c2:57:30:66:af:38:9d:b3:01: dc:d3:8d:2c:54:7c:f5:d2:69:f9:98:1f:bc:93:aa: bc:4f:95:0c:f6:b7:fd:bb:1b:49:b3:ad:54:bc:96: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:83:E0:79:96:9C:B3:4A:16:96:E3:A6:49:EB:94:E9:40:58:E4:B1 X509v3 Authority Key Identifier: keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:22:f7:69:0c:c5:10:9d:4b:03:e2:a7:2a:b1:60:45:f0:a7: 04:03:b3:1a:b6:47:19:52:cb:80:3a:a2:cd:d4:bd:99:1c:8a: 91:f7:77:89:e0:30:e1:e9:2f:91:0a:25:88:64:b6:5e:d9:13: d2:96:8c:49:77:f1:92:43:9d:de:62:d8:39:22:fc:77:aa:25: 38:88:45:67:e9:6a:23:73:7f:22:58:41:ff:56:12:2f:96:e1: 99:31:36:69:64:db:3c:6c:ce:1e:b8:7b:97:21:23:34:8b:28: 96:e0:fe:bb:8d:52:6d:66:bd:89:a0:55:b2:b3:79:e3:17:19: 54:b7:1c:a0:8f:8a:35:b7:f8:b3:e2:80:09:d1:bd:ca:4a:3b: 59:89:c8:46:30:bd:6d:a3:c6:66:5f:d9:63:da:f1:89:68:11: c8:19:5d:6b:1c:e1:a2:f1:fd:01:99:39:1f:10:4e:0b:db:9b: b4:c7:07:41:52:9a:cf:4b:2c:3c:b4:a6:5b:64:44:98:71:53: 92:4f:84:64:2d:b5:91:92:84:1a:04:d5:e9:01:d3:42:fe:d6: 72:75:2e:07:9e:58:a4:c4:b7:a5:51:b8:77:b8:b6:7c:91:be: a1:67:30:6d:c5:82:9f:bd:04:93:18:a4:38:1c:38:30:2e:ee: 15:9e:8b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3 NDYxOTkzODMwHhcNMjUwODA5MDM0MzUzWhcNMjUwODE2MDM0MzUzWjAYMRYwFAYD VQQDEw02ODk2YzNmOS03MjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcRMcS6mYwD+cVzYB987hEshLtoF3mZLsj5laxa076gvZwQkynAIB3vEUN32 GxJlhOBxzJrAVRNkjiVZp957WVDseqG9m4KCEo32qxNkfVOnuiT38STDD36Bh5OC tkWkog40LrmkFptD+O3P0XP2INlQkwF+RWa3rMzJS7G7UVc2hIl7L2IdyvWnT+bz qbLNBEqApvkQBgZ2+UVn6nvjasKP29rdlR5sipSlaE5TB4AOn5SX5wNpmGn/fnrf NTBKajO245cjLXo5klvQT9phV7bSb307n+rCVzBmrzidswHc040sVHz10mn5mB+8 k6q8T5UM9rf9uxtJs61UvJZXvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiD4HmW nLNKFpbjpknrlOlAWOSxMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4 UjRMbWYyWV9QQmwwWVprNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByIvdpDMUQnUsD4qcqsWBF8KcEA7MatkcZUsuAOqLN1L2ZHIqR93eJ 4DDh6S+RCiWIZLZe2RPSloxJd/GSQ53eYtg5Ivx3qiU4iEVn6Wojc38iWEH/VhIv luGZMTZpZNs8bM4euHuXISM0iyiW4P67jVJtZr2JoFWys3njFxlUtxygj4o1t/iz 4oAJ0b3KSjtZichGML1to8ZmX9lj2vGJaBHIGV1rHOGi8f0BmTkfEE4L25u0xwdB UprPSyw8tKZbZESYcVOST4RkLbWRkoQaBNXpAdNC/tZydS4HnlikxLelUbh3uLZ8 kb6hZzBtxYKfvQSTGKQ4HDgwLu4Vnotf -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:04 2025 by rpki-client