$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: 9EQlPo2lQH0r2bVqKKpB5D3jbQvVUUOk0Vt0qcdJzJM= Subject key identifier: 72:D7:71:4E:23:A4:83:56:E7:EF:FE:CF:26:28:B8:EE:95:7B:92:2A Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 01B0 Signing time: Sat 09 Aug 2025 03:38:56 +0000 Manifest this update: Sat 09 Aug 2025 03:38:56 +0000 Manifest next update: Sat 16 Aug 2025 03:38:56 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: RjhlIUfGvkCf+YMzeCm62ysTpygyl838Mi+6A2vcde8=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Aug 9 03:38:56 2025 GMT Not After : Aug 16 03:38:56 2025 GMT Subject: CN=6896c2d0-6f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:df:81:bf:d9:f1:78:0c:35:d6:43:21:c8: 53:cb:9b:c0:80:15:75:42:bb:06:33:28:96:f3:3c: 2e:92:d0:25:a5:30:d8:6d:b1:7d:2f:3d:cf:3d:b4: 4d:66:45:e2:d1:f0:de:f5:d2:25:d9:05:01:cd:38: f7:5f:b1:d1:52:5c:37:34:eb:b0:4f:12:29:41:26: fa:59:a6:38:3e:a3:85:0a:eb:5d:68:35:9d:2d:c4: 9f:a9:68:bb:cd:53:a2:aa:26:cc:07:77:59:be:ac: 05:a9:64:47:11:75:e6:f9:08:41:e3:56:ff:43:47: 11:3b:12:45:d5:7c:12:6a:e7:85:40:a8:7a:10:fe: 73:db:5f:29:76:63:b1:1b:57:ac:dd:8e:e3:b3:8c: b8:42:5f:8b:90:f8:91:a0:b6:a9:bb:83:74:33:9a: 9d:31:84:62:eb:29:23:8a:cf:1a:72:7d:b2:cf:19: a9:2f:09:25:27:fc:e8:c1:0d:b7:fd:3a:ae:2c:b0: 20:99:5e:2c:27:b9:39:eb:0c:44:0e:02:20:d8:9d: 48:d9:28:94:3a:9e:6c:78:6f:49:4d:33:c8:cf:b7: 2a:aa:fd:6f:d6:d3:0b:2f:ca:6f:f9:19:f6:24:0f: 4f:36:a5:ec:60:63:8a:41:59:f2:93:92:44:20:6c: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D7:71:4E:23:A4:83:56:E7:EF:FE:CF:26:28:B8:EE:95:7B:92:2A X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:13:9f:47:a3:7a:1a:8b:04:c3:7f:fe:67:35:5f:da:05:72: 2a:16:79:67:c7:48:68:a7:21:7a:9c:f2:7e:00:12:bf:12:5a: 0f:af:34:44:20:3a:be:d9:08:7a:19:13:6d:f6:46:23:1b:09: 1b:8c:43:6c:66:31:68:11:5d:df:04:b0:27:d8:10:fd:46:dd: a4:bd:c6:4d:e8:c7:4f:d1:8d:fe:e3:af:b9:c6:34:92:fa:14: 1c:65:f3:b3:75:4b:e7:90:46:61:1d:24:32:38:73:0d:8d:3e: 94:1c:50:06:7f:dd:d5:2f:c9:79:09:a6:a3:42:99:fe:0b:81: 89:f7:fb:bc:50:7d:f7:cc:4f:8a:ce:06:c5:96:57:a9:1f:f0: 27:1f:c9:1b:ff:37:2d:07:af:9b:67:2b:cc:94:79:7a:72:15: 32:9d:04:4e:a3:42:5e:61:2a:31:27:84:90:4f:9c:2c:ff:8c: 4d:0c:5f:c8:f5:f4:47:a1:18:76:6e:ea:a6:69:1f:1d:a5:13: 0f:29:fd:56:6b:34:1a:54:41:18:19:e9:f4:92:8a:6a:9a:bf: a8:ea:37:aa:bb:d6:57:35:87:12:41:97:05:78:17:dc:50:f2: 15:5d:55:50:4c:f7:de:d8:6e:1b:8b:6d:27:43:ae:b8:12:86: 49:b6:ef:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUwODA5MDMzODU2WhcNMjUwODE2MDMzODU2WjAYMRYwFAYD VQQDEw02ODk2YzJkMC02ZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS3fgb/Z8XgMNdZDIchTy5vAgBV1QrsGMyiW8zwuktAlpTDYbbF9Lz3PPbRN ZkXi0fDe9dIl2QUBzTj3X7HRUlw3NOuwTxIpQSb6WaY4PqOFCutdaDWdLcSfqWi7 zVOiqibMB3dZvqwFqWRHEXXm+QhB41b/Q0cROxJF1XwSaueFQKh6EP5z218pdmOx G1es3Y7js4y4Ql+LkPiRoLapu4N0M5qdMYRi6ykjis8acn2yzxmpLwklJ/zowQ23 /TquLLAgmV4sJ7k56wxEDgIg2J1I2SiUOp5seG9JTTPIz7cqqv1v1tMLL8pv+Rn2 JA9PNqXsYGOKQVnyk5JEIGw9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLXcU4j pINW5+/+zyYouO6Ve5IqMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCE59Ho3oaiwTDf/5nNV/aBXIqFnlnx0hopyF6nPJ+ABK/EloPrzRE IDq+2Qh6GRNt9kYjGwkbjENsZjFoEV3fBLAn2BD9Rt2kvcZN6MdP0Y3+46+5xjSS +hQcZfOzdUvnkEZhHSQyOHMNjT6UHFAGf93VL8l5CaajQpn+C4GJ9/u8UH33zE+K zgbFllepH/AnH8kb/zctB6+bZyvMlHl6chUynQROo0JeYSoxJ4SQT5ws/4xNDF/I 9fRHoRh2buqmaR8dpRMPKf1WazQaVEEYGen0kopqmr+o6jequ9ZXNYcSQZcFeBfc UPIVXVVQTPfe2G4bi20nQ664EoZJtu9A -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:36 2025 by rpki-client