$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: BFQXSIYP/GiCjUAK75Cr7g6qWxoPstOxdNzyBUUYtWM= Subject key identifier: C6:4F:B8:EE:D3:66:4D:F8:F5:48:91:D5:E6:7C:10:33:AE:42:E4:A1 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 53 Signing time: Wed 17 Sep 2025 08:00:23 +0000 Manifest this update: Wed 17 Sep 2025 08:00:23 +0000 Manifest next update: Wed 24 Sep 2025 08:00:23 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: FzEXDUa5KNeeDDKSX5lyo9qqH1voWpuUiIxlV+tTrKE=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Sep 17 08:00:23 2025 GMT Not After : Sep 24 08:00:23 2025 GMT Subject: CN=68ca6a97-2e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1d:3c:80:68:8a:27:9e:49:8e:8c:4a:3b:93: f9:fd:d5:db:81:ce:c5:ba:53:f9:fd:38:d5:9c:fa: ff:b8:e6:01:79:39:20:56:83:f8:82:59:42:a0:71: b3:e7:ea:f0:e2:b1:32:93:1d:11:27:c2:69:27:df: a8:bf:8c:d3:fc:60:b9:30:83:8e:1c:41:2e:9e:05: 14:c4:d3:0d:02:6b:ea:b2:b9:17:a9:77:6a:37:2c: e2:1c:c3:36:48:77:79:a4:13:75:1d:19:39:85:7a: 77:51:50:f7:38:1e:ff:15:69:11:24:cb:0c:2c:6f: fe:69:ff:c1:97:f7:8c:e7:58:af:5f:d3:9d:85:7a: 80:65:84:b4:f5:9b:4a:79:d9:2d:b0:b6:36:a5:7c: 00:f7:d0:2b:0b:64:3b:56:30:33:2e:d5:ec:24:be: 00:00:4c:e8:a2:a8:1d:6e:20:45:66:77:c3:de:ad: cb:95:15:57:e9:82:14:1d:34:68:cb:22:84:ae:bf: a5:5f:d2:3a:48:ab:f8:9c:3e:cc:54:c2:44:9c:46: 19:cb:9e:fb:b8:7c:72:f3:2b:83:e0:c5:6c:07:10: f5:dd:91:c8:2d:b7:a0:23:b1:ac:9d:16:5b:62:3c: 58:a5:5d:22:60:19:a5:38:9b:42:e2:d7:8b:33:89: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:B8:EE:D3:66:4D:F8:F5:48:91:D5:E6:7C:10:33:AE:42:E4:A1 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:17:4c:1d:8c:60:4b:10:35:a3:22:c7:91:f5:79:92:70:4b: 08:9e:36:3f:09:76:e4:bb:b6:33:5b:c2:51:06:32:09:c8:fa: 98:08:4c:8d:3a:eb:67:35:47:6a:a8:22:64:58:85:de:48:08: 5b:e9:56:c5:c8:57:53:92:cf:52:9b:b2:9d:6a:4e:be:a3:cd: e3:6a:83:6a:6f:f2:51:0a:6c:ec:cc:1c:a5:e5:46:1f:ca:06: f2:98:b3:44:59:70:d2:bf:99:66:6e:a7:81:8f:37:30:9e:08: 8a:29:0a:f5:82:3a:68:10:9e:4d:dd:42:3a:a4:17:3d:09:ab: e2:8c:f3:c9:68:f4:4e:84:9b:ce:db:1c:11:ab:27:97:f3:64: 3f:c4:87:2c:fd:86:de:e9:b7:35:f5:38:6e:f7:9c:15:0b:fb: f0:ba:fc:2d:21:98:5d:95:57:29:53:bd:49:3b:e5:1b:6e:34: 4f:48:ba:15:cd:38:9e:f5:aa:fd:39:fb:65:31:f7:09:a2:af: e7:07:b9:ce:1b:ac:6e:61:b2:c8:13:0b:57:64:59:82:67:92: d3:f9:a6:aa:79:c2:de:6e:f4:d8:9a:45:f5:3b:35:44:81:bd: f4:bb:34:db:c6:0f:a1:8a:e6:01:70:d6:25:53:57:10:a1:07: ec:70:f9:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA5MTcwODAwMjNaFw0yNTA5MjQwODAwMjNaMBgxFjAUBgNV BAMTDTY4Y2E2YTk3LTJlOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlHTyAaIonnkmOjEo7k/n91duBzsW6U/n9ONWc+v+45gF5OSBWg/iCWUKgcbPn 6vDisTKTHREnwmkn36i/jNP8YLkwg44cQS6eBRTE0w0Ca+qyuRepd2o3LOIcwzZI d3mkE3UdGTmFendRUPc4Hv8VaREkywwsb/5p/8GX94znWK9f052FeoBlhLT1m0p5 2S2wtjalfAD30CsLZDtWMDMu1ewkvgAATOiiqB1uIEVmd8PercuVFVfpghQdNGjL IoSuv6Vf0jpIq/icPsxUwkScRhnLnvu4fHLzK4PgxWwHEPXdkcgtt6AjsaydFlti PFilXSJgGaU4m0Li14szidE3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxk+47tNm Tfj1SJHV5nwQM65C5KEwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAXTB2MYEsQNaMix5H1eZJwSwieNj8JduS7tjNbwlEGMgnI+pgITI06 62c1R2qoImRYhd5ICFvpVsXIV1OSz1Kbsp1qTr6jzeNqg2pv8lEKbOzMHKXlRh/K BvKYs0RZcNK/mWZup4GPNzCeCIopCvWCOmgQnk3dQjqkFz0Jq+KM88lo9E6Em87b HBGrJ5fzZD/Ehyz9ht7ptzX1OG73nBUL+/C6/C0hmF2VVylTvUk75RtuNE9IuhXN OJ71qv05+2Ux9wmir+cHuc4brG5hssgTC1dkWYJnktP5pqp5wt5u9NiaRfU7NUSB vfS7NNvGD6GK5gFw1iVTVxChB+xw+XE= -----END CERTIFICATE-----Generated at Thu Sep 18 22:11:20 2025 by rpki-client