$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: qg4muIfh9YfSSfwFrCZj82ph7GlUh9XvHnlPKMlTzvE= Subject key identifier: 93:FD:BE:17:61:2C:D2:A2:5F:01:2F:55:AC:63:B2:2F:91:4B:69:96 Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0B15 Signing time: Sun 20 Jul 2025 19:23:55 +0000 Manifest this update: Sun 20 Jul 2025 19:23:54 +0000 Manifest next update: Sun 27 Jul 2025 19:23:54 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: 5/uZewD1ELH2LKz4oRrTxuydNH2N2nR1XW99fo81ZAQ=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: QbUyZORfUsAuIPfZUHLWRtdmTwbA8QqQPT+t+aGRe2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: Jul 20 19:23:54 2025 GMT Not After : Jul 27 19:23:54 2025 GMT Subject: CN=687d424b-7395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:54:5a:ce:a2:fc:c4:68:44:56:87:8f:25: 67:23:ca:aa:79:de:e2:df:f8:87:94:53:45:4d:67: 60:45:1e:ca:64:21:1e:3a:1d:e8:9d:82:2a:9c:d4: a3:80:7c:43:83:d2:af:a8:e0:2e:6d:be:b7:97:ac: 4c:15:15:44:86:4b:2e:9b:73:60:ce:fd:58:92:f1: a8:00:8f:9e:aa:43:7a:8e:2c:8e:eb:98:a7:b5:ca: 43:d2:83:0c:9b:ed:f4:6d:cd:97:57:76:8f:d6:3b: 0a:a1:93:09:e7:b3:8e:0a:7f:78:30:26:bc:54:2e: 75:38:12:54:01:5f:f0:d9:d1:88:08:10:5a:74:81: 1e:07:88:1e:35:6f:d1:63:3b:fc:4a:48:2d:67:1b: 9f:b8:7e:4c:ba:67:77:29:17:48:fd:10:5e:17:80: 39:1a:4c:8f:14:9f:62:1d:e4:55:42:63:b2:7c:0e: 99:d1:ff:0c:15:1f:29:5e:21:71:51:fc:59:7c:14: 64:4d:79:eb:fb:24:10:a9:10:2d:33:8b:24:4f:64: da:74:08:70:2d:34:97:c9:37:8b:74:3b:33:9b:e8: d4:51:2d:f5:4b:0b:84:74:2e:3b:c4:91:c9:c4:fd: 9b:08:1c:4e:2c:33:3d:77:bd:81:c8:c2:03:ba:c9: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FD:BE:17:61:2C:D2:A2:5F:01:2F:55:AC:63:B2:2F:91:4B:69:96 X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:8c:df:80:c1:3b:bf:06:08:f0:5c:ac:aa:cf:5f:40:44:f8: e2:fb:0a:24:3b:ee:d4:25:58:44:2b:d4:ad:38:66:08:a6:11: b3:9b:ea:10:3a:38:77:e5:9c:bf:e8:5e:dc:c6:b1:87:5d:da: 8c:25:67:26:36:c7:42:83:d9:05:f9:4e:ce:f1:04:42:ee:5c: c9:4d:72:19:0d:8d:68:9a:59:50:58:4d:17:be:32:0e:78:d2: 21:76:f8:a7:5a:fa:bb:a9:0c:53:22:74:87:e1:ff:d1:40:76: ef:7f:7f:f5:06:de:1b:4b:52:1c:df:d4:48:7c:fc:e4:1e:40: f6:64:3d:fb:57:22:3d:96:93:43:aa:c6:46:ef:14:49:67:22: 7b:44:88:16:f7:10:25:7a:a8:b1:8c:8d:dc:05:ea:75:a9:c2: 52:e2:b7:af:39:80:27:f7:88:85:19:5c:c9:00:9b:7c:c5:5c: 66:d0:66:6a:7b:b7:2b:ba:b9:0d:fe:b6:92:e7:1f:13:d0:93: 51:44:65:5e:1a:ea:8b:48:28:96:ad:07:bd:2c:f2:e4:01:f8: 31:47:33:ee:73:6b:d8:eb:ed:63:33:b9:c7:e4:fd:0c:3a:4a: 67:81:c7:d3:a3:f3:5b:28:51:92:2a:e0:b8:42:e3:62:7e:3d: 15:7f:c7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjUwNzIwMTkyMzU0WhcNMjUwNzI3MTkyMzU0WjAYMRYwFAYD VQQDEw02ODdkNDI0Yi03Mzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP1UWs6i/MRoRFaHjyVnI8qqed7i3/iHlFNFTWdgRR7KZCEeOh3onYIqnNSj gHxDg9KvqOAubb63l6xMFRVEhksum3Ngzv1YkvGoAI+eqkN6jiyO65intcpD0oMM m+30bc2XV3aP1jsKoZMJ57OOCn94MCa8VC51OBJUAV/w2dGICBBadIEeB4geNW/R Yzv8SkgtZxufuH5Mumd3KRdI/RBeF4A5GkyPFJ9iHeRVQmOyfA6Z0f8MFR8pXiFx UfxZfBRkTXnr+yQQqRAtM4skT2TadAhwLTSXyTeLdDszm+jUUS31SwuEdC47xJHJ xP2bCBxOLDM9d72ByMIDusm4+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJP9vhdh LNKiXwEvVaxjsi+RS2mWMB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCljN+AwTu/BgjwXKyqz19ARPji+wokO+7UJVhEK9StOGYIphGzm+oQ Ojh35Zy/6F7cxrGHXdqMJWcmNsdCg9kF+U7O8QRC7lzJTXIZDY1omllQWE0XvjIO eNIhdvinWvq7qQxTInSH4f/RQHbvf3/1Bt4bS1Ic39RIfPzkHkD2ZD37VyI9lpND qsZG7xRJZyJ7RIgW9xAleqixjI3cBep1qcJS4revOYAn94iFGVzJAJt8xVxm0GZq e7crurkN/raS5x8T0JNRRGVeGuqLSCiWrQe9LPLkAfgxRzPuc2vY6+1jM7nH5P0M OkpngcfTo/NbKFGSKuC4QuNifj0Vf8fQ -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:33 2025 by rpki-client