$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: FVptnSoW3mF7s9YJ/Uwvi0M0kMKsZNm1ni99kDCQh4A= Subject key identifier: E1:7A:CA:99:89:63:3C:3D:CA:0F:AE:24:D1:13:DE:93:95:60:19:0B Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0184 Signing time: Sat 21 Jun 2025 02:53:36 +0000 Manifest this update: Sat 21 Jun 2025 02:53:36 +0000 Manifest next update: Sat 28 Jun 2025 02:53:36 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: 0t9O9PA+3KPlBVzH7AuEPicEFv5+Au1uXwFb2sPjCAQ=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: wN+RYivC51/sVMn5qM1gC8zTEDi66N47MLSR9Ot7lLw=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Jun 21 02:53:36 2025 GMT Not After : Jun 28 02:53:36 2025 GMT Subject: CN=68561eb0-3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:ed:cc:f5:d5:bc:4b:df:51:eb:7e:54:0b: 05:21:0a:53:b0:78:f5:1e:c0:3f:dd:e9:d1:e7:bd: 6a:5b:50:f1:52:e6:9c:17:34:17:85:5c:60:4f:89: 95:85:35:c5:61:27:38:8d:c3:47:a3:90:82:fb:be: ca:25:f1:38:2a:24:6e:c9:24:91:9f:fa:b5:38:fd: 92:7d:c3:39:d9:fe:0b:25:4e:f1:a9:0e:d0:67:c4: d4:61:32:29:cc:d8:b2:af:37:0f:c5:53:ab:5f:4e: 82:6f:13:87:2a:3d:13:ee:82:fa:90:a5:9e:c7:fd: 54:dc:45:fc:be:d3:28:b2:f4:71:38:b7:d0:0d:18: 6f:97:c7:82:8c:b2:d4:ab:ab:57:8b:4a:91:0e:99: 01:8c:70:71:31:da:23:15:79:a4:71:db:8b:f3:c7: 45:e3:d1:34:eb:21:e9:f0:72:f7:a4:08:4f:5e:17: 9e:53:62:32:d8:77:8b:d7:40:ce:42:3b:b5:b3:37: 62:22:98:59:67:c1:0b:f0:c4:44:fb:3d:a0:e5:6f: 45:d5:ac:82:b5:18:2c:8c:ff:91:19:21:23:1e:ed: c5:21:d7:3b:a9:c3:4a:a9:21:55:a1:6e:a3:ae:90: 51:cc:bc:e3:4d:bd:9a:42:30:6b:e6:fb:ba:fe:a1: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:CA:99:89:63:3C:3D:CA:0F:AE:24:D1:13:DE:93:95:60:19:0B X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:68:58:31:87:a7:91:03:fa:ac:e6:ec:73:ec:af:a8:d9:2f: cf:eb:46:9c:71:54:d0:9f:0c:c0:5e:9f:16:c0:f6:20:47:34: 69:e0:6b:66:2f:a5:13:ce:3f:ef:94:b8:cd:79:0d:eb:71:22: b5:64:72:76:84:c5:bf:29:dc:fe:94:61:44:43:61:aa:d3:c9: a4:18:97:79:47:3e:f2:4c:13:bf:1e:5b:67:87:2b:ed:f1:25: c4:a4:a8:4a:29:17:a6:4b:82:27:47:2a:b3:3f:f7:9b:cd:8a: 6c:59:96:3b:e3:7a:e8:b2:56:f5:0a:18:06:98:f1:0a:c5:a5: 66:fc:b0:97:72:70:67:90:c6:45:e0:06:97:9c:d8:88:f4:5b: 9d:9d:e6:ca:64:ce:10:5d:dc:31:82:7f:7e:20:dc:f3:ea:97: 60:93:31:32:ad:83:74:03:a0:72:c5:77:ce:d5:a1:4d:b1:1c: 59:d7:34:8a:3b:4d:78:98:0c:af:35:a4:f1:05:a2:fb:ff:ae: a5:67:77:bf:ac:05:f9:65:cf:8b:ec:5d:57:2a:15:58:a2:57: 5e:78:25:13:c5:32:0b:65:37:9a:b8:9e:81:60:e4:d0:a9:55: 0e:aa:f6:c5:0d:aa:4b:bb:4b:d0:f5:ef:0c:eb:2f:3c:39:2d: ef:c4:0e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUwNjIxMDI1MzM2WhcNMjUwNjI4MDI1MzM2WjAYMRYwFAYD VQQDEw02ODU2MWViMC0zYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z7tzPXVvEvfUet+VAsFIQpTsHj1HsA/3enR571qW1DxUuacFzQXhVxgT4mV hTXFYSc4jcNHo5CC+77KJfE4KiRuySSRn/q1OP2SfcM52f4LJU7xqQ7QZ8TUYTIp zNiyrzcPxVOrX06CbxOHKj0T7oL6kKWex/1U3EX8vtMosvRxOLfQDRhvl8eCjLLU q6tXi0qRDpkBjHBxMdojFXmkcduL88dF49E06yHp8HL3pAhPXheeU2Iy2HeL10DO Qju1szdiIphZZ8EL8MRE+z2g5W9F1ayCtRgsjP+RGSEjHu3FIdc7qcNKqSFVoW6j rpBRzLzjTb2aQjBr5vu6/qH1qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOF6ypmJ Yzw9yg+uJNET3pOVYBkLMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgaFgxh6eRA/qs5uxz7K+o2S/P60accVTQnwzAXp8WwPYgRzRp4Gtm L6UTzj/vlLjNeQ3rcSK1ZHJ2hMW/Kdz+lGFEQ2Gq08mkGJd5Rz7yTBO/Hltnhyvt 8SXEpKhKKRemS4InRyqzP/ebzYpsWZY743roslb1ChgGmPEKxaVm/LCXcnBnkMZF 4AaXnNiI9FudnebKZM4QXdwxgn9+INzz6pdgkzEyrYN0A6ByxXfO1aFNsRxZ1zSK O014mAyvNaTxBaL7/66lZ3e/rAX5Zc+L7F1XKhVYoldeeCUTxTILZTeauJ6BYOTQ qVUOqvbFDapLu0vQ9e8M6y88OS3vxA4a -----END CERTIFICATE-----Generated at Sat Jun 21 19:41:55 2025 by rpki-client