$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: U5IXyp1R5FEigUDnqPoFWXOan3KIvF+IhU8lCTc/20U= Subject key identifier: 90:80:6C:B1:E4:A0:37:57:CC:16:CC:32:8C:5E:D9:E0:E8:D5:A8:B7 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 0427 Signing time: Sat 09 Aug 2025 01:14:02 +0000 Manifest this update: Sat 09 Aug 2025 01:14:01 +0000 Manifest next update: Sat 16 Aug 2025 01:14:01 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: D1ntM9wH0DfaGn5l67esAK3HNBZhzDq8DYoJrgkbHFs=) 2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=) 3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=) 5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Aug 9 01:14:01 2025 GMT Not After : Aug 16 01:14:01 2025 GMT Subject: CN=6896a0da-861d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:ab:f1:be:1a:c9:af:28:87:f2:4a:69:d5: a7:43:67:63:3f:ee:a8:16:e4:e0:40:14:9c:78:a0: f6:15:3d:b3:f5:8b:aa:b3:d7:6d:0b:71:c7:64:e0: 47:a3:4a:9d:36:14:92:b6:f6:fe:82:12:c1:0b:3d: a1:ec:74:da:1b:be:d9:09:ef:f9:9a:88:8b:42:0e: c2:d2:fd:38:95:b1:68:51:42:c5:ff:51:63:84:0c: 64:67:d0:48:2c:17:cd:dd:8b:fe:e4:c5:6b:ba:d9: 0e:10:50:88:70:8e:23:ac:14:7d:0e:61:42:77:68: 0a:15:af:d4:96:94:b7:e2:cc:04:42:56:10:2d:e9: 1c:b1:16:9a:41:a1:b0:cb:3e:84:4c:e0:c9:c3:55: 87:a3:5d:a6:0b:28:9c:66:13:09:d2:b6:da:82:84: f7:18:cd:37:8b:b8:f1:dc:c8:88:7f:b8:ab:8d:bb: a2:63:52:a0:33:70:1f:b6:88:e7:4e:69:b9:43:a8: 91:b0:93:08:20:25:d5:a5:6b:cb:d6:dc:f7:c2:7d: 32:2d:e0:72:07:f3:14:d5:96:ee:f7:79:95:b1:60: 9e:2b:56:9f:fc:01:00:49:2c:6e:f5:c2:d1:c8:75: 23:dd:e3:c0:a2:9e:dd:0a:d5:1a:fc:4f:ca:47:f4: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:6C:B1:E4:A0:37:57:CC:16:CC:32:8C:5E:D9:E0:E8:D5:A8:B7 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c0:02:6e:bc:94:99:b5:19:9d:1d:85:40:6a:8a:66:28:a8: b0:67:e1:f2:31:26:3a:f6:bf:d4:15:37:09:ac:68:ce:f3:af: b3:82:6d:65:61:d4:51:f4:ed:b1:68:1d:ef:77:2b:0d:48:cf: 89:a2:79:74:8b:44:fd:dc:75:08:95:1a:9f:44:c8:0a:59:50: 64:8a:6a:c2:30:54:b6:00:6a:17:61:21:15:3e:8e:bc:9d:72: bb:c4:1d:c0:99:64:cc:fa:ee:ca:12:78:64:0c:68:b1:dd:d1: 90:46:02:58:14:4f:61:00:c4:bc:54:14:dc:b0:69:ea:75:3a: 3e:b7:79:fa:1e:4a:e2:5f:a3:2e:1e:48:66:ce:af:0c:16:33: 3f:37:60:9d:c1:7b:01:60:e1:41:b4:d9:65:ef:4d:e7:a1:b2: 26:03:4a:a4:d7:50:09:72:cf:07:d7:13:35:e1:cd:4e:84:61: 6a:d1:3f:43:4c:39:87:95:85:1b:e2:a4:ac:c1:0a:ac:b7:e4: 52:78:27:f7:19:07:cd:dc:e3:a8:05:be:68:db:36:4f:fd:0d: 5d:9a:0a:25:3a:02:99:82:73:d1:1d:da:c0:a9:ff:c5:0b:80: 6c:01:11:51:b8:38:20:7f:fa:2a:a6:93:fa:23:40:8a:20:03: 80:b9:f3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwODA5MDExNDAxWhcNMjUwODE2MDExNDAxWjAYMRYwFAYD VQQDEw02ODk2YTBkYS04NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZmr8b4aya8oh/JKadWnQ2djP+6oFuTgQBSceKD2FT2z9Yuqs9dtC3HHZOBH o0qdNhSStvb+ghLBCz2h7HTaG77ZCe/5moiLQg7C0v04lbFoUULF/1FjhAxkZ9BI LBfN3Yv+5MVrutkOEFCIcI4jrBR9DmFCd2gKFa/UlpS34swEQlYQLekcsRaaQaGw yz6ETODJw1WHo12mCyicZhMJ0rbagoT3GM03i7jx3MiIf7irjbuiY1KgM3Aftojn Tmm5Q6iRsJMIICXVpWvL1tz3wn0yLeByB/MU1Zbu93mVsWCeK1af/AEASSxu9cLR yHUj3ePAop7dCtUa/E/KR/Q94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCAbLHk oDdXzBbMMoxe2eDo1ai3MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPwAJuvJSZtRmdHYVAaopmKKiwZ+HyMSY69r/UFTcJrGjO86+zgm1l YdRR9O2xaB3vdysNSM+Jonl0i0T93HUIlRqfRMgKWVBkimrCMFS2AGoXYSEVPo68 nXK7xB3AmWTM+u7KEnhkDGix3dGQRgJYFE9hAMS8VBTcsGnqdTo+t3n6HkriX6Mu Hkhmzq8MFjM/N2CdwXsBYOFBtNll703nobImA0qk11AJcs8H1xM14c1OhGFq0T9D TDmHlYUb4qSswQqst+RSeCf3GQfN3OOoBb5o2zZP/Q1dmgolOgKZgnPRHdrAqf/F C4BsARFRuDggf/oqppP6I0CKIAOAufNy -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:22 2025 by rpki-client