$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: Rj34BHwrLzgtTY3PEYw5EO2YKPNAUtYo92spgUN3d00= Subject key identifier: EE:3B:05:42:9B:93:64:19:70:ED:47:FA:B5:EE:6A:75:28:A8:1D:0C Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: 0121 Signing time: Thu 07 Aug 2025 05:14:47 +0000 Manifest this update: Thu 07 Aug 2025 05:14:47 +0000 Manifest next update: Thu 14 Aug 2025 05:14:47 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: NztRweSPkWIglQMNbSbZQ3ZaHWKkgo3zikPONumhl78=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Aug 7 05:14:47 2025 GMT Not After : Aug 14 05:14:47 2025 GMT Subject: CN=68943647-f26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:d1:c7:13:15:35:1a:e6:9d:34:01:c1:79: 3c:9e:aa:1b:d3:02:7e:6d:44:48:49:43:e7:76:24: d6:ed:23:ad:3b:c5:54:6f:aa:15:b2:7a:35:c9:02: f7:bd:81:85:a5:07:e4:42:cd:16:09:10:7b:f3:74: 5b:70:91:20:76:53:2c:8b:3f:dc:fd:4c:de:cb:d2: a6:b6:36:6f:58:90:c0:d7:6b:47:c9:de:7f:ea:a1: 2a:32:70:30:e7:29:63:26:de:2b:6d:ec:17:29:e5: 6c:9b:e4:dc:39:41:93:43:b4:ac:4b:3b:c2:b9:a4: bd:07:84:8c:e5:a5:cb:c4:8d:89:13:c0:8d:ac:51: 2e:ac:2a:63:0a:18:d7:2e:55:07:56:6f:59:91:d1: 16:cf:cf:c2:3f:1b:09:3f:3b:a3:84:d8:09:41:86: d6:9b:9d:23:50:a7:19:b5:9b:72:2e:23:c0:60:20: b5:22:35:f6:45:59:d0:a4:aa:0a:04:0c:07:08:8c: 91:25:53:ef:85:5a:58:3e:74:3e:63:0b:cb:c5:98: 83:c0:d4:be:5c:1d:55:8c:00:8a:c3:68:83:c1:50: 95:c8:af:4b:22:41:c0:b6:cd:4b:24:0e:3d:56:d0: 42:e5:d8:db:40:5b:f4:86:fa:4a:7b:cc:29:b5:4d: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:05:42:9B:93:64:19:70:ED:47:FA:B5:EE:6A:75:28:A8:1D:0C X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9d:e7:c3:8a:8e:40:52:a7:6b:e1:5d:92:b4:b8:28:93:a8: a4:c9:7f:fa:8a:ca:56:01:e6:28:e7:d0:4d:b1:fc:f5:bf:8e: 11:80:e5:f3:a9:a5:1e:e5:ff:86:e4:6e:f7:ed:f2:cd:b5:cf: 72:0d:43:21:cb:23:a1:76:19:9a:8c:a8:c5:36:85:56:34:9e: 5a:5d:6b:3c:3a:31:7a:3a:22:bc:73:40:5c:ec:69:7e:a3:7d: 72:c9:3c:78:99:f1:d2:c9:3d:57:7c:77:26:ae:69:4c:23:e5: d2:16:2a:fa:03:35:ce:0f:b2:30:15:79:15:f0:d2:9e:6b:2f: 3d:83:8c:d3:78:19:38:26:6c:7e:b3:b1:87:28:c8:de:7d:03: af:97:a2:5d:9c:ab:a9:3e:ac:29:86:4b:5a:75:d0:57:13:ad: c1:f7:b5:42:60:f4:7b:2f:8f:9a:09:ce:d2:51:4a:58:0e:fb: e3:af:2d:4b:24:ac:13:7a:24:7b:55:f6:53:f5:ef:22:93:63: 42:d3:85:e8:6d:5c:f0:56:b9:e2:fa:f6:e2:f6:03:2f:4b:55: ea:2d:f1:be:3a:5f:8e:40:c7:fd:10:97:ee:03:63:64:98:6e: 76:0f:90:b6:b6:24:ae:8b:2a:fe:5e:8b:0e:53:a0:ad:32:f9: 59:7d:d6:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjUwODA3MDUxNDQ3WhcNMjUwODE0MDUxNDQ3WjAYMRYwFAYD VQQDEw02ODk0MzY0Ny1mMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hbRxxMVNRrmnTQBwXk8nqob0wJ+bURISUPndiTW7SOtO8VUb6oVsno1yQL3 vYGFpQfkQs0WCRB783RbcJEgdlMsiz/c/Uzey9KmtjZvWJDA12tHyd5/6qEqMnAw 5yljJt4rbewXKeVsm+TcOUGTQ7SsSzvCuaS9B4SM5aXLxI2JE8CNrFEurCpjChjX LlUHVm9ZkdEWz8/CPxsJPzujhNgJQYbWm50jUKcZtZtyLiPAYCC1IjX2RVnQpKoK BAwHCIyRJVPvhVpYPnQ+YwvLxZiDwNS+XB1VjACKw2iDwVCVyK9LIkHAts1LJA49 VtBC5djbQFv0hvpKe8wptU2XTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO47BUKb k2QZcO1H+rXuanUoqB0MMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5 eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGnefDio5AUqdr4V2StLgok6ikyX/6ispWAeYo59BNsfz1v44RgOXz qaUe5f+G5G737fLNtc9yDUMhyyOhdhmajKjFNoVWNJ5aXWs8OjF6OiK8c0Bc7Gl+ o31yyTx4mfHSyT1XfHcmrmlMI+XSFir6AzXOD7IwFXkV8NKeay89g4zTeBk4Jmx+ s7GHKMjefQOvl6JdnKupPqwphktaddBXE63B97VCYPR7L4+aCc7SUUpYDvvjry1L JKwTeiR7VfZT9e8ik2NC04XobVzwVrni+vbi9gMvS1XqLfG+Ol+OQMf9EJfuA2Nk mG52D5C2tiSuiyr+XosOU6CtMvlZfdZ0 -----END CERTIFICATE-----Generated at Fri Aug 8 19:23:54 2025 by rpki-client