$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: Xu4vqj4wA6kSckXbPpjh3rNdVzelTqAgSTdWoMUZG8E= Subject key identifier: 49:74:B3:19:05:31:91:6B:3F:CD:96:60:CC:9F:C3:A9:3E:23:44:9D Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 237D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 236C Signing time: Fri 08 Aug 2025 15:54:26 +0000 Manifest this update: Fri 08 Aug 2025 15:54:25 +0000 Manifest next update: Fri 15 Aug 2025 15:54:25 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: RqHCpecbYvTBXZ6bRHhoqEgkqH7qpwTPUvLnJz4fBJU=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9085 (0x237d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Aug 8 15:54:25 2025 GMT Not After : Aug 15 15:54:25 2025 GMT Subject: CN=68961db1-a5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:15:8e:7b:a4:82:37:c8:22:1e:51:32:ce: 8a:7a:8a:10:b8:0d:f1:ad:c5:79:58:b1:9d:5b:15: 96:e8:05:f6:57:75:0a:98:b4:0f:2a:ce:cc:fc:f1: 94:a7:e2:bb:eb:bf:a8:a9:dd:91:ef:5e:73:d3:72: e6:fc:86:9f:65:cb:80:b2:d5:ef:72:9f:b9:0d:6c: a3:e3:d7:37:41:c9:76:0e:50:bf:30:af:09:2f:89: b1:41:d4:4b:ec:d3:1c:24:9b:cc:44:9e:45:af:3c: 19:8d:ef:d7:d2:27:c5:34:e0:56:64:b4:6b:f9:a1: ca:de:a8:e6:63:e8:35:c4:c2:95:f8:fe:30:4c:4c: 46:74:3c:8f:b6:ea:74:44:7b:85:74:a6:cb:fc:7f: 3d:7f:bb:7c:1e:b1:0c:cc:0e:d7:af:48:06:2c:a1: fa:62:c4:4c:a4:38:2e:ae:de:bb:a6:39:5c:67:c5: 46:5e:65:28:22:9f:00:01:4c:3e:eb:ae:8d:93:95: 75:69:06:70:7c:01:82:9e:bf:3b:eb:34:9f:60:64: 9c:06:26:56:8e:30:a8:3e:ee:15:b9:c1:c5:af:8b: b8:eb:96:7a:dc:b3:e6:22:de:f7:ba:7e:9f:19:af: 24:ee:59:34:31:09:d3:0f:ce:b5:70:95:56:31:a0: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:B3:19:05:31:91:6B:3F:CD:96:60:CC:9F:C3:A9:3E:23:44:9D X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c0:c7:ff:a4:a6:de:a8:fd:9b:59:b6:f9:72:e4:3a:ec:b5: fe:88:32:81:6c:0c:52:ef:36:85:fa:08:fa:af:85:97:94:a2: c9:80:b0:99:91:ee:8a:b0:92:8f:01:ae:2d:53:b3:ad:5b:ed: 9f:17:eb:1b:ce:04:fb:1f:df:f6:9d:8b:10:fe:5e:c0:0f:69: 0e:e3:4f:e2:4d:3e:f7:f1:aa:39:dd:0c:88:b7:ad:4e:a4:cc: 5d:42:c8:ab:0c:88:43:61:f0:2d:58:b7:ea:50:bf:41:cc:5e: e6:cb:e2:fd:fd:a7:5d:c3:71:b1:0f:c4:64:ea:8f:55:f4:3f: 74:51:d1:d4:73:bd:dc:27:9c:f8:5f:b8:3a:bd:de:24:9c:57: 0c:5e:7e:6a:13:11:28:5a:23:a4:cb:da:48:d3:40:9d:04:50: 14:37:d4:f2:16:6b:53:d9:2c:65:d7:04:d2:01:29:3d:69:79: b1:24:44:86:3a:6a:0b:cc:7e:de:2a:4e:0b:80:6e:c4:f3:c5: 80:09:c9:92:31:a2:15:3a:6d:69:0a:9c:c6:12:ab:bb:82:bb: 82:57:bc:d1:09:1a:d8:43:27:66:7c:9c:77:6d:bc:2a:3f:b3: 4a:79:35:62:fd:f3:f7:29:73:8d:a9:75:d1:c9:fa:4f:ad:9b: 08:58:dc:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwODA4MTU1NDI1WhcNMjUwODE1MTU1NDI1WjAYMRYwFAYD VQQDEw02ODk2MWRiMS1hNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lQVjnukgjfIIh5RMs6KeooQuA3xrcV5WLGdWxWW6AX2V3UKmLQPKs7M/PGU p+K767+oqd2R715z03Lm/IafZcuAstXvcp+5DWyj49c3Qcl2DlC/MK8JL4mxQdRL 7NMcJJvMRJ5FrzwZje/X0ifFNOBWZLRr+aHK3qjmY+g1xMKV+P4wTExGdDyPtup0 RHuFdKbL/H89f7t8HrEMzA7Xr0gGLKH6YsRMpDgurt67pjlcZ8VGXmUoIp8AAUw+ 666Nk5V1aQZwfAGCnr876zSfYGScBiZWjjCoPu4VucHFr4u465Z63LPmIt73un6f Ga8k7lk0MQnTD861cJVWMaCglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl0sxkF MZFrP82WYMyfw6k+I0SdMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBwMf/pKbeqP2bWbb5cuQ67LX+iDKBbAxS7zaF+gj6r4WXlKLJgLCZ ke6KsJKPAa4tU7OtW+2fF+sbzgT7H9/2nYsQ/l7AD2kO40/iTT738ao53QyIt61O pMxdQsirDIhDYfAtWLfqUL9BzF7my+L9/addw3GxD8Rk6o9V9D90UdHUc73cJ5z4 X7g6vd4knFcMXn5qExEoWiOky9pI00CdBFAUN9TyFmtT2Sxl1wTSASk9aXmxJESG OmoLzH7eKk4LgG7E88WACcmSMaIVOm1pCpzGEqu7gruCV7zRCRrYQydmfJx3bbwq P7NKeTVi/fP3KXONqXXRyfpPrZsIWNyc -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:37 2025 by rpki-client