$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: 7neCXmkLhuFG+ssZr2OFuMD+SJO5jo5UMUTMGVqHdJI= Subject key identifier: CF:84:05:4C:1E:E0:87:1A:E0:64:67:5E:ED:0E:D2:49:10:3A:94:13 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1AC8 Signing time: Fri 18 Jul 2025 16:26:37 +0000 Manifest this update: Fri 18 Jul 2025 16:26:37 +0000 Manifest next update: Fri 25 Jul 2025 16:26:37 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: WvyhJQjjOxMIYEbpTwSrmR0vnhFJ08yfUJZeKzRq5hg=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: KiWJOvCe66mFAiJ0qYL+AaD4VB+ASk4GdSBTzbRbNlw=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6905 (0x1af9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Jul 18 16:26:37 2025 GMT Not After : Jul 25 16:26:37 2025 GMT Subject: CN=687a75bd-5fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:9e:57:67:21:b1:3d:b0:c3:03:9b:00:03: 41:3b:f8:fb:76:1b:5b:5c:dd:f9:e8:8f:04:50:a0: 68:1b:8b:d9:17:5b:9f:bf:bf:d8:76:a1:0b:fc:87: 6f:1c:19:cd:02:86:f4:d1:94:2b:fb:e4:a0:88:52: 83:1d:e2:61:ef:dc:e5:16:20:28:d0:56:10:fb:5b: 8d:7c:be:24:69:6e:28:e9:d4:f5:97:65:3d:73:a7: 7d:9a:66:3b:f1:31:66:6b:92:a5:15:b7:bd:dd:0d: b5:9a:2a:b5:a9:f9:a9:47:c2:42:4a:fc:d5:5d:21: ab:e1:2f:82:99:62:af:5a:87:e7:3e:36:4a:19:84: 8b:0a:c5:c7:d6:c0:fb:f8:f2:dc:36:6c:e0:dd:2e: c0:37:61:70:36:0a:84:9e:78:1e:65:f0:73:ca:a8: 8c:99:94:29:44:af:ad:3a:89:63:9c:dc:0b:c2:41: c5:c1:99:f0:33:a7:76:40:8f:48:c1:17:18:35:27: 99:bf:5f:ef:9e:aa:a9:fd:c4:74:78:df:5c:d5:19: b4:5f:38:0a:b2:d5:8b:3e:f5:ff:c4:d3:54:a2:4d: db:a8:8b:8f:8e:fe:da:f7:78:ae:fa:4a:7e:cc:a7: 09:e4:5c:c8:88:d4:65:2a:86:b7:da:22:3b:77:65: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:84:05:4C:1E:E0:87:1A:E0:64:67:5E:ED:0E:D2:49:10:3A:94:13 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:40:c5:48:28:b4:e8:06:d1:8f:42:22:4a:84:aa:25:91:dc: f2:30:48:d6:5e:56:da:ef:91:4e:cd:24:fe:db:95:6d:c5:de: 95:84:3e:f3:e0:fd:d1:99:3b:5f:b2:93:12:51:fc:f9:35:d7: 37:a7:24:01:ac:77:19:9d:95:fd:0e:6d:fd:8d:e0:7f:32:1e: ac:e1:b8:46:87:be:08:86:1d:37:dd:a8:14:b0:a7:37:5d:88: 20:27:d2:81:db:e9:6b:73:5c:f3:47:50:87:f7:f9:93:5d:3e: 68:17:de:5d:63:d8:64:e1:af:23:11:25:3b:62:24:89:f3:1d: e2:c6:44:c1:05:76:6e:d1:42:53:fa:17:78:bc:e2:c6:cc:f8: 89:e6:a9:81:d5:86:47:20:28:fc:36:10:68:b5:01:be:6e:6f: bd:c1:ae:91:58:c3:b3:5b:9a:a1:a8:b1:ba:49:39:d0:f8:ff: 60:db:22:d1:93:bc:90:95:7a:60:15:74:45:90:dc:72:a0:09: da:2e:53:c8:d8:af:17:8f:88:22:c1:0b:d6:5a:79:d2:79:be: 8f:8d:7e:a1:d2:b4:b5:ef:75:48:f6:43:ee:90:41:74:95:b6: a6:5f:e2:4d:43:c1:98:85:a6:9a:8b:57:90:63:a2:73:b0:e5: 54:86:42:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwNzE4MTYyNjM3WhcNMjUwNzI1MTYyNjM3WjAYMRYwFAYD VQQDEw02ODdhNzViZC01ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi6eV2chsT2wwwObAANBO/j7dhtbXN356I8EUKBoG4vZF1ufv7/YdqEL/Idv HBnNAob00ZQr++SgiFKDHeJh79zlFiAo0FYQ+1uNfL4kaW4o6dT1l2U9c6d9mmY7 8TFma5KlFbe93Q21miq1qfmpR8JCSvzVXSGr4S+CmWKvWofnPjZKGYSLCsXH1sD7 +PLcNmzg3S7AN2FwNgqEnngeZfBzyqiMmZQpRK+tOoljnNwLwkHFwZnwM6d2QI9I wRcYNSeZv1/vnqqp/cR0eN9c1Rm0XzgKstWLPvX/xNNUok3bqIuPjv7a93iu+kp+ zKcJ5FzIiNRlKoa32iI7d2WaBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+EBUwe 4Ica4GRnXu0O0kkQOpQTMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeQMVIKLToBtGPQiJKhKolkdzyMEjWXlba75FOzST+25Vtxd6VhD7z 4P3RmTtfspMSUfz5Ndc3pyQBrHcZnZX9Dm39jeB/Mh6s4bhGh74Ihh033agUsKc3 XYggJ9KB2+lrc1zzR1CH9/mTXT5oF95dY9hk4a8jESU7YiSJ8x3ixkTBBXZu0UJT +hd4vOLGzPiJ5qmB1YZHICj8NhBotQG+bm+9wa6RWMOzW5qhqLG6STnQ+P9g2yLR k7yQlXpgFXRFkNxyoAnaLlPI2K8Xj4giwQvWWnnSeb6PjX6h0rS173VI9kPukEF0 lbamX+JNQ8GYhaaai1eQY6JzsOVUhkJs -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:16 2025 by rpki-client