$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: BER7ZK0ZMKJd7DC0VHoX8G9QwFlfT7gzL70LUk2EbjM= Subject key identifier: 5B:38:B0:06:53:CB:E6:5F:36:83:DC:80:F4:67:61:83:48:BC:EB:2E Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0FC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0FB9 Signing time: Fri 18 Jul 2025 17:40:18 +0000 Manifest this update: Fri 18 Jul 2025 17:40:18 +0000 Manifest next update: Fri 25 Jul 2025 17:40:18 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: dTeANRneMl8h4iZdfNsyeF4/9tKctZUU1R7XnqWaNBY=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4039 (0xfc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Jul 18 17:40:18 2025 GMT Not After : Jul 25 17:40:18 2025 GMT Subject: CN=687a8702-b4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:bf:1c:45:32:7d:01:bd:19:12:07:14:58: f4:19:e6:7c:1c:26:b9:af:11:cb:d6:37:7c:ad:1a: 80:26:ed:51:30:7a:22:40:24:15:18:a7:8c:4e:eb: a8:6e:23:22:dc:83:85:71:5f:00:e0:4f:aa:85:69: d0:4f:86:b7:ea:b2:11:81:da:94:0c:9f:d1:4d:0d: 73:29:a5:c0:8b:59:ea:fd:80:18:98:a9:b8:e9:99: 31:6c:68:b7:7b:62:1e:32:b5:02:48:ff:e1:e1:5a: b8:8a:5e:7a:33:c2:21:93:a9:6a:99:6c:46:0e:f9: 08:f6:ac:aa:12:57:36:ae:96:c7:9a:40:04:17:d3: f4:57:5b:b7:4b:79:7f:cd:d6:c5:b2:ab:af:c6:c8: 78:c4:37:25:57:00:b9:4a:06:c7:10:01:dd:67:18: 8f:86:32:8a:b1:8d:de:7a:cc:b8:3e:d6:99:61:6e: 85:cb:25:9f:bb:77:c0:1e:32:61:82:ed:cf:33:4a: 60:7f:f4:5a:46:b1:64:9b:4f:44:3b:03:b9:6f:12: b0:be:5b:78:39:13:ac:09:6b:84:b3:16:f2:30:44: fc:d3:ad:b2:b7:2f:4d:67:44:e9:92:ee:1b:99:e3: a6:b4:9e:18:33:23:5c:48:30:ca:d0:98:11:9e:2b: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:B0:06:53:CB:E6:5F:36:83:DC:80:F4:67:61:83:48:BC:EB:2E X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7c:3d:b8:26:7b:36:7a:f3:6c:a7:69:33:1d:47:ae:a5:b2: 7d:17:f6:46:a4:a4:fb:e5:cd:4d:1f:00:2f:e3:ca:6c:50:a0: 48:82:41:96:43:be:61:db:5f:d2:9e:fa:bd:81:da:c9:ca:80: 4a:e1:10:a6:eb:33:0d:d9:3c:b6:8b:7f:0f:70:7f:75:ae:02: 45:eb:10:01:4b:07:c7:9c:9a:f8:8b:b9:f6:9d:58:dd:c5:3d: e2:b8:76:1a:39:7b:28:47:56:ae:1b:74:f0:e5:b7:42:b5:a6: 35:d0:f6:ac:a1:c3:e0:19:26:2d:44:18:ef:b9:6c:84:1a:f9: 1e:c8:1f:f0:a6:0d:fa:ef:4b:69:9b:c0:b4:69:7a:76:4a:d4: 5f:d6:37:67:ce:7a:95:8c:fc:ce:f7:d0:b9:88:e6:6d:33:1c: ab:b2:29:15:7d:43:8e:b7:fe:8f:6d:9a:0d:a4:71:8b:c9:ae: 75:87:01:68:40:b8:bc:8b:4a:26:3b:23:c5:c4:1f:f6:a7:a4: 42:db:a8:6f:23:2e:9b:17:4d:b8:68:78:00:7d:04:fd:16:ec: 0e:2d:90:97:7c:dd:0e:99:89:89:9d:0e:f0:7b:42:9e:5d:6c: 46:49:0d:f6:59:ec:90:62:7e:a4:83:97:0e:dd:d2:96:2c:ee: e6:e2:79:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjUwNzE4MTc0MDE4WhcNMjUwNzI1MTc0MDE4WjAYMRYwFAYD VQQDEw02ODdhODcwMi1iNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUS/HEUyfQG9GRIHFFj0GeZ8HCa5rxHL1jd8rRqAJu1RMHoiQCQVGKeMTuuo biMi3IOFcV8A4E+qhWnQT4a36rIRgdqUDJ/RTQ1zKaXAi1nq/YAYmKm46ZkxbGi3 e2IeMrUCSP/h4Vq4il56M8Ihk6lqmWxGDvkI9qyqElc2rpbHmkAEF9P0V1u3S3l/ zdbFsquvxsh4xDclVwC5SgbHEAHdZxiPhjKKsY3eesy4PtaZYW6FyyWfu3fAHjJh gu3PM0pgf/RaRrFkm09EOwO5bxKwvlt4OROsCWuEsxbyMET8062yty9NZ0Tpku4b meOmtJ4YMyNcSDDK0JgRnisjUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs4sAZT y+ZfNoPcgPRnYYNIvOsuMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSfD24Jns2evNsp2kzHUeupbJ9F/ZGpKT75c1NHwAv48psUKBIgkGW Q75h21/Snvq9gdrJyoBK4RCm6zMN2Ty2i38PcH91rgJF6xABSwfHnJr4i7n2nVjd xT3iuHYaOXsoR1auG3Tw5bdCtaY10PasocPgGSYtRBjvuWyEGvkeyB/wpg3670tp m8C0aXp2StRf1jdnznqVjPzO99C5iOZtMxyrsikVfUOOt/6PbZoNpHGLya51hwFo QLi8i0omOyPFxB/2p6RC26hvIy6bF024aHgAfQT9FuwOLZCXfN0OmYmJnQ7we0Ke XWxGSQ32WeyQYn6kg5cO3dKWLO7m4nms -----END CERTIFICATE-----Generated at Sun Jul 20 15:15:46 2025 by rpki-client