$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: 8QVxIuh6UtzYrCdWEdYpXKh842o8YpJAzcnLz+DWflY= Subject key identifier: B8:D4:6D:0C:63:F2:61:27:E6:3C:31:B4:D1:64:02:D8:48:96:D5:69 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 246A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 245A Signing time: Sun 10 Aug 2025 15:44:51 +0000 Manifest this update: Sun 10 Aug 2025 15:44:51 +0000 Manifest next update: Sun 17 Aug 2025 15:44:51 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: qr4qpZYEsVlSamTSRL2rrYGxf385DIyLFYeBRiRBHYg=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 15:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9322 (0x246a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Aug 10 15:44:51 2025 GMT Not After : Aug 17 15:44:51 2025 GMT Subject: CN=6898be73-820b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:0a:2c:5d:97:99:6b:fe:c6:f6:33:6c:4e: 51:4d:c4:17:3d:a5:ed:d1:e6:fc:2d:ee:94:7d:bb: a4:68:ca:a1:f1:e0:55:0c:2f:39:a3:8d:ad:e5:4f: 07:6d:61:20:8b:7a:f9:f4:9e:2b:43:27:fc:ef:3c: f5:98:43:4c:d5:fe:8e:fd:72:5c:ee:1c:c5:e8:f0: 6c:29:a9:d9:fb:af:99:45:f4:af:ee:26:f7:69:17: 2f:2c:42:b2:16:73:4b:36:d7:b0:4f:b3:f4:a8:72: cd:66:a2:4f:16:24:eb:d6:27:77:22:d4:76:30:55: 8c:05:b6:a2:eb:56:03:6b:29:f5:30:66:47:42:01: ce:04:0c:b1:71:2a:bc:55:f0:4d:23:54:cf:5f:2d: b6:65:34:85:00:b4:64:2d:31:b4:6a:0f:3b:7a:c8: 1b:d3:29:98:36:cc:60:f2:6d:a3:7b:5e:cb:87:92: 3c:21:92:de:3e:e2:3a:3e:c8:57:81:2e:0d:06:3a: 91:c5:a3:1e:14:1c:db:49:a7:3b:8a:cd:8b:a0:ff: d0:bf:e5:0d:81:88:bc:42:cb:46:94:82:a1:95:ea: 0f:34:9c:5b:ac:8c:d1:1c:2f:4f:e3:d3:cf:df:81: bf:ab:d4:25:92:09:20:d2:b1:97:2a:66:e3:26:d0: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:6D:0C:63:F2:61:27:E6:3C:31:B4:D1:64:02:D8:48:96:D5:69 X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:11:65:e7:c9:05:e6:9e:6b:74:71:cf:f4:de:6e:43:9c:3a: 7f:3e:37:36:ff:b6:d2:17:aa:b2:f8:dd:2d:d6:40:29:fb:ef: 40:8e:ae:62:13:b6:68:64:14:cc:c3:53:2c:d5:cc:cc:2c:30: fa:f1:d4:03:ea:56:6c:7e:a8:1c:64:86:d9:13:6d:de:b9:c9: 24:60:4a:c5:d0:40:3c:5c:40:20:7a:a0:f6:67:a5:28:10:39: c9:dd:cc:fc:ec:fb:04:23:e7:c0:c3:9a:d5:3a:43:7d:48:ee: ee:d4:bb:a1:89:77:c4:4e:24:c0:60:72:32:6a:83:f7:d3:63: f9:22:b7:ea:b2:92:9a:64:53:14:3b:c1:c6:23:d4:bd:51:ee: d8:ed:18:29:62:d5:f6:76:17:85:12:ce:f1:23:dc:fc:df:52: cf:b8:ad:ca:84:a0:95:1a:bb:14:74:4a:72:1a:ab:77:ac:8d: bc:28:7a:e4:26:bb:b4:cd:64:8f:5e:b1:0d:df:00:96:a9:be: 3c:30:48:ed:61:d5:7b:4d:42:c5:e3:82:47:f7:de:45:a5:96: 49:76:12:83:0f:80:7e:20:1b:9d:f7:e3:d2:df:25:ee:92:fc: a6:01:70:3b:b4:77:9d:5f:6b:8f:b4:6a:c0:39:ab:96:e9:4a: 5d:6f:bb:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUwODEwMTU0NDUxWhcNMjUwODE3MTU0NDUxWjAYMRYwFAYD VQQDEw02ODk4YmU3My04MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4noKLF2XmWv+xvYzbE5RTcQXPaXt0eb8Le6UfbukaMqh8eBVDC85o42t5U8H bWEgi3r59J4rQyf87zz1mENM1f6O/XJc7hzF6PBsKanZ+6+ZRfSv7ib3aRcvLEKy FnNLNtewT7P0qHLNZqJPFiTr1id3ItR2MFWMBbai61YDayn1MGZHQgHOBAyxcSq8 VfBNI1TPXy22ZTSFALRkLTG0ag87esgb0ymYNsxg8m2je17Lh5I8IZLePuI6PshX gS4NBjqRxaMeFBzbSac7is2LoP/Qv+UNgYi8QstGlIKhleoPNJxbrIzRHC9P49PP 34G/q9Qlkgkg0rGXKmbjJtDH5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjUbQxj 8mEn5jwxtNFkAthIltVpMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsEWXnyQXmnmt0cc/03m5DnDp/Pjc2/7bSF6qy+N0t1kAp++9Ajq5i E7ZoZBTMw1Ms1czMLDD68dQD6lZsfqgcZIbZE23euckkYErF0EA8XEAgeqD2Z6Uo EDnJ3cz87PsEI+fAw5rVOkN9SO7u1LuhiXfETiTAYHIyaoP302P5IrfqspKaZFMU O8HGI9S9Ue7Y7RgpYtX2dheFEs7xI9z831LPuK3KhKCVGrsUdEpyGqt3rI28KHrk Jru0zWSPXrEN3wCWqb48MEjtYdV7TULF44JH995FpZZJdhKDD4B+IBud9+PS3yXu kvymAXA7tHedX2uPtGrAOauW6Updb7vM -----END CERTIFICATE-----Generated at Tue Aug 12 14:04:18 2025 by rpki-client