$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: fVQOBtXgU5Vsqdd76SxfbzljS2Z2pWn+1NfZ/yIfIUc= Subject key identifier: 29:02:44:68:92:3A:34:E6:FC:F1:B5:7F:8E:F0:AB:30:B2:64:22:A9 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: B4 Signing time: Sat 09 Aug 2025 06:55:21 +0000 Manifest this update: Sat 09 Aug 2025 06:55:20 +0000 Manifest next update: Sat 16 Aug 2025 06:55:20 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: O8jtiE2ngpzY+4XdqvNa5VoT/2PKkYKxKLjDZz1W5IA=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 6: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Aug 9 06:55:20 2025 GMT Not After : Aug 16 06:55:20 2025 GMT Subject: CN=6896f0d8-34a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:69:43:ec:19:10:3b:39:3c:90:31:b8:1d: 9f:0e:2d:9d:60:c3:86:da:33:46:fd:c9:3f:45:b0: 3b:07:cf:71:77:8f:68:c2:6b:59:da:a3:2b:b4:74: 98:82:db:f3:06:b8:74:04:dc:03:45:65:f3:e6:e1: b1:97:7b:94:b7:88:1e:ba:f9:ea:b4:ac:20:e4:a5: 55:b0:04:62:f4:23:39:8e:eb:6c:43:81:eb:3c:69: 9e:3f:a8:6d:cd:d0:02:3c:97:04:02:0d:d2:d9:0e: 29:41:de:4e:13:47:c3:17:b0:69:2f:e6:fa:15:d4: 73:36:f7:e5:65:97:38:a4:c2:67:53:91:aa:80:05: ae:c9:cc:4f:df:0b:d0:2a:53:cb:44:35:1f:9c:94: e5:42:db:9c:f9:f3:77:bd:48:1c:1b:5d:15:5a:ea: 98:4a:0f:18:a3:85:ed:08:99:c6:44:41:3a:35:ee: 31:ba:7f:94:7d:73:76:ca:c1:16:cf:af:2b:15:2d: 9b:88:97:03:ad:8c:ab:4c:c8:37:b5:f8:44:cd:7e: ec:a3:79:f0:83:07:64:ce:d8:40:10:43:4d:e3:2b: 2a:cd:98:80:1e:f8:60:37:b6:e3:3a:61:26:2f:08: e6:b6:f6:c5:d6:e7:c0:c0:36:9c:48:c3:40:52:bf: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:44:68:92:3A:34:E6:FC:F1:B5:7F:8E:F0:AB:30:B2:64:22:A9 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3d:c1:7e:c1:7a:4d:39:58:d1:ec:96:4f:58:08:0a:16:cd: b1:1e:b3:d2:bd:2d:9c:1d:ba:c0:ef:3e:85:76:de:bb:bf:01: 8c:f2:d9:98:a1:41:11:31:4f:d0:7e:02:bd:1c:c3:bf:64:86: a7:46:5c:2d:06:48:46:70:00:b5:01:96:4b:e9:af:5c:37:8b: 02:0a:70:ee:80:08:4b:7e:81:c0:0c:82:17:d7:6f:a4:a9:e8: cc:05:11:b8:c4:c3:5f:c8:1b:16:c9:80:7a:1d:a7:64:ab:65: 91:0e:0d:64:82:d6:3a:8d:2a:97:b3:e7:aa:20:6c:b0:35:25: a1:fa:b7:3c:bc:4e:12:5e:26:24:51:1d:bc:1f:ee:aa:7d:ea: f9:e0:3a:bd:44:8f:d1:ea:f5:cf:72:4a:1f:dd:6d:1b:1e:f7: fb:a1:76:b0:e3:02:91:21:64:96:10:73:08:c4:84:0a:6c:b3: 68:17:cd:75:a9:60:53:c8:3e:58:40:e0:79:32:a9:8d:c8:b2: 13:94:38:39:03:ee:73:74:8a:c4:b8:b7:8c:92:6e:34:51:29: ab:e8:03:7d:3c:c2:d3:cd:db:ae:4d:de:30:51:9d:6f:c9:44: 38:1d:a0:69:e6:ce:c6:ce:f9:4b:57:15:ba:40:fd:e6:b9:f8: f6:84:27:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwODA5MDY1NTIwWhcNMjUwODE2MDY1NTIwWjAYMRYwFAYD VQQDEw02ODk2ZjBkOC0zNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN1pQ+wZEDs5PJAxuB2fDi2dYMOG2jNG/ck/RbA7B89xd49owmtZ2qMrtHSY gtvzBrh0BNwDRWXz5uGxl3uUt4geuvnqtKwg5KVVsARi9CM5jutsQ4HrPGmeP6ht zdACPJcEAg3S2Q4pQd5OE0fDF7BpL+b6FdRzNvflZZc4pMJnU5GqgAWuycxP3wvQ KlPLRDUfnJTlQtuc+fN3vUgcG10VWuqYSg8Yo4XtCJnGREE6Ne4xun+UfXN2ysEW z68rFS2biJcDrYyrTMg3tfhEzX7so3nwgwdkzthAEENN4ysqzZiAHvhgN7bjOmEm LwjmtvbF1ufAwDacSMNAUr/GIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkCRGiS OjTm/PG1f47wqzCyZCKpMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClPcF+wXpNOVjR7JZPWAgKFs2xHrPSvS2cHbrA7z6Fdt67vwGM8tmY oUERMU/QfgK9HMO/ZIanRlwtBkhGcAC1AZZL6a9cN4sCCnDugAhLfoHADIIX12+k qejMBRG4xMNfyBsWyYB6Hadkq2WRDg1kgtY6jSqXs+eqIGywNSWh+rc8vE4SXiYk UR28H+6qfer54Dq9RI/R6vXPckof3W0bHvf7oXaw4wKRIWSWEHMIxIQKbLNoF811 qWBTyD5YQOB5MqmNyLITlDg5A+5zdIrEuLeMkm40USmr6AN9PMLTzduuTd4wUZ1v yUQ4HaBp5s7GzvlLVxW6QP3mufj2hCcv -----END CERTIFICATE-----Generated at Mon Aug 11 01:51:04 2025 by rpki-client