$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: hH3hCZeGoUmpFnKivendYkWuRvp5eL4uJrGsW+TLZBg= Subject key identifier: 3D:96:E3:F5:93:DF:33:D4:D0:12:2B:37:01:74:A9:F4:DE:2D:6D:46 Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 0914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 090B Signing time: Fri 18 Jul 2025 20:34:03 +0000 Manifest this update: Fri 18 Jul 2025 20:34:02 +0000 Manifest next update: Fri 25 Jul 2025 20:34:02 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: wJjr70TSjC/qWBK21LRpZ3fUXWUjV/MZIaH/gC3pu1c=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Jul 18 20:34:02 2025 GMT Not After : Jul 25 20:34:02 2025 GMT Subject: CN=687aafba-e746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:9b:29:89:5a:32:a4:c9:9e:46:bb:9b:76: 5f:52:ce:86:03:ba:40:85:5a:e6:73:64:1c:4a:41: f1:d3:6f:28:54:06:06:02:22:c7:10:39:0a:a2:ae: e9:62:1b:9f:d9:b2:0e:50:41:1e:f8:2b:47:ea:c3: d8:c3:a2:32:68:09:b4:dd:2b:19:70:7b:1d:87:d2: 7e:d7:b3:f5:5a:71:38:20:4a:92:1c:21:4d:e2:bb: 44:4d:1a:6b:5e:60:ed:d8:25:b5:29:6f:8c:06:95: a1:bf:0f:9d:7c:ea:11:97:cc:ce:ec:fc:a5:d0:a3: 23:71:3f:27:e6:18:05:88:6d:34:28:db:34:8f:e0: 52:6e:34:f4:20:1d:48:6c:c3:d8:4f:bc:58:e5:2a: 71:cb:c2:00:db:81:c3:c4:b4:2e:2f:13:8e:1c:27: 0c:a4:71:94:24:bf:78:25:ed:f4:65:d0:69:58:77: 7c:2c:75:8c:2d:a4:2b:f1:7f:6c:f0:8d:4f:63:d2: fc:66:84:22:6f:39:c6:87:97:8a:92:67:e8:45:80: 30:7d:99:d6:49:b4:1c:26:6b:1d:5a:56:71:25:65: 3c:c6:7d:7e:f8:76:cb:82:3a:10:13:06:bd:1a:5a: a7:d6:80:82:94:b7:05:7a:18:a1:09:cc:04:74:e3: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:96:E3:F5:93:DF:33:D4:D0:12:2B:37:01:74:A9:F4:DE:2D:6D:46 X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ba:80:32:b1:ce:6b:b4:18:ff:10:01:bf:00:d9:c7:11:a9: d0:eb:db:a9:1f:9f:d3:d4:23:6f:0f:8f:c5:0d:75:29:03:bc: 94:7d:32:da:a6:e1:6b:37:83:b0:e5:67:8a:6b:db:fe:e5:95: a9:79:39:8a:5e:fb:78:a4:20:07:fd:cc:90:81:52:6d:17:d9: cf:aa:31:12:7e:17:5e:0f:5d:4a:11:a5:fe:69:c0:c7:4e:33: 34:2d:9f:1a:1e:85:93:18:2b:44:9f:59:a4:1f:2b:f5:90:6b: 67:59:a8:2e:6c:66:d4:d3:fe:8f:eb:a0:9c:c7:fd:9a:27:68: 89:50:71:77:81:4a:7d:0d:3e:8c:c5:5c:72:2e:a6:bb:de:ea: fa:69:69:16:78:1b:6f:44:ea:db:1c:f3:de:90:3d:de:47:b4: 80:85:2c:a9:08:cd:eb:eb:f6:c9:f1:c8:8b:16:b6:af:39:cc: 39:e8:99:9d:89:c1:5e:cc:1f:b8:23:01:04:82:6c:8f:f8:fd: b8:b6:b8:65:4f:91:01:7a:27:0e:ef:d8:17:58:eb:4f:66:c0: d4:79:50:a8:eb:5e:a1:63:47:d3:fc:9a:88:f1:14:6b:ae:13: 84:2b:c8:a2:78:83:75:ed:d5:03:38:eb:2f:4c:e5:b7:25:5c: 0c:38:6c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwNzE4MjAzNDAyWhcNMjUwNzI1MjAzNDAyWjAYMRYwFAYD VQQDEw02ODdhYWZiYS1lNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXSbKYlaMqTJnka7m3ZfUs6GA7pAhVrmc2QcSkHx028oVAYGAiLHEDkKoq7p Yhuf2bIOUEEe+CtH6sPYw6IyaAm03SsZcHsdh9J+17P1WnE4IEqSHCFN4rtETRpr XmDt2CW1KW+MBpWhvw+dfOoRl8zO7Pyl0KMjcT8n5hgFiG00KNs0j+BSbjT0IB1I bMPYT7xY5Spxy8IA24HDxLQuLxOOHCcMpHGUJL94Je30ZdBpWHd8LHWMLaQr8X9s 8I1PY9L8ZoQibznGh5eKkmfoRYAwfZnWSbQcJmsdWlZxJWU8xn1++HbLgjoQEwa9 Glqn1oCClLcFehihCcwEdOPogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2W4/WT 3zPU0BIrNwF0qfTeLW1GMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiuoAysc5rtBj/EAG/ANnHEanQ69upH5/T1CNvD4/FDXUpA7yUfTLa puFrN4Ow5WeKa9v+5ZWpeTmKXvt4pCAH/cyQgVJtF9nPqjESfhdeD11KEaX+acDH TjM0LZ8aHoWTGCtEn1mkHyv1kGtnWagubGbU0/6P66Ccx/2aJ2iJUHF3gUp9DT6M xVxyLqa73ur6aWkWeBtvROrbHPPekD3eR7SAhSypCM3r6/bJ8ciLFravOcw56Jmd icFezB+4IwEEgmyP+P24trhlT5EBeicO79gXWOtPZsDUeVCo616hY0fT/JqI8RRr rhOEK8iieIN17dUDOOsvTOW3JVwMOGwT -----END CERTIFICATE-----Generated at Sun Jul 20 11:25:19 2025 by rpki-client