$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: lr54gGwutwByeMAa8gbDkqr0b5Z7oMN34bJTLpBlQ5s= Subject key identifier: D9:03:2C:FE:8D:F8:1D:53:E0:12:3C:E4:A4:57:E4:BE:9C:A8:12:40 Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1E21 Signing time: Sun 20 Jul 2025 16:06:36 +0000 Manifest this update: Sun 20 Jul 2025 16:06:35 +0000 Manifest next update: Sun 27 Jul 2025 16:06:35 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: hbe7w/u02tPcMlx/4V+xrD7KFPOJ0fd+riFES1AHb7E=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7730 (0x1e32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Jul 20 16:06:35 2025 GMT Not After : Jul 27 16:06:35 2025 GMT Subject: CN=687d140c-5596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:89:72:61:1a:69:64:2c:5f:11:41:db:a9: 42:1f:90:ed:21:7b:4d:87:04:1e:fc:ef:82:01:9a: c5:7f:41:84:e2:28:a7:a6:7b:95:41:2d:d6:26:e2: 08:6d:88:cd:e5:fa:50:de:7a:4d:cc:3a:cc:77:92: 78:b1:18:e9:95:3a:4f:8b:5d:0c:eb:1f:70:79:fa: 3f:08:5f:f2:dd:ae:5d:16:e8:82:48:d7:6f:8a:be: d5:f5:05:bb:47:67:5f:df:2a:e2:09:c6:7f:07:38: 2d:a9:b1:23:f4:a4:eb:b8:c8:b3:cd:d1:d7:87:26: 0e:9c:ba:43:a0:8c:1c:82:6a:15:5a:b3:9a:1a:6d: 3f:23:2f:93:b2:f8:8c:cb:a1:08:a5:5d:76:e9:2d: 73:9f:99:08:be:2b:f9:39:b7:cd:9e:32:c2:a4:9b: 97:09:0b:f6:6f:c7:1d:83:46:10:05:0b:b5:d1:2d: 5d:09:bb:ac:ae:43:37:ee:67:b3:d4:fa:06:4e:1f: 48:13:d8:bb:f1:ee:27:ea:88:52:57:ac:d6:91:cc: dc:2a:86:db:1e:3f:94:39:3c:dc:96:64:49:58:41: 86:82:05:b6:46:85:d6:4b:63:9f:75:b1:e3:1c:21: c7:70:0b:07:1c:2a:29:32:2b:04:8f:6e:5a:12:89: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:03:2C:FE:8D:F8:1D:53:E0:12:3C:E4:A4:57:E4:BE:9C:A8:12:40 X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0e:df:a9:20:4e:ac:4d:63:1c:ed:aa:55:28:a6:0f:d4:8b: b2:ff:5e:d3:1d:b1:2c:b0:7f:dc:96:cf:0d:05:c5:50:ec:0d: 76:2b:9e:c5:02:cc:c0:62:11:b9:fe:b7:41:2a:43:68:55:78: e9:22:b5:b1:30:46:e1:b7:09:a9:fc:a9:c8:3e:97:f7:b1:8e: 89:25:ca:53:75:5c:18:c0:30:d5:22:d4:26:d5:b5:b9:8b:82: ad:cd:7e:a9:aa:51:f0:63:e7:84:83:51:66:21:aa:4b:79:26: 30:37:9b:e3:d5:8b:b8:a4:52:b4:1d:e4:93:e5:e2:f6:4d:06: c1:5e:d2:69:8c:af:3a:c2:39:5a:59:76:96:c0:1c:85:eb:94: f6:15:b8:4e:b5:92:b2:ad:5b:38:f2:e2:c5:43:be:a8:5f:17: 2a:b1:99:76:ea:85:91:fd:2b:d6:47:b6:97:54:49:f6:f0:aa: 72:bf:6b:16:81:c8:d9:e1:51:94:76:d2:98:7b:44:48:0a:f4: 11:15:15:3e:d5:c7:98:a3:08:fa:36:3c:70:dc:e2:11:f2:d0: 18:34:13:e5:e4:6b:e6:7f:cd:7c:8f:3b:04:8b:d2:a5:a9:be: 90:75:69:f2:00:5b:67:ea:19:e6:bb:6b:21:c0:28:74:bd:3a: da:8c:39:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjUwNzIwMTYwNjM1WhcNMjUwNzI3MTYwNjM1WjAYMRYwFAYD VQQDEw02ODdkMTQwYy01NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf6JcmEaaWQsXxFB26lCH5DtIXtNhwQe/O+CAZrFf0GE4iinpnuVQS3WJuII bYjN5fpQ3npNzDrMd5J4sRjplTpPi10M6x9wefo/CF/y3a5dFuiCSNdvir7V9QW7 R2df3yriCcZ/BzgtqbEj9KTruMizzdHXhyYOnLpDoIwcgmoVWrOaGm0/Iy+TsviM y6EIpV126S1zn5kIviv5ObfNnjLCpJuXCQv2b8cdg0YQBQu10S1dCbusrkM37mez 1PoGTh9IE9i78e4n6ohSV6zWkczcKobbHj+UOTzclmRJWEGGggW2RoXWS2OfdbHj HCHHcAsHHCopMisEj25aEonYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkDLP6N +B1T4BI85KRX5L6cqBJAMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbDt+pIE6sTWMc7apVKKYP1Iuy/17THbEssH/cls8NBcVQ7A12K57F AszAYhG5/rdBKkNoVXjpIrWxMEbhtwmp/KnIPpf3sY6JJcpTdVwYwDDVItQm1bW5 i4KtzX6pqlHwY+eEg1FmIapLeSYwN5vj1Yu4pFK0HeST5eL2TQbBXtJpjK86wjla WXaWwByF65T2FbhOtZKyrVs48uLFQ76oXxcqsZl26oWR/SvWR7aXVEn28Kpyv2sW gcjZ4VGUdtKYe0RICvQRFRU+1ceYowj6Njxw3OIR8tAYNBPl5Gvmf818jzsEi9Kl qb6QdWnyAFtn6hnmu2shwCh0vTrajDnV -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:45 2025 by rpki-client