$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: fia4/Ti4har0AhM8YOtOTNAiZ1TybBpbwDZ4C5EQJYw= Subject key identifier: A7:6E:CC:A6:F9:AD:A8:3D:AB:00:65:18:C1:3A:B8:31:92:38:0B:7D Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0D1B Signing time: Fri 18 Jul 2025 18:13:06 +0000 Manifest this update: Fri 18 Jul 2025 18:13:05 +0000 Manifest next update: Fri 25 Jul 2025 18:13:05 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: 9NNU276bvbkK/gEgc2XJF/QFETaPXsKqTkmAL1VV9Ig=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: zkAhSZ57x5i2z1ecY4hViVs+riusX3XK2gSVsFUEBsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Jul 18 18:13:05 2025 GMT Not After : Jul 25 18:13:05 2025 GMT Subject: CN=687a8eb1-ec9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:ec:8f:ce:77:37:95:b2:ce:fd:42:ca:47: 73:d9:79:7b:2e:e1:4c:40:9e:14:b5:ad:bc:4f:b9: 00:16:9d:81:3a:1f:5a:64:15:54:9e:a1:29:0a:8e: d4:32:10:c5:dd:16:3f:c0:a9:b1:98:83:37:50:31: b9:16:a1:00:8f:61:c0:d9:e0:9c:7d:53:49:61:48: a7:28:27:04:4a:c0:8d:37:bb:d8:9f:56:6a:24:fb: 65:a4:22:dc:af:35:c3:4b:b0:c6:10:d1:62:8e:d1: d4:0d:aa:d9:66:36:2f:59:96:25:08:dd:94:94:77: 93:07:b6:85:a8:5f:fd:e0:dc:3d:81:f7:ab:3a:96: eb:a7:7a:ca:6c:87:ed:44:be:89:46:7b:8b:79:83: 02:b9:2c:3c:1a:9c:ca:a1:73:d3:4d:19:30:67:db: dd:b2:d4:1b:bb:c5:20:00:8e:a0:93:a7:10:fd:0e: 52:e2:4d:03:09:7d:91:fe:ab:fd:ac:18:04:61:d4: 4e:6a:e3:10:78:70:84:5b:5a:e6:2c:98:bf:53:b9: 76:0b:0c:bf:b0:84:7e:b1:a1:55:4d:8e:77:59:ec: c8:96:0b:25:6b:54:d1:d9:10:07:ad:10:9f:4d:cf: 2c:cf:63:60:ed:8b:d0:b2:fc:55:e6:79:30:8e:a1: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6E:CC:A6:F9:AD:A8:3D:AB:00:65:18:C1:3A:B8:31:92:38:0B:7D X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:eb:b8:2d:23:a1:a1:fb:f9:70:de:ef:19:59:cf:44:ba:75: d9:27:32:07:d4:2c:56:6d:7c:44:96:fd:57:0e:cc:c9:a5:a7: 55:3c:95:8c:17:46:a9:7e:71:43:6d:9e:33:b1:7f:d6:9d:3c: ba:bf:bf:fe:86:89:cb:55:46:37:90:3c:bc:c3:aa:19:1e:a2: c5:6a:62:5a:25:91:9d:9e:d9:ef:8e:b3:a8:82:fb:5d:f1:7c: 7e:43:6f:7f:9d:ae:aa:16:7d:b3:b6:cd:e1:8e:66:b0:80:c7: bc:f3:96:55:37:7c:10:5d:88:5f:df:81:be:46:af:87:71:31: d9:5d:41:1c:e0:f7:3d:f9:61:59:2a:98:bc:a8:bb:58:b6:fe: 10:1b:8b:45:7c:e4:57:0c:19:ba:cc:22:8d:de:4f:37:2c:d0: 4b:2d:8a:bf:75:27:2f:e5:3c:44:60:e2:73:7b:4f:79:df:fb: fc:54:58:d9:14:f1:d1:ae:23:14:cd:8c:2d:a1:82:c6:74:35: 96:6f:bd:77:5d:64:89:f3:eb:2e:3a:a3:61:f3:01:c9:b1:b4: 4d:fc:40:80:58:e2:75:78:d0:d7:75:8e:59:d6:a3:3e:32:fb: 7c:58:cd:7f:d4:1f:97:47:0e:f5:02:99:9c:6d:e3:f4:44:dd: 8c:2f:29:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjUwNzE4MTgxMzA1WhcNMjUwNzI1MTgxMzA1WjAYMRYwFAYD VQQDEw02ODdhOGViMS1lYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SHsj853N5Wyzv1Cykdz2Xl7LuFMQJ4Uta28T7kAFp2BOh9aZBVUnqEpCo7U MhDF3RY/wKmxmIM3UDG5FqEAj2HA2eCcfVNJYUinKCcESsCNN7vYn1ZqJPtlpCLc rzXDS7DGENFijtHUDarZZjYvWZYlCN2UlHeTB7aFqF/94Nw9gferOpbrp3rKbIft RL6JRnuLeYMCuSw8GpzKoXPTTRkwZ9vdstQbu8UgAI6gk6cQ/Q5S4k0DCX2R/qv9 rBgEYdROauMQeHCEW1rmLJi/U7l2Cwy/sIR+saFVTY53WezIlgsla1TR2RAHrRCf Tc8sz2Ng7YvQsvxV5nkwjqFO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKduzKb5 rag9qwBlGME6uDGSOAt9MB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC67gtI6Gh+/lw3u8ZWc9EunXZJzIH1CxWbXxElv1XDszJpadVPJWM F0apfnFDbZ4zsX/WnTy6v7/+honLVUY3kDy8w6oZHqLFamJaJZGdntnvjrOogvtd 8Xx+Q29/na6qFn2zts3hjmawgMe885ZVN3wQXYhf34G+Rq+HcTHZXUEc4Pc9+WFZ Kpi8qLtYtv4QG4tFfORXDBm6zCKN3k83LNBLLYq/dScv5TxEYOJze0953/v8VFjZ FPHRriMUzYwtoYLGdDWWb713XWSJ8+suOqNh8wHJsbRN/ECAWOJ1eNDXdY5Z1qM+ Mvt8WM1/1B+XRw71ApmcbeP0RN2MLyk2 -----END CERTIFICATE-----Generated at Sun Jul 20 08:00:40 2025 by rpki-client