$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: xbjHp5fqONVyy5JTEZOlAxgn7pkTRiD8reQMIh9AOpI= Subject key identifier: 2B:05:12:56:B9:B5:9A:74:87:88:F3:C8:D8:FA:53:37:62:A2:CA:AA Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: A3 Signing time: Mon 11 Aug 2025 06:33:23 +0000 Manifest this update: Mon 11 Aug 2025 06:33:22 +0000 Manifest next update: Mon 18 Aug 2025 06:33:22 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: B4pWnK80r4/voPbgBqHG11d+L6icDXoECBJz8KGv6Fw=) 2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: j4rFIHTNRhGLJLDjietaNGRc3CHg7H6921oZKrCNics=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Aug 11 06:33:22 2025 GMT Not After : Aug 18 06:33:22 2025 GMT Subject: CN=68998eb2-81cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:14:76:58:8b:88:57:f0:0f:9d:84:90:9d: 41:a6:7a:4d:b9:9a:da:36:55:9c:51:28:e4:82:7e: 49:97:7c:90:3e:fe:8c:3e:fa:aa:2f:3c:d8:24:4d: bb:0f:db:ee:84:75:6c:e5:e8:58:07:ce:59:0c:a6: 08:39:fb:22:66:75:73:1a:9b:94:cb:23:a1:83:04: e4:4c:46:62:e5:5c:ae:b1:52:63:e5:21:20:a4:35: 95:1e:da:1e:92:50:cc:0e:b9:a6:61:49:3e:17:cc: 16:ad:b6:78:70:51:64:0c:97:19:a4:bd:e7:ce:82: 79:62:96:35:d4:75:8c:2c:e8:e5:62:f7:6b:0d:9a: 23:42:ff:48:f8:b6:38:10:11:ff:6f:f0:d9:1e:48: b9:46:c6:77:16:25:cf:99:a7:ce:88:60:92:4c:b0: 19:85:ba:83:cd:e4:c7:64:ad:af:9c:a5:5e:d4:15: 1d:40:62:8f:bb:aa:11:d1:f1:65:75:ef:ec:85:06: 43:0a:95:7d:fa:2b:cd:57:4f:1a:76:7a:58:18:c0: d3:1c:b7:85:fc:b6:2f:e7:f5:84:42:19:95:7e:fe: 38:13:31:23:14:0d:78:3f:1c:ca:b7:31:70:dc:e4: 5e:6f:04:cb:31:71:a2:e9:ef:c6:0f:ba:28:53:07: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:05:12:56:B9:B5:9A:74:87:88:F3:C8:D8:FA:53:37:62:A2:CA:AA X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7a:fc:8d:b4:55:9d:11:ac:2d:69:11:46:27:b7:a9:48:0a: 43:00:82:1d:92:15:c2:a6:cd:2f:7c:32:6c:7c:f6:f0:14:ee: 51:b7:d8:e1:e6:2c:05:56:76:14:0b:95:0e:e6:da:77:7a:a4: 55:bb:60:39:b6:ea:2b:07:61:3d:3b:18:59:81:1b:a6:00:66: 15:f1:86:a9:06:83:07:19:66:9a:77:5b:14:2c:16:bb:27:7f: dc:f0:22:39:68:62:3b:c2:36:a5:2a:87:37:4b:ce:ff:4f:02: d6:85:ec:4d:4b:33:21:1d:f2:31:e1:21:a2:cd:a3:08:c1:bb: 72:d0:23:37:07:a1:f8:22:f1:c5:05:3d:a2:d9:c9:68:97:6c: ee:f8:30:6c:ed:59:91:8a:f1:09:79:4f:a5:ca:1d:f4:0e:37: 57:73:7c:eb:70:85:2b:be:c2:ca:52:c3:36:9d:2c:c4:0c:d5: a9:e3:84:79:1d:64:fd:ec:ae:fb:fc:a6:d1:82:3a:99:14:f0: ca:83:ee:a6:19:46:93:46:a2:57:95:6a:4c:69:b2:09:0a:f9: 86:8f:14:15:72:6a:1f:6a:32:b5:64:9d:72:9a:65:c3:ef:67: 70:59:98:68:8d:d2:32:52:95:9c:fb:ed:1e:cd:4a:ed:e6:3b: 06:3e:fc:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUwODExMDYzMzIyWhcNMjUwODE4MDYzMzIyWjAYMRYwFAYD VQQDEw02ODk5OGViMi04MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfgUdliLiFfwD52EkJ1BpnpNuZraNlWcUSjkgn5Jl3yQPv6MPvqqLzzYJE27 D9vuhHVs5ehYB85ZDKYIOfsiZnVzGpuUyyOhgwTkTEZi5VyusVJj5SEgpDWVHtoe klDMDrmmYUk+F8wWrbZ4cFFkDJcZpL3nzoJ5YpY11HWMLOjlYvdrDZojQv9I+LY4 EBH/b/DZHki5RsZ3FiXPmafOiGCSTLAZhbqDzeTHZK2vnKVe1BUdQGKPu6oR0fFl de/shQZDCpV9+ivNV08adnpYGMDTHLeF/LYv5/WEQhmVfv44EzEjFA14PxzKtzFw 3ORebwTLMXGi6e/GD7ooUwf3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsFEla5 tZp0h4jzyNj6UzdiosqqMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9evyNtFWdEawtaRFGJ7epSApDAIIdkhXCps0vfDJsfPbwFO5Rt9jh 5iwFVnYUC5UO5tp3eqRVu2A5tuorB2E9OxhZgRumAGYV8YapBoMHGWaad1sULBa7 J3/c8CI5aGI7wjalKoc3S87/TwLWhexNSzMhHfIx4SGizaMIwbty0CM3B6H4IvHF BT2i2clol2zu+DBs7VmRivEJeU+lyh30DjdXc3zrcIUrvsLKUsM2nSzEDNWp44R5 HWT97K77/KbRgjqZFPDKg+6mGUaTRqJXlWpMabIJCvmGjxQVcmofajK1ZJ1ymmXD 72dwWZhojdIyUpWc++0ezUrt5jsGPvyH -----END CERTIFICATE-----Generated at Wed Aug 13 05:34:47 2025 by rpki-client