$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: l48SxXE1zm2eMWw71orBvRvanErHystl8z3H3ntQ+es= Subject key identifier: 85:F4:84:9E:BA:42:D7:50:95:F2:DB:12:E8:0A:69:57:2C:07:09:A6 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2D95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D73 Signing time: Sun 20 Jul 2025 15:32:02 +0000 Manifest this update: Sun 20 Jul 2025 15:32:01 +0000 Manifest next update: Sun 27 Jul 2025 15:32:01 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: CiFdFoCchX8t7xm4dOjax2A187kDjpZsvSG3qNpDlF8=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11669 (0x2d95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Jul 20 15:32:01 2025 GMT Not After : Jul 27 15:32:01 2025 GMT Subject: CN=687d0bf2-3e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:47:e0:0e:0e:2a:70:5f:ce:7d:8d:7e:d5: 76:4a:03:72:6c:89:d8:e9:bb:6f:09:da:d0:33:2f: 23:44:b0:3a:9c:18:6f:16:e4:6c:ac:90:c7:51:2a: 30:81:b6:3d:5e:0d:b7:59:84:b3:bc:28:5b:86:17: e5:c4:cc:1a:ac:56:bd:ae:f4:6b:6e:b3:bd:1d:b7: 88:cc:0a:95:11:87:93:ce:c7:c0:9c:44:33:51:5a: d2:7c:86:34:2f:0f:17:2f:86:76:b3:15:47:6b:cf: ab:aa:d0:03:20:c2:5a:db:09:97:10:cc:65:df:fc: 00:cd:e7:91:73:de:b3:46:7f:91:40:9f:6b:ff:a0: 2e:08:df:57:94:75:9c:78:7b:a4:c8:79:18:55:8a: 80:e0:eb:62:0a:06:26:01:ba:6b:67:7f:fc:97:17: 72:29:e2:98:3e:6c:7d:31:b6:38:48:da:7e:59:9f: 65:3a:e6:40:b4:3f:1f:c0:c4:34:d6:a1:1a:2d:0c: de:c1:f2:e3:d1:0c:c2:c4:ba:c1:c4:7d:f0:46:ee: 29:a8:76:08:b6:dc:9d:31:b2:e3:10:e0:10:c0:bd: ab:97:40:7e:32:11:06:ef:8c:06:03:9f:20:5e:97: af:12:be:2e:be:fa:39:de:39:38:80:23:95:e0:a0: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F4:84:9E:BA:42:D7:50:95:F2:DB:12:E8:0A:69:57:2C:07:09:A6 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ca:5d:bd:19:1b:7f:10:f8:e4:02:99:d3:d1:d1:0c:cc:fe: cd:fa:33:6a:c2:8e:96:39:2f:65:a6:05:34:d5:e1:6e:da:af: 4c:58:ee:3e:96:be:ef:d3:f3:ad:5e:99:22:e8:a6:45:5c:c8: 51:5e:37:87:2f:70:ca:a4:0a:df:15:49:25:d9:70:25:1c:47: 3a:b4:9e:b9:22:ec:cb:a8:17:ee:5b:1c:52:1a:3e:05:9f:49: 49:f0:40:76:fd:7c:18:b0:bf:cd:df:56:5c:66:fc:2d:bc:88: 24:a2:96:82:ff:0d:8b:c0:3a:ed:4f:e6:a0:b8:6a:92:7b:87: d7:98:12:cd:14:aa:91:6a:93:3d:84:2e:26:c5:78:58:01:47: 50:54:79:11:ae:b9:e0:17:c3:38:b3:a1:2b:00:62:d8:a4:b1: 67:4d:5e:e4:bf:12:52:71:86:b5:c7:a1:65:ca:8e:09:e3:d0: 48:de:26:aa:39:34:d1:e3:f1:fe:2f:41:ab:0a:d8:f8:36:f1: 76:23:7d:11:3b:13:da:06:ff:f1:93:56:77:53:f1:ec:00:7d: e6:d9:1e:a0:9d:a8:97:23:59:e1:0f:e3:37:71:63:d6:57:94: 70:23:17:51:ef:94:4a:9a:17:e2:bf:14:ad:70:e6:70:cd:b2: 0d:2e:bf:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwNzIwMTUzMjAxWhcNMjUwNzI3MTUzMjAxWjAYMRYwFAYD VQQDEw02ODdkMGJmMi0zZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9hH4A4OKnBfzn2NftV2SgNybInY6btvCdrQMy8jRLA6nBhvFuRsrJDHUSow gbY9Xg23WYSzvChbhhflxMwarFa9rvRrbrO9HbeIzAqVEYeTzsfAnEQzUVrSfIY0 Lw8XL4Z2sxVHa8+rqtADIMJa2wmXEMxl3/wAzeeRc96zRn+RQJ9r/6AuCN9XlHWc eHukyHkYVYqA4OtiCgYmAbprZ3/8lxdyKeKYPmx9MbY4SNp+WZ9lOuZAtD8fwMQ0 1qEaLQzewfLj0QzCxLrBxH3wRu4pqHYIttydMbLjEOAQwL2rl0B+MhEG74wGA58g XpevEr4uvvo53jk4gCOV4KDbvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX0hJ66 QtdQlfLbEugKaVcsBwmmMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2yl29GRt/EPjkApnT0dEMzP7N+jNqwo6WOS9lpgU01eFu2q9MWO4+ lr7v0/OtXpki6KZFXMhRXjeHL3DKpArfFUkl2XAlHEc6tJ65IuzLqBfuWxxSGj4F n0lJ8EB2/XwYsL/N31ZcZvwtvIgkopaC/w2LwDrtT+aguGqSe4fXmBLNFKqRapM9 hC4mxXhYAUdQVHkRrrngF8M4s6ErAGLYpLFnTV7kvxJScYa1x6Flyo4J49BI3iaq OTTR4/H+L0GrCtj4NvF2I30ROxPaBv/xk1Z3U/HsAH3m2R6gnaiXI1nhD+M3cWPW V5RwIxdR75RKmhfivxStcOZwzbINLr+w -----END CERTIFICATE-----Generated at Tue Jul 22 02:39:20 2025 by rpki-client