$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json) Hash identifier: UZ5f/AxB6pt3/uMgDlZUHPMGMJ9j4Z0//hSYtEvfz5w= Subject key identifier: 3B:8F:DC:87:4B:44:A9:CB:A0:FA:84:22:B2:B1:24:A6:62:D1:0F:CD Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft Manifest number: 2A Signing time: Sat 09 Aug 2025 08:16:44 +0000 Manifest this update: Sat 09 Aug 2025 08:16:43 +0000 Manifest next update: Sat 16 Aug 2025 08:16:43 +0000 Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: 0557fbzcdteT/1BDFrVJ1gCX+RIIAtn8k+0pxh9EcPA=) 2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Validity Not Before: Aug 9 08:16:43 2025 GMT Not After : Aug 16 08:16:43 2025 GMT Subject: CN=689703ec-da04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:ef:8f:cc:ae:1d:2c:0c:87:20:fe:b3:ae: 99:d3:62:0b:d0:23:f3:90:b7:10:70:11:b8:21:4a: cb:1f:bd:6a:16:91:33:d8:4c:9a:e1:cc:9d:96:39: 53:01:b8:75:8b:f9:44:84:23:0a:b5:e2:58:ef:f0: 53:70:f5:45:d3:80:5f:bf:f9:2c:a9:7f:9a:cb:57: 97:a0:67:50:95:4d:b3:47:98:71:c4:2b:5b:40:94: bf:36:05:6f:d5:b5:93:e6:bc:e4:09:49:ca:45:7a: a0:e8:53:44:aa:8c:e2:16:70:38:ec:15:97:e7:bd: 9f:8c:0f:ab:58:86:ac:4a:55:61:b2:27:ea:fc:88: 14:11:68:a1:da:28:68:f2:05:85:a7:71:41:db:50: f8:f8:3f:d1:dd:d0:68:7a:c8:bf:f4:9a:52:69:0a: 25:ee:e9:85:03:7b:aa:a6:81:86:08:36:86:9b:3f: f9:1b:4f:5a:6f:21:df:81:25:6d:cc:77:87:ff:64: 25:74:36:9d:92:f7:ed:f4:be:48:69:7d:11:b0:f7: 9b:ea:2b:67:cb:df:86:d4:bb:cb:60:5a:30:e0:85: c4:69:e9:6d:b9:38:7d:5c:77:95:e6:e3:39:8e:c1: af:ce:c7:e8:74:f8:35:72:0d:85:0c:70:1c:ef:3f: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8F:DC:87:4B:44:A9:CB:A0:FA:84:22:B2:B1:24:A6:62:D1:0F:CD X509v3 Authority Key Identifier: keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:57:46:1c:5f:79:a1:05:da:37:f0:e9:65:9c:ca:71:70: a6:a1:9d:c4:db:84:7f:e7:96:1d:5a:d6:bb:0f:cf:aa:b3:02: b5:2e:5d:2b:f1:41:21:df:31:19:66:97:77:2b:43:0d:b7:06: 24:39:28:68:19:19:35:d7:6b:f9:bf:b2:12:58:5e:8c:36:45: 1c:3c:85:44:bb:cc:f2:71:3a:ab:a3:5a:ec:23:84:59:bd:57: 03:cf:b6:1f:0b:a2:95:01:85:9d:05:6c:b4:a7:51:0b:5b:42: b8:9e:10:dc:16:68:f5:c7:8b:7f:81:0d:8d:1d:49:40:80:1c: 8d:92:5e:4c:a5:46:d2:19:27:a3:cc:ab:90:6a:06:ed:96:60: d4:f4:84:e7:b9:82:bc:aa:f9:56:a2:23:71:dd:55:70:b6:87: 2d:4d:48:f8:5d:56:5b:73:86:b2:fc:15:1b:aa:9e:2c:63:96: b3:35:be:1c:11:a8:07:fd:0e:e0:f0:3c:f5:ed:ea:cf:26:2d: 51:6e:e2:6a:bd:6b:e4:ba:ce:35:b5:f9:92:fa:30:c5:63:84: 6c:41:ed:b0:7c:9a:5e:b1:bd:64:8a:6d:f0:0c:86:4f:25:7d: 06:d3:72:c5:6b:36:b2:58:44:8c:94:07:57:c4:06:66:3e:85: 05:be:e9:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MEU5MDExMC8GA1UEBRMoQ0YxRTBFNUJENzdCMUZGQjUzNTY3ODFGNjE2MzE1OEMy RTJGN0I2RDAeFw0yNTA4MDkwODE2NDNaFw0yNTA4MTYwODE2NDNaMBgxFjAUBgNV BAMTDTY4OTcwM2VjLWRhMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVIu+PzK4dLAyHIP6zrpnTYgvQI/OQtxBwEbghSssfvWoWkTPYTJrhzJ2WOVMB uHWL+USEIwq14ljv8FNw9UXTgF+/+Sypf5rLV5egZ1CVTbNHmHHEK1tAlL82BW/V tZPmvOQJScpFeqDoU0SqjOIWcDjsFZfnvZ+MD6tYhqxKVWGyJ+r8iBQRaKHaKGjy BYWncUHbUPj4P9Hd0Gh6yL/0mlJpCiXu6YUDe6qmgYYINoabP/kbT1pvId+BJW3M d4f/ZCV0Np2S9+30vkhpfRGw95vqK2fL34bUu8tgWjDghcRp6W25OH1cd5Xm4zmO wa/Ox+h0+DVyDYUMcBzvPxRJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO4/ch0tE qcug+oQisrEkpmLRD80wHwYDVR0jBBgwFoAUzx4OW9d7H/tTVngfYWMVjC4ve20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRTkwL0JCNkZCNjg4Mzk2 NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveng0T1c5ZDdIX3RUVm5nZllXTVZqQzR2ZTIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw RTkwL0JCNkZCNjg4Mzk2NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90 VFZuZ2ZZV01WakM0dmUyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHY+V0YcX3mhBdo38OllnMpxcKahncTbhH/nlh1a1rsPz6qzArUuXSvx QSHfMRlml3crQw23BiQ5KGgZGTXXa/m/shJYXow2RRw8hUS7zPJxOqujWuwjhFm9 VwPPth8LopUBhZ0FbLSnUQtbQrieENwWaPXHi3+BDY0dSUCAHI2SXkylRtIZJ6PM q5BqBu2WYNT0hOe5gryq+VaiI3HdVXC2hy1NSPhdVltzhrL8FRuqnixjlrM1vhwR qAf9DuDwPPXt6s8mLVFu4mq9a+S6zjW1+ZL6MMVjhGxB7bB8ml6xvWSKbfAMhk8l fQbTcsVrNrJYRIyUB1fEBmY+hQW+6Us= -----END CERTIFICATE-----Generated at Sun Aug 10 19:54:33 2025 by rpki-client