$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: D9vzP4oKmOnKdntp4+3p+flPvP/jujWV4dEcwt6IYSM= Subject key identifier: 7C:02:1F:E7:57:DE:C7:6C:76:EC:E7:B6:05:3F:78:CE:7D:40:37:DD Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 041C Signing time: Sat 19 Jul 2025 01:09:48 +0000 Manifest this update: Sat 19 Jul 2025 01:09:48 +0000 Manifest next update: Sat 26 Jul 2025 01:09:48 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: /kE66dQ+LMHr73iJgzNOlSmnblRazTMZHe1djuY8uhg=) 2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=) 3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=) 5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Jul 19 01:09:48 2025 GMT Not After : Jul 26 01:09:48 2025 GMT Subject: CN=687af05c-a9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:e0:d9:da:ff:f0:84:32:5c:93:74:f3:7d: 5e:f8:ee:97:5f:7e:dd:3a:c1:d4:d5:28:a4:8c:74: 38:64:d4:da:7d:77:7d:c1:78:d0:31:6b:80:d6:80: 42:08:2a:7b:90:7e:2d:9d:36:5f:2c:72:8e:91:cf: 52:95:b6:c6:c3:51:c9:9e:33:26:6d:45:05:63:3b: 22:c4:07:0b:e2:7a:98:a0:ca:37:f7:d7:7c:c3:f4: e8:3a:65:66:5a:be:c9:4f:ab:15:1a:79:aa:b3:84: 13:ee:3d:79:95:f1:b8:4d:78:c0:b2:91:fe:fa:3a: c7:97:bc:1d:b1:87:74:78:21:9a:c2:b7:42:2a:79: 77:6e:41:63:0f:12:39:fa:5d:c1:67:1c:40:a7:ee: 06:0e:bb:05:4f:54:ca:86:78:3e:f3:51:0b:eb:8a: ef:c4:e9:36:b7:0f:42:b9:7d:cc:67:04:fb:17:ba: df:b0:80:e1:8d:81:63:17:14:37:fc:b3:63:5b:eb: 6e:22:ac:24:18:53:79:1a:84:cd:3d:cf:3a:9c:7d: f7:30:38:f2:f6:12:a8:0a:e6:f2:a7:f1:f7:d1:db: d2:17:5e:96:a2:88:bd:31:c1:0e:08:6d:37:31:80: 56:af:3e:70:61:9c:11:0a:56:5e:89:46:f5:6d:d2: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:02:1F:E7:57:DE:C7:6C:76:EC:E7:B6:05:3F:78:CE:7D:40:37:DD X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:dc:23:a7:07:36:6d:06:b9:3c:87:9f:b1:fe:69:9c:db:51: ae:e5:a0:cb:9c:a5:f9:f4:35:ad:42:06:40:5f:67:a1:00:97: 43:8b:69:86:e0:f9:e9:9a:17:c9:67:0c:4c:0b:d1:43:f7:d2: ae:a3:eb:f4:54:c4:f4:5e:4f:32:50:c9:7f:75:90:53:94:fd: 89:03:d9:94:97:e3:5c:23:b6:db:c2:d2:d8:ea:84:17:99:9c: 9d:57:e1:a4:49:84:cb:a2:55:2d:6a:4e:1a:4f:12:12:51:ca: d2:d6:2b:b8:5f:b6:75:98:62:47:3d:d4:28:6a:0c:93:52:7c: b6:9a:d3:64:0b:da:93:a4:24:d5:b8:27:d6:98:0f:44:61:f6: 70:22:ce:c2:5d:ec:1e:a2:d1:52:1f:9e:86:c0:7f:51:f6:05: 9d:97:fe:ad:c5:1e:b0:ec:62:bd:6b:ad:8b:0e:d1:35:60:7f: 1e:8c:95:68:1b:c1:17:a9:3a:93:7b:6e:10:b9:42:87:9c:9d: 39:0f:41:83:fb:da:56:c7:47:44:5d:df:dd:a3:47:48:93:06: 63:4d:85:3f:9f:0b:9d:5a:86:84:76:9c:02:d9:94:aa:7e:b5: 05:67:33:92:9c:55:68:ce:29:d8:ef:d1:2e:d8:e5:d0:78:b6: e3:a5:7d:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwNzE5MDEwOTQ4WhcNMjUwNzI2MDEwOTQ4WjAYMRYwFAYD VQQDEw02ODdhZjA1Yy1hOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eDg2dr/8IQyXJN0831e+O6XX37dOsHU1SikjHQ4ZNTafXd9wXjQMWuA1oBC CCp7kH4tnTZfLHKOkc9SlbbGw1HJnjMmbUUFYzsixAcL4nqYoMo399d8w/ToOmVm Wr7JT6sVGnmqs4QT7j15lfG4TXjAspH++jrHl7wdsYd0eCGawrdCKnl3bkFjDxI5 +l3BZxxAp+4GDrsFT1TKhng+81EL64rvxOk2tw9CuX3MZwT7F7rfsIDhjYFjFxQ3 /LNjW+tuIqwkGFN5GoTNPc86nH33MDjy9hKoCubyp/H30dvSF16Wooi9McEOCG03 MYBWrz5wYZwRClZeiUb1bdKEAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwCH+dX 3sdsduzntgU/eM59QDfdMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg3COnBzZtBrk8h5+x/mmc21Gu5aDLnKX59DWtQgZAX2ehAJdDi2mG 4PnpmhfJZwxMC9FD99Kuo+v0VMT0Xk8yUMl/dZBTlP2JA9mUl+NcI7bbwtLY6oQX mZydV+GkSYTLolUtak4aTxISUcrS1iu4X7Z1mGJHPdQoagyTUny2mtNkC9qTpCTV uCfWmA9EYfZwIs7CXeweotFSH56GwH9R9gWdl/6txR6w7GK9a62LDtE1YH8ejJVo G8EXqTqTe24QuUKHnJ05D0GD+9pWx0dEXd/do0dIkwZjTYU/nwudWoaEdpwC2ZSq frUFZzOSnFVozinY79Eu2OXQeLbjpX1U -----END CERTIFICATE-----Generated at Sun Jul 20 16:35:59 2025 by rpki-client