$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: WB8TbOos6PmTBXrbPZhf5IiRuyScIuVdQWiTmem4E3c= Subject key identifier: 4F:A4:F4:5F:BB:92:DA:CB:56:27:04:23:D5:A2:84:B8:FC:15:17:3E Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 0235 Signing time: Tue 05 Aug 2025 02:37:35 +0000 Manifest this update: Tue 05 Aug 2025 02:37:35 +0000 Manifest next update: Tue 12 Aug 2025 02:37:35 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: D1BdDI6bqSy5noczwlgQcxIUl9vteU9vwW1JnVBJtVw=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 51QAmttT+orS5nLye3GO8kzrs6tbUA9omCigEUTINK8=) 3: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: m/lCeZPbzI4IUTU7gNKG3Pc87gLIw4AUvkAgjskQsFI=) 4: E2C0769466F311F0BAB87F38C4F9AE02.roa (hash: 5zWVc3wXqfB69czjTeeDsjWlSnO6nNwU6Knu/X1TBzA=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: xDTqUqT1kIUmz8RtVDNj1figux9es0r/Ivvx61/pp9g=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: JI7/VMpNwJi4JTM3hdmA2otFXIkGdb1UEZF29e+5G6g=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: SYChnCFDXmbiMMIWGfC0umDJGm3jePYzq4pHvcNe8VM=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: Lj70ItgANJi9RJPk81TbBsVkkeLlGArDAr9zaonHm8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Aug 5 02:37:35 2025 GMT Not After : Aug 12 02:37:35 2025 GMT Subject: CN=68916e6f-09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:32:3b:f7:35:6d:c9:63:11:bd:68:d1:58: c0:64:f1:d4:59:c0:ad:b1:19:df:91:39:de:2a:a0: 18:53:f9:59:dd:b1:86:94:4f:f8:e0:fe:92:e3:f9: 2a:91:ff:fb:00:8e:b0:b1:73:ab:0f:ff:5e:45:97: 38:9c:b8:86:b4:fa:de:97:8d:76:7a:35:b2:9c:b6: 1a:42:08:5e:fe:38:1a:78:c1:3d:88:e7:88:5a:c1: 0c:a5:8c:53:ce:ee:8a:28:36:7c:b4:1d:dd:b5:16: ba:c0:8b:c0:ae:d8:07:cb:e8:30:f8:f2:78:17:cc: 66:8a:10:fc:68:2e:02:48:39:15:4d:11:b8:0b:47: 0c:0b:3b:ae:0b:35:7a:a1:4b:95:6c:23:08:fd:65: e1:e7:a8:08:66:bb:51:df:90:ae:61:b5:56:d9:85: b9:5b:f4:c9:31:f6:bf:09:08:1f:39:0e:ec:d6:ce: e9:a4:36:cf:ad:d5:aa:a2:80:33:5b:7e:7b:bf:65: 77:a9:4f:3d:0f:1c:b8:b7:ca:ed:65:ce:a9:80:ae: b9:89:0d:25:e4:51:dd:8b:01:c1:a4:33:fa:68:73: 9a:a3:60:6d:fa:7a:8f:19:c3:05:11:d7:03:0f:eb: aa:0d:44:b8:63:85:2d:35:f9:a5:3e:54:50:f1:c2: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:F4:5F:BB:92:DA:CB:56:27:04:23:D5:A2:84:B8:FC:15:17:3E X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a9:f6:e9:7e:3a:60:bc:38:35:cc:55:71:cc:60:da:d0:18: fe:6f:f7:aa:96:7c:40:bf:ee:33:ba:09:f9:fe:5f:aa:0e:f1: f0:b3:54:22:f3:e9:07:60:0b:14:28:e9:14:0d:ee:b7:62:d1: 67:f3:3f:4d:46:cb:f0:5d:31:09:90:2a:d5:68:8f:de:b8:39: 65:85:9d:30:57:75:13:01:ef:dd:64:49:cb:49:fa:9a:21:d1: 2e:ca:a9:31:b6:fe:cb:a4:d3:3c:60:e9:3e:e8:ed:af:67:de: c5:0f:7a:27:89:b4:43:72:1d:17:a6:53:a2:c5:78:ef:a1:10: 18:37:10:7c:fe:aa:40:54:12:57:a4:53:91:aa:e8:06:2f:5b: b4:b7:86:f2:fb:e9:26:85:ec:ed:61:4f:60:72:57:7c:76:92: 5f:c4:13:d6:0b:c8:ed:d4:ce:bb:4b:ed:a5:38:d0:82:3e:6c: 32:cf:a6:bf:65:e0:8a:0c:d5:c5:62:84:c6:04:36:87:99:c2: bf:81:25:f5:2f:d1:33:aa:98:92:0b:97:7d:7a:f3:c6:11:17: d3:fd:f3:f1:2e:f8:b1:82:ac:8b:a1:11:7c:f4:84:f1:b1:9a: ee:fc:2e:df:e2:3c:f3:2b:c1:05:6e:09:dd:da:45:a3:fe:9b: 4b:33:f0:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwODA1MDIzNzM1WhcNMjUwODEyMDIzNzM1WjAYMRYwFAYD VQQDEw02ODkxNmU2Zi0wOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpgyO/c1bcljEb1o0VjAZPHUWcCtsRnfkTneKqAYU/lZ3bGGlE/44P6S4/kq kf/7AI6wsXOrD/9eRZc4nLiGtPrel412ejWynLYaQghe/jgaeME9iOeIWsEMpYxT zu6KKDZ8tB3dtRa6wIvArtgHy+gw+PJ4F8xmihD8aC4CSDkVTRG4C0cMCzuuCzV6 oUuVbCMI/WXh56gIZrtR35CuYbVW2YW5W/TJMfa/CQgfOQ7s1s7ppDbPrdWqooAz W357v2V3qU89Dxy4t8rtZc6pgK65iQ0l5FHdiwHBpDP6aHOao2Bt+nqPGcMFEdcD D+uqDUS4Y4UtNfmlPlRQ8cJCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+k9F+7 ktrLVicEI9WihLj8FRc+MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcqfbpfjpgvDg1zFVxzGDa0Bj+b/eqlnxAv+4zugn5/l+qDvHws1Qi 8+kHYAsUKOkUDe63YtFn8z9NRsvwXTEJkCrVaI/euDllhZ0wV3UTAe/dZEnLSfqa IdEuyqkxtv7LpNM8YOk+6O2vZ97FD3onibRDch0XplOixXjvoRAYNxB8/qpAVBJX pFORqugGL1u0t4by++kmheztYU9gcld8dpJfxBPWC8jt1M67S+2lONCCPmwyz6a/ ZeCKDNXFYoTGBDaHmcK/gSX1L9EzqpiSC5d9evPGERfT/fPxLvixgqyLoRF89ITx sZru/C7f4jzzK8EFbgnd2kWj/ptLM/BA -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:55 2025 by rpki-client