$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: gKh1Klzod2efyB45MboKqMErlQ/uD033RmPwz6qvW2Y= Subject key identifier: 4B:B9:1E:D6:40:3C:D2:9F:22:FD:A2:CD:0F:27:EB:9D:D0:22:DB:11 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C8B Signing time: Sun 20 Jul 2025 18:15:56 +0000 Manifest this update: Sun 20 Jul 2025 18:15:56 +0000 Manifest next update: Sun 27 Jul 2025 18:15:56 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: N/L8pN/T/1GDU5+KDfRwKFZUOCFpr2mqsJfBoHA0Qbo=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Jul 20 18:15:56 2025 GMT Not After : Jul 27 18:15:56 2025 GMT Subject: CN=687d325c-9adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:b1:93:cd:26:55:08:58:b3:11:c5:e4:2a: 4c:92:4e:eb:c7:94:44:41:7d:3b:c3:fb:37:8b:61: b7:25:d8:01:d1:1e:88:b2:1d:1c:e6:28:40:e2:df: 71:a5:13:f6:a8:24:7b:ed:31:53:f4:31:a8:92:50: 8e:d2:4e:a8:c2:2f:f8:8a:52:11:17:62:2c:65:05: 0b:da:e0:9f:b3:21:8b:35:1a:f2:92:21:8b:61:77: 41:43:89:83:39:c3:67:23:b9:ab:82:9f:bc:50:81: 31:83:90:f0:9b:2b:f4:7e:9c:0f:8d:30:ee:9e:05: 5d:63:b3:7a:9d:5e:63:aa:29:08:f0:b3:31:17:5f: f0:24:54:d7:50:c0:e8:2f:57:f0:53:f1:1a:34:fe: 68:4b:51:21:39:87:30:3e:ca:71:ce:a7:cd:d2:fb: 4c:aa:9a:4c:fc:33:db:40:79:a2:35:54:7f:7f:8b: e7:f8:d5:44:f2:c4:9b:c9:4f:17:4e:79:d5:06:76: e1:a4:bc:84:ec:93:72:48:df:61:b2:64:a7:40:46: 4d:13:cc:5a:e2:72:32:c6:2c:ca:77:fd:ca:a1:f3: c8:d2:bb:af:bb:e1:40:fb:4d:00:34:e7:4e:11:df: 1f:ff:fc:1e:a3:7a:d8:9a:7a:ee:14:6d:5b:fc:d7: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B9:1E:D6:40:3C:D2:9F:22:FD:A2:CD:0F:27:EB:9D:D0:22:DB:11 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0d:99:8e:cd:ff:f0:67:32:1d:ba:e5:95:05:7b:7b:ed:11: e9:5b:73:3f:21:ec:37:45:58:04:9f:09:c6:a0:79:dd:f7:3f: db:26:c0:6b:ec:d1:73:e1:4a:d4:19:9b:d2:40:63:e7:7c:b1: 7d:d8:17:57:5b:1c:08:f3:e0:04:ff:f6:db:64:82:6d:d2:8b: be:6d:95:42:4a:79:51:c4:06:fe:4c:d9:48:ee:e7:50:2b:ed: 3b:b4:60:70:60:b8:e0:02:fd:b2:55:7f:87:b8:7e:04:c5:33: 32:cb:a2:e5:2c:84:29:27:63:77:02:44:e1:de:92:c8:3e:bb: 8a:d7:d3:b6:b3:ef:3c:49:ae:ab:b0:04:ac:5f:90:60:4a:6c: 62:6f:a6:0b:c7:db:84:4b:72:c7:b1:3f:c5:e8:52:1e:0e:0a: bd:ba:ec:7f:29:a2:7d:36:ab:0d:70:74:87:a0:d3:96:25:17: 6c:09:01:4a:11:41:6f:39:3b:1c:86:8a:7f:dd:87:f4:b7:72: d0:85:b3:4e:6d:2c:72:3c:f8:93:ac:c6:a2:d7:d8:8b:94:7c: 84:d0:a4:f2:09:c6:39:84:73:a3:de:68:d5:0c:67:80:5b:f7: 3d:c6:eb:45:9e:1d:24:ff:d0:6e:7d:80:f0:83:fe:b0:e3:33: 0c:08:f1:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwNzIwMTgxNTU2WhcNMjUwNzI3MTgxNTU2WjAYMRYwFAYD VQQDEw02ODdkMzI1Yy05YWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4axk80mVQhYsxHF5CpMkk7rx5REQX07w/s3i2G3JdgB0R6Ish0c5ihA4t9x pRP2qCR77TFT9DGoklCO0k6owi/4ilIRF2IsZQUL2uCfsyGLNRrykiGLYXdBQ4mD OcNnI7mrgp+8UIExg5Dwmyv0fpwPjTDungVdY7N6nV5jqikI8LMxF1/wJFTXUMDo L1fwU/EaNP5oS1EhOYcwPspxzqfN0vtMqppM/DPbQHmiNVR/f4vn+NVE8sSbyU8X TnnVBnbhpLyE7JNySN9hsmSnQEZNE8xa4nIyxizKd/3KofPI0ruvu+FA+00ANOdO Ed8f//weo3rYmnruFG1b/NfMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu5HtZA PNKfIv2izQ8n653QItsRMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTDZmOzf/wZzIduuWVBXt77RHpW3M/Iew3RVgEnwnGoHnd9z/bJsBr 7NFz4UrUGZvSQGPnfLF92BdXWxwI8+AE//bbZIJt0ou+bZVCSnlRxAb+TNlI7udQ K+07tGBwYLjgAv2yVX+HuH4ExTMyy6LlLIQpJ2N3AkTh3pLIPruK19O2s+88Sa6r sASsX5BgSmxib6YLx9uES3LHsT/F6FIeDgq9uux/KaJ9NqsNcHSHoNOWJRdsCQFK EUFvOTschop/3Yf0t3LQhbNObSxyPPiTrMai19iLlHyE0KTyCcY5hHOj3mjVDGeA W/c9xutFnh0k/9BufYDwg/6w4zMMCPEv -----END CERTIFICATE-----Generated at Mon Jul 21 02:26:28 2025 by rpki-client