$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: tXElg2IKw5dwB7hsoQmc/J6D4QGK7+wCG9jGAdrOIiQ= Subject key identifier: 93:01:1B:11:F1:AF:23:D0:95:4A:32:1A:60:8F:0A:21:11:E0:A0:CC Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 0938 Signing time: Tue 12 Aug 2025 20:30:16 +0000 Manifest this update: Tue 12 Aug 2025 20:30:16 +0000 Manifest next update: Tue 19 Aug 2025 20:30:16 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: 9fJiq7gzP8ZTkVvOMAdIO29VotdLwWn5KeAmFEnOw1M=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Aug 12 20:30:16 2025 GMT Not After : Aug 19 20:30:16 2025 GMT Subject: CN=689ba458-1bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:32:37:13:01:73:93:25:84:d2:19:ac:b3: b0:f4:e6:9d:bc:dd:6b:38:95:25:f9:fe:52:6c:b7: d9:2a:bb:fd:b5:d0:a9:e8:f0:35:d4:23:8f:85:e4: ab:23:cd:72:98:dd:45:40:79:f8:a5:0f:e5:d2:83: 4c:91:fd:9f:43:ae:54:5f:a4:98:c5:19:cb:24:fb: ba:f5:d7:17:1b:45:b2:14:9a:f5:fa:ca:b1:09:80: a9:81:7b:4f:34:a2:ed:16:07:a2:b2:2b:1d:28:00: 24:2f:36:c6:54:1d:2e:35:88:37:e2:29:df:04:8d: ff:6c:7a:d1:30:77:6b:ea:94:c6:ed:d5:5e:47:6d: 5c:92:84:15:ea:ed:e0:1c:a3:3a:ca:77:cb:dc:38: 26:e1:89:93:f1:99:fd:42:ca:8f:f3:d7:d1:d3:44: 2b:53:fc:ef:79:aa:c5:ea:6d:79:88:65:15:1e:c8: 6c:7b:0e:16:0e:ed:96:11:c5:e7:fa:b0:44:e8:43: 4d:e1:15:a9:52:b6:75:d8:bb:14:af:1b:f3:85:25: 31:c6:88:ea:e2:9e:13:a6:78:e3:89:45:33:1f:f2: 3b:1e:29:b4:24:e0:23:ac:00:d5:9b:24:95:9e:bb: 1c:a4:45:42:f3:6d:71:ac:ff:93:70:72:f8:e1:bb: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:1B:11:F1:AF:23:D0:95:4A:32:1A:60:8F:0A:21:11:E0:A0:CC X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5c:e3:96:c4:e4:73:c1:3d:90:d9:90:10:11:56:f6:0e:a1: 3d:56:df:c6:c2:b1:ab:51:2c:51:39:d4:e3:54:6f:96:5f:4e: 49:9f:5b:8b:6b:6d:3f:9b:e6:7b:a9:ad:de:e0:e6:60:2c:f3: 46:34:b3:3d:1c:d3:a1:5b:83:6e:88:78:4e:95:a1:e9:14:fe: c3:dc:86:74:2c:a5:ac:fe:14:62:c7:06:23:2a:17:7d:cf:22: b5:da:9f:4c:7a:4b:c1:73:da:38:cd:e5:d4:82:b1:0f:70:0f: 5d:af:c7:ec:68:d8:72:87:13:0a:7d:06:6d:2f:04:9d:64:08: 9a:61:f2:65:50:30:ed:6e:6b:91:bb:11:55:89:33:29:9c:3b: 23:ab:e6:a7:cb:15:c1:8b:6f:c9:0c:35:cd:dd:1d:bd:80:a3: 29:58:3a:ac:f8:4c:87:b0:29:05:8d:32:08:c9:9b:1f:5b:e7: d5:3f:66:05:94:18:0c:ba:2b:15:4f:94:9e:9b:7a:bd:9c:be: de:79:fd:65:fa:63:c8:44:c4:96:4b:51:a3:dc:9a:07:80:b5: f9:5e:6f:8f:c5:4a:b2:1d:4a:6b:4a:a3:44:5e:2b:f9:68:2f: 96:e5:99:a2:64:d0:ca:20:19:03:8c:41:85:2d:62:fa:05:e3: 8c:40:91:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUwODEyMjAzMDE2WhcNMjUwODE5MjAzMDE2WjAYMRYwFAYD VQQDEw02ODliYTQ1OC0xYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBQyNxMBc5MlhNIZrLOw9OadvN1rOJUl+f5SbLfZKrv9tdCp6PA11COPheSr I81ymN1FQHn4pQ/l0oNMkf2fQ65UX6SYxRnLJPu69dcXG0WyFJr1+sqxCYCpgXtP NKLtFgeisisdKAAkLzbGVB0uNYg34infBI3/bHrRMHdr6pTG7dVeR21ckoQV6u3g HKM6ynfL3Dgm4YmT8Zn9QsqP89fR00QrU/zvearF6m15iGUVHshsew4WDu2WEcXn +rBE6ENN4RWpUrZ12LsUrxvzhSUxxojq4p4TpnjjiUUzH/I7Him0JOAjrADVmySV nrscpEVC821xrP+TcHL44bs/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMBGxHx ryPQlUoyGmCPCiER4KDMMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzXOOWxORzwT2Q2ZAQEVb2DqE9Vt/GwrGrUSxROdTjVG+WX05Jn1uL a20/m+Z7qa3e4OZgLPNGNLM9HNOhW4NuiHhOlaHpFP7D3IZ0LKWs/hRixwYjKhd9 zyK12p9MekvBc9o4zeXUgrEPcA9dr8fsaNhyhxMKfQZtLwSdZAiaYfJlUDDtbmuR uxFViTMpnDsjq+anyxXBi2/JDDXN3R29gKMpWDqs+EyHsCkFjTIIyZsfW+fVP2YF lBgMuisVT5Sem3q9nL7eef1l+mPIRMSWS1Gj3JoHgLX5Xm+PxUqyHUprSqNEXiv5 aC+W5ZmiZNDKIBkDjEGFLWL6BeOMQJHK -----END CERTIFICATE-----Generated at Wed Aug 13 05:32:53 2025 by rpki-client