$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: jTlPa3hPhgVyia36a31qIpkA15kp62RP6li5sfnbh1c= Subject key identifier: 2D:CC:E1:28:76:40:93:FA:13:C6:DD:05:9D:1B:DA:25:7C:6E:05:8A Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 112C Signing time: Sun 20 Jul 2025 17:17:31 +0000 Manifest this update: Sun 20 Jul 2025 17:17:31 +0000 Manifest next update: Sun 27 Jul 2025 17:17:31 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: uD/tJv33t5GnuUvbddG1Y7311RhqiD+uCPOkPrVcdRA=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4404 (0x1134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Jul 20 17:17:31 2025 GMT Not After : Jul 27 17:17:31 2025 GMT Subject: CN=687d24ab-40c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:85:11:28:68:db:69:d4:bf:59:e4:ad:ef: aa:7f:fb:67:2f:66:78:10:a7:5c:f3:01:03:62:46: 8c:25:0c:0d:17:c2:ef:f2:21:d4:8c:da:11:8e:70: f3:6c:30:64:bb:1b:d6:84:ac:d8:8c:15:7b:37:6c: 86:f0:61:e1:32:6d:94:0d:9b:78:53:d4:64:f0:b8: 82:ed:1d:36:f0:44:ce:38:64:07:53:8a:5d:78:bb: ca:8e:95:d2:21:85:5f:24:af:70:9b:a0:59:e9:25: ac:3f:cf:12:61:c7:f7:00:2a:72:93:af:2e:39:19: 03:bf:4e:82:fb:cf:40:17:23:5c:4c:8b:c7:08:11: 04:97:02:dc:39:1a:80:52:bf:01:26:74:7a:b0:77: 1d:ae:56:21:55:9d:94:1e:90:64:83:f2:9b:ff:8d: 36:07:a3:64:e6:4e:4f:85:34:a1:be:43:41:0a:b2: d8:67:92:b8:15:a1:56:99:2e:55:49:9c:dc:4e:d2: 26:44:ee:34:05:a9:10:5e:3c:eb:9e:37:57:95:92: 78:ec:07:08:d7:ce:ad:f0:4c:b9:d7:5b:ee:68:b2: a5:b1:5b:cf:aa:0b:f3:7b:9a:cf:f4:db:bd:f7:91: a5:d7:09:11:24:f4:cc:2d:3b:e5:82:61:9e:12:36: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CC:E1:28:76:40:93:FA:13:C6:DD:05:9D:1B:DA:25:7C:6E:05:8A X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1a:8f:92:49:c7:b1:e8:56:dc:be:6f:50:1a:71:2e:f9:3c: 13:69:4d:a8:8a:05:7b:c7:f7:46:fa:56:af:30:dd:a6:a4:2d: 6f:35:08:1c:2c:50:67:28:b5:0d:24:cb:33:88:87:9f:c9:f1: c5:a2:a1:c2:cc:02:1a:5b:7b:9c:88:01:7f:fe:77:c8:6a:8b: 0d:87:05:d7:c5:ed:bd:94:bf:c2:28:7b:d3:38:a3:fd:c9:d8: 01:64:1f:5a:d6:1b:10:4b:cd:e5:8e:6c:4b:69:3e:e2:24:3d: 09:7d:ff:60:fd:52:9c:35:0d:c1:f4:01:e6:b7:03:c9:b5:49: 4d:00:ef:12:63:93:df:cb:e9:6e:f2:ab:a3:02:43:b9:08:b9: 44:8c:47:46:49:a2:bc:aa:2d:94:21:e1:b7:b0:5b:3d:03:7c: fe:39:a6:68:3e:26:28:2a:0e:c1:7a:4c:d2:77:c0:fa:66:bb: 6b:54:e5:e0:9c:63:eb:9b:a0:4f:c6:0d:cb:1c:06:bc:b6:f1: cc:92:67:fd:c3:80:0c:68:c4:30:d4:d8:83:36:4a:21:78:e1: 77:8a:56:8e:a3:fd:bf:91:d9:eb:c2:ed:84:d2:d8:c5:ba:90: 31:3a:60:98:a6:67:74:2a:df:8b:40:b4:6e:f0:21:af:20:ad: 96:02:e3:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUwNzIwMTcxNzMxWhcNMjUwNzI3MTcxNzMxWjAYMRYwFAYD VQQDEw02ODdkMjRhYi00MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPeFESho22nUv1nkre+qf/tnL2Z4EKdc8wEDYkaMJQwNF8Lv8iHUjNoRjnDz bDBkuxvWhKzYjBV7N2yG8GHhMm2UDZt4U9Rk8LiC7R028ETOOGQHU4pdeLvKjpXS IYVfJK9wm6BZ6SWsP88SYcf3ACpyk68uORkDv06C+89AFyNcTIvHCBEElwLcORqA Ur8BJnR6sHcdrlYhVZ2UHpBkg/Kb/402B6Nk5k5PhTShvkNBCrLYZ5K4FaFWmS5V SZzcTtImRO40BakQXjzrnjdXlZJ47AcI186t8Ey511vuaLKlsVvPqgvze5rP9Nu9 95Gl1wkRJPTMLTvlgmGeEjZWRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3M4Sh2 QJP6E8bdBZ0b2iV8bgWKMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUGo+SScex6Fbcvm9QGnEu+TwTaU2oigV7x/dG+lavMN2mpC1vNQgc LFBnKLUNJMsziIefyfHFoqHCzAIaW3uciAF//nfIaosNhwXXxe29lL/CKHvTOKP9 ydgBZB9a1hsQS83ljmxLaT7iJD0Jff9g/VKcNQ3B9AHmtwPJtUlNAO8SY5Pfy+lu 8qujAkO5CLlEjEdGSaK8qi2UIeG3sFs9A3z+OaZoPiYoKg7BekzSd8D6ZrtrVOXg nGPrm6BPxg3LHAa8tvHMkmf9w4AMaMQw1NiDNkoheOF3ilaOo/2/kdnrwu2E0tjF upAxOmCYpmd0Kt+LQLRu8CGvIK2WAuPo -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:40 2025 by rpki-client