$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: HUGKI6Nyx3sZ62CVuTeSPlVdCGcWQ22NHctFciwKELg= Subject key identifier: 0A:76:5F:D2:61:B2:A2:04:CF:38:81:90:F3:8F:97:A3:3F:F7:14:F9 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: CF Signing time: Tue 05 Aug 2025 06:10:58 +0000 Manifest this update: Tue 05 Aug 2025 06:10:58 +0000 Manifest next update: Tue 12 Aug 2025 06:10:58 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: k39cDiFfTLZMw3hFH6zukkCOTwJeYqigife3MAEVdZM=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Aug 5 06:10:58 2025 GMT Not After : Aug 12 06:10:58 2025 GMT Subject: CN=6891a072-8242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:58:9a:53:ae:87:f7:ec:54:9f:8e:86:40: 1a:4b:a8:83:70:90:2c:ae:08:86:48:4e:d8:4d:0f: 41:65:af:57:40:48:7c:06:68:2a:5c:e9:91:8b:2d: 12:0d:25:a6:57:13:aa:8b:69:bc:b1:68:7c:4a:42: 52:17:c2:a1:12:48:30:6c:5b:20:73:c2:66:66:0f: 21:fa:05:6a:f6:45:8b:e3:2c:07:88:ff:ee:93:d2: ef:aa:f4:f2:87:60:f0:d1:04:d9:f9:10:58:7c:71: 2e:3b:46:73:37:ee:6d:1e:4a:ae:b9:05:15:09:70: c2:58:d7:63:9c:fb:02:8e:6e:0b:39:1d:d4:a4:e2: b3:19:31:5c:41:18:a2:5f:32:cb:42:b0:f0:3f:66: c3:6d:df:aa:89:a8:48:30:22:ce:e5:62:f0:b6:ed: ce:77:b8:7e:b8:d9:c6:be:3d:72:f5:9e:8d:20:df: 63:2b:44:47:ed:ff:b5:c5:a6:a9:b4:ed:da:4d:05: 83:b2:8a:43:3f:4a:43:a3:d2:dd:81:52:64:bb:89: 11:48:c7:5e:9c:07:39:01:c6:b2:00:b7:23:6b:ba: 32:cf:bc:61:dc:1b:6c:29:18:54:05:67:85:7c:40: 2b:4b:b2:69:0f:14:68:ac:e6:18:f1:2f:c0:86:be: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:5F:D2:61:B2:A2:04:CF:38:81:90:F3:8F:97:A3:3F:F7:14:F9 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4b:f1:85:e4:9a:32:dd:21:7c:5f:3a:2c:16:a7:e8:37:b8: 1f:89:a3:7d:cf:de:69:27:e1:58:55:06:89:be:40:93:d2:dc: f6:3c:ac:a9:92:bd:9d:69:46:a7:89:ac:41:5d:fe:38:af:45: 38:06:76:33:51:34:16:43:2c:46:6f:a9:d1:bb:c1:f3:02:87: 0a:78:4a:bb:e6:03:74:ec:db:31:24:44:df:21:7f:4d:5b:20: e7:1f:fc:8f:32:bf:94:df:7d:f6:37:cc:8a:f4:3e:d5:6c:9c: ac:49:36:2b:e4:de:17:1f:6a:0a:9f:58:bd:97:fe:08:de:e4: a3:01:59:58:3f:10:06:a0:80:a4:06:2f:36:e2:bd:f1:b1:b8: a8:6a:4c:10:2d:18:2e:fc:c4:94:6e:70:30:85:e0:77:8c:4b: be:e0:26:4c:58:6c:96:a7:20:ad:e5:b9:a2:90:54:96:59:64: ac:a3:d3:02:c6:7f:8a:93:05:5a:42:ec:e3:e6:e1:88:47:65: fb:08:bf:be:d8:d5:6b:2b:0d:dd:16:26:45:e0:34:cc:91:93: ea:e9:b2:d5:aa:f1:b9:18:7f:31:99:15:1e:0e:e3:ea:87:8c: 41:4c:15:6b:77:59:2a:22:ae:01:5d:f6:9d:57:e7:b0:a9:42: 34:57:d1:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUwODA1MDYxMDU4WhcNMjUwODEyMDYxMDU4WjAYMRYwFAYD VQQDEw02ODkxYTA3Mi04MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxU5YmlOuh/fsVJ+OhkAaS6iDcJAsrgiGSE7YTQ9BZa9XQEh8BmgqXOmRiy0S DSWmVxOqi2m8sWh8SkJSF8KhEkgwbFsgc8JmZg8h+gVq9kWL4ywHiP/uk9LvqvTy h2Dw0QTZ+RBYfHEuO0ZzN+5tHkquuQUVCXDCWNdjnPsCjm4LOR3UpOKzGTFcQRii XzLLQrDwP2bDbd+qiahIMCLO5WLwtu3Od7h+uNnGvj1y9Z6NIN9jK0RH7f+1xaap tO3aTQWDsopDP0pDo9LdgVJku4kRSMdenAc5AcayALcja7oyz7xh3BtsKRhUBWeF fEArS7JpDxRorOYY8S/Ahr5jnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp2X9Jh sqIEzziBkPOPl6M/9xT5MB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArS/GF5Joy3SF8XzosFqfoN7gfiaN9z95pJ+FYVQaJvkCT0tz2PKyp kr2daUaniaxBXf44r0U4BnYzUTQWQyxGb6nRu8HzAocKeEq75gN07NsxJETfIX9N WyDnH/yPMr+U3332N8yK9D7VbJysSTYr5N4XH2oKn1i9l/4I3uSjAVlYPxAGoICk Bi824r3xsbioakwQLRgu/MSUbnAwheB3jEu+4CZMWGyWpyCt5bmikFSWWWSso9MC xn+KkwVaQuzj5uGIR2X7CL++2NVrKw3dFiZF4DTMkZPq6bLVqvG5GH8xmRUeDuPq h4xBTBVrd1kqIq4BXfadV+ewqUI0V9Gc -----END CERTIFICATE-----Generated at Wed Aug 6 11:21:32 2025 by rpki-client