$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: JbWx7IvziIzGBkIDXQGewW4T3ATsPm/uwAiyosjHnJo= Subject key identifier: 3B:F1:86:0D:6B:73:2D:7A:B8:E9:22:B4:62:DD:1D:34:6B:1A:7A:A8 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 0190 Signing time: Sat 09 Aug 2025 04:04:07 +0000 Manifest this update: Sat 09 Aug 2025 04:04:06 +0000 Manifest next update: Sat 16 Aug 2025 04:04:06 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: JoBuqmTAhHUVpqAdUeV3I+cyipMNi/x/w+6VupiAZ0w=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Aug 9 04:04:06 2025 GMT Not After : Aug 16 04:04:06 2025 GMT Subject: CN=6896c8b6-fcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:2b:90:db:72:7d:08:bc:86:60:01:53:6b: de:1c:ce:b1:24:93:03:10:ef:e1:4e:22:f7:fd:b4: ba:ab:6e:d5:03:dc:f7:21:77:0a:9a:47:be:9e:ae: e6:e9:3c:9a:9f:37:e5:be:6a:a2:a0:07:bc:59:20: e8:30:11:aa:92:9b:fd:91:74:49:0c:56:2f:b1:84: db:0c:da:79:19:36:51:33:ff:90:4d:69:3d:ca:05: 7d:6e:ad:32:7a:8a:98:5c:81:42:0a:5c:2c:82:37: 32:d8:2d:22:78:10:f8:08:22:53:96:8e:6c:45:eb: fd:41:fd:a8:4e:37:4d:e7:a3:57:ae:5d:eb:f0:92: 74:b1:37:5d:20:69:a6:b2:e1:25:5b:47:6e:12:ec: 4e:52:82:41:d4:4c:34:9d:c1:3c:05:09:2b:9b:dc: b4:28:47:07:64:1e:a9:da:d5:04:b2:17:67:cc:7e: cb:c4:18:42:0d:8f:51:56:dd:00:fc:e7:41:7a:60: a6:41:5a:ce:49:0c:21:9d:31:77:6e:9e:be:72:7a: da:e9:0e:42:87:f9:4c:1f:55:ed:b1:93:27:34:87: b6:25:93:39:9a:9b:cc:99:a1:46:56:c3:d0:b0:fa: d2:72:5a:4e:64:c8:fe:3c:6f:55:4e:ed:0c:31:9a: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F1:86:0D:6B:73:2D:7A:B8:E9:22:B4:62:DD:1D:34:6B:1A:7A:A8 X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:56:2e:a8:59:da:62:b0:b8:ee:a1:04:dd:f8:e1:83:d9: 3b:5e:dd:6d:5e:fa:96:fc:79:b3:4f:78:c3:82:26:05:8e:3c: b4:ee:b0:75:a0:db:2f:66:1c:37:1c:0e:a2:23:2f:4d:6d:24: ff:5f:cc:83:21:8e:41:bb:a4:02:ea:35:5b:3d:a2:d2:43:f0: b6:17:4c:04:17:a6:3b:7f:cc:e9:fd:7b:f5:2d:a2:50:a9:5d: 90:eb:a1:13:e2:e8:7e:29:64:ac:f2:a4:c9:07:77:c6:70:f0: 71:f7:0a:d3:92:a2:6b:ce:dc:e4:ff:59:12:0a:e0:ff:72:94: 1f:9c:14:c9:98:c4:b0:ec:3a:db:14:fd:6f:90:fe:f5:69:bf: ed:47:68:e9:6e:f5:2c:10:81:fc:58:71:1b:d8:51:63:7b:c1: 80:54:8d:53:87:37:14:52:21:4e:e3:0b:cc:38:6f:70:50:0e: db:74:fd:76:07:9e:38:fc:57:7e:42:c6:39:b3:cc:cd:6c:53: f7:a0:fe:53:7d:0b:8b:25:2d:03:92:d5:b8:e0:3c:3b:7d:53: 6e:07:01:7c:96:a1:b0:2b:8d:be:b9:5c:12:6c:70:4c:2f:d4: 62:c2:3e:11:3c:01:ae:09:f4:64:9a:ac:40:69:8f:9e:2e:99: 62:ff:91:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUwODA5MDQwNDA2WhcNMjUwODE2MDQwNDA2WjAYMRYwFAYD VQQDEw02ODk2YzhiNi1mY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlL0rkNtyfQi8hmABU2veHM6xJJMDEO/hTiL3/bS6q27VA9z3IXcKmke+nq7m 6TyanzflvmqioAe8WSDoMBGqkpv9kXRJDFYvsYTbDNp5GTZRM/+QTWk9ygV9bq0y eoqYXIFCClwsgjcy2C0ieBD4CCJTlo5sRev9Qf2oTjdN56NXrl3r8JJ0sTddIGmm suElW0duEuxOUoJB1Ew0ncE8BQkrm9y0KEcHZB6p2tUEshdnzH7LxBhCDY9RVt0A /OdBemCmQVrOSQwhnTF3bp6+cnra6Q5Ch/lMH1XtsZMnNIe2JZM5mpvMmaFGVsPQ sPrSclpOZMj+PG9VTu0MMZofOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvxhg1r cy16uOkitGLdHTRrGnqoMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbaFYuqFnaYrC47qEE3fjhg9k7Xt1tXvqW/HmzT3jDgiYFjjy07rB1 oNsvZhw3HA6iIy9NbST/X8yDIY5Bu6QC6jVbPaLSQ/C2F0wEF6Y7f8zp/Xv1LaJQ qV2Q66ET4uh+KWSs8qTJB3fGcPBx9wrTkqJrztzk/1kSCuD/cpQfnBTJmMSw7Drb FP1vkP71ab/tR2jpbvUsEIH8WHEb2FFje8GAVI1ThzcUUiFO4wvMOG9wUA7bdP12 B544/Fd+QsY5s8zNbFP3oP5TfQuLJS0DktW44Dw7fVNuBwF8lqGwK42+uVwSbHBM L9Riwj4RPAGuCfRkmqxAaY+eLpli/5HF -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:24 2025 by rpki-client