$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: fSAGyeodIWUzyW54MbtY7sbvuuYh9w5nWF863KMy2LI= Subject key identifier: D4:75:6F:F7:3A:A5:15:F5:39:DD:10:88:E5:6D:35:D2:DD:CF:73:F3 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 54 Signing time: Sat 19 Jul 2025 07:34:47 +0000 Manifest this update: Sat 19 Jul 2025 07:34:46 +0000 Manifest next update: Sat 26 Jul 2025 07:34:46 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: hLxScp/csftyviuVCYB/78pi15chj395YXEjGOGT9Do=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: KNC2/s+vZ/9r775F1mGNGMou3oGOdH7k+vpChxT9cqQ=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: zMJUwcQ85fc9WyQBZ4Df3FrM+qiFXLoVLbfqvgsrYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Jul 19 07:34:46 2025 GMT Not After : Jul 26 07:34:46 2025 GMT Subject: CN=687b4a96-96f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:4e:9f:ce:66:2d:b7:63:a7:97:f2:5c:99: 4b:c4:b7:3f:f8:6b:67:f9:18:73:ea:c7:6e:50:fc: 03:9f:00:62:e9:99:e4:5f:76:7d:41:26:a8:b3:6b: 9a:ec:11:16:d7:d6:6f:de:31:1d:68:79:af:1f:26: 58:ff:fd:2b:52:a6:f8:54:39:d6:a7:59:1f:62:12: de:e5:f7:a6:5c:16:22:bd:6f:ef:7f:95:71:6b:31: 3a:dd:24:72:68:d3:a5:34:cd:ed:32:ac:a7:5a:9f: 92:a5:3e:8e:76:8d:e1:69:54:0d:99:30:8b:6c:a8: 7e:90:52:1e:6c:e5:09:56:60:7b:ef:81:38:7a:0c: 79:67:7b:2d:e6:e4:bc:39:93:0c:78:fb:18:58:0e: 49:e5:2c:2e:42:c0:2c:55:5c:90:ff:fb:b2:d2:f5: 90:d8:f3:ce:6e:24:44:53:70:42:fb:d7:9c:8d:b7: e7:9d:c7:97:ef:d4:44:5b:84:0d:28:df:af:72:0c: 83:80:08:d4:3f:af:b3:c9:4b:9b:4d:60:af:0e:56: ac:31:3c:c1:a7:4d:e5:07:a8:38:84:d7:c7:f4:60: 44:c3:f6:55:a4:dc:98:4f:07:b2:87:cc:cb:41:eb: 2d:d4:41:10:99:14:cf:3a:e0:44:e3:4a:af:ef:14: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:6F:F7:3A:A5:15:F5:39:DD:10:88:E5:6D:35:D2:DD:CF:73:F3 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f0:56:1f:bc:38:f1:c3:e9:76:05:da:71:ca:7f:09:71:ee: e5:4a:42:9a:7d:10:48:f0:82:dc:1b:6b:27:b1:e3:1c:cd:8a: 13:e8:8d:73:3c:ca:a2:97:91:a5:74:c3:64:dd:4e:14:f5:0a: 1b:83:e2:15:71:e7:90:fc:00:0a:b8:66:85:4e:66:19:05:fc: c0:fa:37:ac:aa:62:44:b6:0d:96:36:0f:02:a6:b4:ed:9c:f4: b4:d0:61:49:0c:ce:ef:e0:f3:ee:f9:11:22:f0:ee:76:b6:d8: 80:d3:7d:5b:41:b4:92:37:46:cd:79:42:b1:9b:14:80:a6:79: 1f:5c:2d:c1:45:82:0b:3f:03:56:29:2d:30:e2:58:ec:3b:5e: 31:b7:cb:08:56:23:ba:d0:6d:b1:72:4d:56:99:96:69:22:70: ff:6f:03:b0:b7:21:75:f8:16:e0:3d:e2:32:46:fa:ee:82:46: 1b:17:27:40:de:89:7a:33:51:f0:86:fd:55:60:b4:d4:df:74: 13:c1:23:cb:42:86:b0:4e:04:54:a5:82:2e:75:15:13:01:d6: e3:6c:db:37:1e:5d:dc:bf:b0:9a:ff:59:4c:b9:3b:e8:91:e8: b2:75:5f:0a:87:99:c0:ff:17:97:20:80:cf:ab:c0:ed:bc:2f: d8:10:06:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA3MTkwNzM0NDZaFw0yNTA3MjYwNzM0NDZaMBgxFjAUBgNV BAMTDTY4N2I0YTk2LTk2ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4O06fzmYtt2Onl/JcmUvEtz/4a2f5GHPqx25Q/AOfAGLpmeRfdn1BJqiza5rs ERbX1m/eMR1oea8fJlj//StSpvhUOdanWR9iEt7l96ZcFiK9b+9/lXFrMTrdJHJo 06U0ze0yrKdan5KlPo52jeFpVA2ZMItsqH6QUh5s5QlWYHvvgTh6DHlney3m5Lw5 kwx4+xhYDknlLC5CwCxVXJD/+7LS9ZDY885uJERTcEL715yNt+edx5fv1ERbhA0o 369yDIOACNQ/r7PJS5tNYK8OVqwxPMGnTeUHqDiE18f0YETD9lWk3JhPB7KHzMtB 6y3UQRCZFM864ETjSq/vFEavAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1HVv9zql FfU53RCI5W010t3Pc/MwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXwVh+8OPHD6XYF2nHKfwlx7uVKQpp9EEjwgtwbayex4xzNihPojXM8 yqKXkaV0w2TdThT1ChuD4hVx55D8AAq4ZoVOZhkF/MD6N6yqYkS2DZY2DwKmtO2c 9LTQYUkMzu/g8+75ESLw7na22IDTfVtBtJI3Rs15QrGbFICmeR9cLcFFggs/A1Yp LTDiWOw7XjG3ywhWI7rQbbFyTVaZlmkicP9vA7C3IXX4FuA94jJG+u6CRhsXJ0De iXozUfCG/VVgtNTfdBPBI8tChrBOBFSlgi51FRMB1uNs2zceXdy/sJr/WUy5O+iR 6LJ1XwqHmcD/F5cggM+rwO28L9gQBkk= -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:28 2025 by rpki-client