$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: PRhWY4UumR/ZoyQZzphmOdKW4UWRa0PQN0HO5YTCbmE= Subject key identifier: C3:9C:9C:1A:9B:09:81:05:27:C8:89:9C:5C:1E:B1:15:92:94:FA:5E Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 0A Signing time: Tue 05 Aug 2025 08:50:55 +0000 Manifest this update: Tue 05 Aug 2025 08:50:55 +0000 Manifest next update: Tue 12 Aug 2025 08:50:55 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: P1GK/PmTeu7VizYl/HBwKm2x/MjN9jNtvk1HJ6zRDE4=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: 2Z7ZXOjsrVXv6QpvLW3sNTYWE2LGQXJRgdUTVxtlGsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Aug 5 08:50:55 2025 GMT Not After : Aug 12 08:50:55 2025 GMT Subject: CN=6891c5ef-f1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:a4:2a:94:d2:2b:79:7d:26:3d:60:07:74: 7f:97:82:28:32:8e:f8:43:83:ca:4b:cf:8c:3c:ca: 9e:f5:52:71:e3:2f:99:0b:cb:2e:e1:07:36:2d:26: bd:ba:c0:5e:8d:fe:93:4b:db:9d:c5:b5:4c:8d:ec: c1:f4:bc:21:3c:58:91:7b:37:06:7d:23:40:3a:bc: 0c:5e:cd:de:ff:27:82:b0:01:b9:63:39:02:5a:5f: 62:a2:f4:5b:61:85:cb:cf:ed:6b:42:e4:22:6e:da: 6f:ad:be:79:a2:ca:f2:50:14:b7:27:12:ee:b6:39: 83:f4:91:9a:78:dd:a2:39:1e:b2:31:5c:79:d0:a3: 87:25:85:ab:f6:00:fd:53:df:f1:0d:c4:1a:15:33: 37:b8:4e:da:36:06:66:25:a3:96:81:e6:fb:4e:ba: 84:29:47:1b:01:1e:41:aa:b7:26:02:7b:82:cd:73: 13:b6:63:b2:aa:3b:88:7a:8a:f2:30:b7:9d:be:e8: 33:ab:13:ef:29:40:a1:60:bf:69:d6:c9:77:d6:92: 17:11:f9:9a:80:7d:da:f0:8e:47:1b:f9:ed:ad:2e: ea:96:5b:33:7a:92:8e:94:ef:37:c4:27:40:76:5c: a0:c6:27:47:33:76:9f:bb:83:24:86:a3:42:7b:fb: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9C:9C:1A:9B:09:81:05:27:C8:89:9C:5C:1E:B1:15:92:94:FA:5E X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:41:25:4a:77:5b:18:ad:6b:c1:d4:41:88:cb:e5:dc:87:4a: ca:17:f3:0b:df:12:3b:80:fa:99:1f:ba:07:44:5e:8d:69:0f: 39:32:4c:00:26:03:75:9f:44:ec:66:ef:3a:b0:17:a8:59:28: 80:0b:32:db:7f:7a:cb:5a:1e:aa:5e:54:10:0d:e6:3a:f7:d0: 64:9e:72:f9:d3:d5:78:4d:8d:71:34:ef:a6:99:e0:9e:20:c9: 30:00:6e:c8:bd:22:ec:f6:87:dd:6e:c8:75:8a:c0:a4:e6:9b: cb:a6:a2:88:6c:1c:a6:9b:44:e4:0a:bf:65:fb:a4:77:94:05: 11:52:8b:f6:80:d6:9e:41:09:6b:f3:d7:4d:08:0c:f7:30:5f: 13:92:a1:01:33:dd:3c:9c:46:17:94:69:e5:9a:0b:38:89:f9: 37:62:84:04:f9:7d:1d:52:3f:21:5c:1a:fc:a0:39:f5:36:a9: 2f:68:bb:9c:b9:44:3f:0a:09:16:7c:c1:99:bd:1f:d1:49:28: 0f:92:2d:72:2d:e8:63:9b:4a:fc:f2:f0:9d:71:91:09:bb:0d: 16:98:f0:5e:10:70:f9:e1:8f:f2:89:a7:82:9a:b8:e5:32:9b: 57:07:16:7f:34:c0:2a:43:d7:41:7d:ad:e2:10:bf:89:b5:62: 7d:f1:30:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUVENTExMC8GA1UEBRMoNjY3ODE3OUE1REE4RTVFOTFFN0Q5RERGQzlGRjVCMzU0 M0VENEQ3NDAeFw0yNTA4MDUwODUwNTVaFw0yNTA4MTIwODUwNTVaMBgxFjAUBgNV BAMTDTY4OTFjNWVmLWYxYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkl6QqlNIreX0mPWAHdH+XgigyjvhDg8pLz4w8yp71UnHjL5kLyy7hBzYtJr26 wF6N/pNL253FtUyN7MH0vCE8WJF7NwZ9I0A6vAxezd7/J4KwAbljOQJaX2Ki9Fth hcvP7WtC5CJu2m+tvnmiyvJQFLcnEu62OYP0kZp43aI5HrIxXHnQo4clhav2AP1T 3/ENxBoVMze4Tto2BmYlo5aB5vtOuoQpRxsBHkGqtyYCe4LNcxO2Y7KqO4h6ivIw t52+6DOrE+8pQKFgv2nWyXfWkhcR+ZqAfdrwjkcb+e2tLuqWWzN6ko6U7zfEJ0B2 XKDGJ0czdp+7gySGo0J7+ztzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw5ycGpsJ gQUnyImcXB6xFZKU+l4wHwYDVR0jBBgwFoAUZngXml2o5ekefZ3fyf9bNUPtTXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRUQ1L0FGQTQ2NDY0Njcy RjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5nWG1sMm81ZWtlZlozZnlmOWJOVVB0VFhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RUQ1L0FGQTQ2NDY0NjcyRjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVr ZWZaM2Z5ZjliTlVQdFRYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABJBJUp3Wxita8HUQYjL5dyHSsoX8wvfEjuA+pkfugdEXo1pDzkyTAAm A3WfROxm7zqwF6hZKIALMtt/estaHqpeVBAN5jr30GSecvnT1XhNjXE076aZ4J4g yTAAbsi9Iuz2h91uyHWKwKTmm8umoohsHKabROQKv2X7pHeUBRFSi/aA1p5BCWvz 100IDPcwXxOSoQEz3TycRheUaeWaCziJ+TdihAT5fR1SPyFcGvygOfU2qS9ou5y5 RD8KCRZ8wZm9H9FJKA+SLXIt6GObSvzy8J1xkQm7DRaY8F4QcPnhj/KJp4KauOUy m1cHFn80wCpD10F9reIQv4m1Yn3xMG4= -----END CERTIFICATE-----Generated at Wed Aug 6 11:21:02 2025 by rpki-client