$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: TEgdr7sY3ru+j4QKnPnM5yRLfObyI88/Jh8mfi7Pcto= Subject key identifier: D3:0D:A2:E8:30:02:EA:A4:96:62:C6:52:93:9E:F6:F1:A8:62:E5:20 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 114B Signing time: Thu 18 Sep 2025 17:24:13 +0000 Manifest this update: Thu 18 Sep 2025 17:24:12 +0000 Manifest next update: Thu 25 Sep 2025 17:24:12 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: dsigo5IWe4YQ4+AGSx77aZBhj0QGP3BsIEGq0QdhLhs=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4435 (0x1153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Sep 18 17:24:12 2025 GMT Not After : Sep 25 17:24:12 2025 GMT Subject: CN=68cc403c-7405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:62:18:2f:6f:31:63:b7:6c:34:23:ac:6c:a1: e0:e4:35:f9:4e:ff:01:f9:fd:66:72:65:eb:fe:14: 19:ab:70:93:3c:2e:0f:41:8c:7a:e2:b4:25:71:e7: dc:af:e3:40:d2:4a:b4:d7:7b:fc:aa:20:9e:d7:13: 62:66:33:46:3b:a5:39:c9:72:b6:e8:f2:00:55:54: 6d:59:1d:17:ac:0d:3c:82:3e:50:81:d9:72:a5:15: bc:80:3f:34:5e:07:b7:6d:ad:9b:47:50:a5:d6:f6: 49:05:e2:24:c9:d6:ea:93:60:8b:43:97:fb:c3:bc: a7:db:d8:8a:b9:d1:b6:dc:8d:3a:f5:d4:4f:40:45: 1a:f0:24:fd:6f:ff:61:4c:ff:e7:94:e9:6a:7a:7b: ce:30:4f:29:f0:ab:a3:3e:df:8d:18:5f:a2:5f:76: 3b:2c:97:33:22:87:bd:ec:84:82:d8:d1:57:37:77: 64:da:c6:b1:07:b5:d0:0b:ff:46:ff:5f:7e:4f:29: 46:2f:45:e8:16:c7:96:b7:21:86:90:80:d9:d4:b6: 7a:6f:7c:2f:1b:1d:f1:be:e7:c3:15:e6:b3:e6:50: 48:3d:96:0d:ca:48:c1:2d:e2:1b:a0:16:07:25:f9: ec:ff:f1:3b:ec:db:1c:b1:80:c6:ef:09:ee:69:c5: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:A2:E8:30:02:EA:A4:96:62:C6:52:93:9E:F6:F1:A8:62:E5:20 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:40:fb:b9:8d:72:e6:63:e9:c1:ec:77:c0:99:69:7c:31:a1: 19:86:f5:5e:7f:ae:86:45:04:bf:fe:8b:ea:33:37:dc:32:52: 85:d2:a1:5f:06:dc:2e:85:4f:f3:d2:29:02:1f:9a:08:d8:cf: 88:09:a6:0f:d9:9a:c0:c7:61:e0:a3:18:86:ac:12:1a:96:ec: aa:ba:1f:e3:4b:e7:65:f3:da:c5:fa:22:12:5d:7d:43:3f:f1: cf:9a:4e:da:57:ec:09:4b:ad:0a:fd:ee:b5:50:b3:78:8e:d4: 99:aa:04:77:83:53:5d:54:d0:74:4c:4f:a1:f9:e8:ed:78:97: 5f:1b:03:88:68:e3:1e:88:13:5c:59:d7:7e:6b:db:6c:46:fc: 79:44:3a:2a:e5:15:31:06:a1:ac:72:9f:5c:63:a9:02:74:a2: 93:c8:b7:03:1b:b7:01:41:07:cd:ef:b5:aa:f9:9d:30:16:e6: eb:5b:a5:79:1e:d4:63:d4:0b:4b:b2:56:53:8f:a8:74:c2:fd: 1a:fc:f6:d9:e6:df:9d:8e:53:82:08:76:47:24:e3:f7:64:b6: e5:d8:f1:74:a2:fb:3d:fa:67:ad:20:f1:67:59:3e:28:0c:7c: 09:94:1f:63:f3:db:66:8a:d9:0a:c6:f7:23:b5:23:4c:6a:b4: 75:de:35:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUwOTE4MTcyNDEyWhcNMjUwOTI1MTcyNDEyWjAYMRYwFAYD VQQDEw02OGNjNDAzYy03NDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/GIYL28xY7dsNCOsbKHg5DX5Tv8B+f1mcmXr/hQZq3CTPC4PQYx64rQlcefc r+NA0kq013v8qiCe1xNiZjNGO6U5yXK26PIAVVRtWR0XrA08gj5QgdlypRW8gD80 Xge3ba2bR1Cl1vZJBeIkydbqk2CLQ5f7w7yn29iKudG23I069dRPQEUa8CT9b/9h TP/nlOlqenvOME8p8KujPt+NGF+iX3Y7LJczIoe97ISC2NFXN3dk2saxB7XQC/9G /19+TylGL0XoFseWtyGGkIDZ1LZ6b3wvGx3xvufDFeaz5lBIPZYNykjBLeIboBYH Jfns//E77NscsYDG7wnuacVUyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMNougw AuqklmLGUpOe9vGoYuUgMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaQPu5jXLmY+nB7HfAmWl8MaEZhvVef66GRQS//ovqMzfcMlKF0qFf BtwuhU/z0ikCH5oI2M+ICaYP2ZrAx2HgoxiGrBIaluyquh/jS+dl89rF+iISXX1D P/HPmk7aV+wJS60K/e61ULN4jtSZqgR3g1NdVNB0TE+h+ejteJdfGwOIaOMeiBNc Wdd+a9tsRvx5RDoq5RUxBqGscp9cY6kCdKKTyLcDG7cBQQfN77Wq+Z0wFubrW6V5 HtRj1AtLslZTj6h0wv0a/PbZ5t+djlOCCHZHJOP3ZLbl2PF0ovs9+metIPFnWT4o DHwJlB9j89tmitkKxvcjtSNMarR13jVx -----END CERTIFICATE-----Generated at Thu Sep 18 23:40:46 2025 by rpki-client