$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: DRK6oMOwWWUXFhn+YEfcFqFoxANbigxCVo76VgaIApA= Subject key identifier: 31:05:BB:03:D5:D4:F5:F0:C0:C2:F2:69:11:42:AC:A3:1D:6B:C1:5B Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 247F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 245F Signing time: Thu 18 Sep 2025 15:53:17 +0000 Manifest this update: Thu 18 Sep 2025 15:53:16 +0000 Manifest next update: Thu 25 Sep 2025 15:53:16 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: 7KushzxklPOEuEZOjrk+6bkZWSXXUxr8x/MY8tVITaU=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: Jn0BrvewJ0VHEBEPQp+4AkXwLJvrQBlbc50TDzwhQxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9343 (0x247f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Sep 18 15:53:16 2025 GMT Not After : Sep 25 15:53:16 2025 GMT Subject: CN=68cc2aec-df29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:c3:31:ff:5c:3a:a6:e7:65:a4:4c:57:84: e7:26:fd:e4:be:97:97:1d:14:23:3f:ba:fd:6c:e6: 9a:fb:02:e2:32:05:80:ed:f2:c5:38:6d:79:aa:b4: 93:3e:89:c3:8c:ce:42:70:49:f4:c7:93:05:a0:c7: 36:40:1d:7c:c5:74:ed:18:c7:9f:b2:1c:7a:58:04: 7b:db:be:21:73:d2:8b:3e:8f:00:59:c5:93:82:44: ed:aa:14:55:68:79:97:09:1f:68:17:ff:9e:65:43: d2:de:0e:85:6a:d7:39:80:94:c0:c6:a5:b9:09:29: 74:35:8e:21:41:bd:c3:90:1f:bc:30:9a:af:8d:de: 82:45:8e:ec:83:12:f7:ee:b9:55:03:7e:82:80:ad: 78:44:47:b1:d3:0c:92:ea:fe:25:8c:6a:05:c7:f6: 1e:3b:d9:64:2f:d0:f1:71:19:d6:bf:1a:39:31:b1: 6c:eb:55:86:3f:91:61:c2:55:bc:29:3f:96:e0:8d: 8b:df:d3:9d:07:6e:da:58:f2:de:0c:08:c9:d0:94: dd:31:af:bb:7c:9b:32:87:5e:1f:28:ce:40:4f:e2: 13:a2:7c:a3:01:af:e8:f0:27:0b:98:0d:8c:a3:a0: 51:45:54:53:bb:d1:2c:3d:0f:e2:0d:23:cb:a4:26: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:BB:03:D5:D4:F5:F0:C0:C2:F2:69:11:42:AC:A3:1D:6B:C1:5B X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:44:76:af:c0:1b:1e:13:b3:fe:1c:ad:e2:80:b4:65:e0:d5: 3d:90:10:42:e1:f0:04:c0:b0:da:39:e8:87:08:a5:c6:d5:09: 26:c9:4c:b6:53:e8:02:2f:e0:7f:8e:e3:3d:fb:a9:7b:0a:33: ce:90:ac:d6:83:ce:83:35:ec:0d:26:f6:da:21:cb:f3:79:37: fa:88:db:ed:a0:d2:a3:ff:04:40:86:d8:74:8c:a0:b8:98:2b: 74:63:cf:a8:20:db:c6:d4:a3:40:a4:0d:6d:ed:78:7d:cc:0d: c1:fc:05:c2:07:14:86:ba:3b:76:38:66:f8:ce:ba:22:c0:54: a8:d3:0e:ae:fb:10:0a:15:fa:b1:56:3e:e3:76:e4:80:05:77: d3:a2:ec:85:72:2b:5b:c2:aa:65:2b:04:6d:be:1d:1d:a6:99: 05:dc:9f:bb:0e:4f:b8:76:e6:26:f0:47:09:7d:dc:8e:73:c9: 98:dc:eb:64:96:68:4a:39:e5:6f:a9:06:c5:28:b0:c5:91:86: 88:9a:f6:73:6e:88:1e:7b:f8:6a:34:ce:97:8b:b6:45:9e:a8: 61:1f:d0:12:c2:fb:ec:54:ea:e1:64:65:9f:56:67:c6:49:f5: 12:66:e5:24:57:e0:16:88:89:b6:e3:e2:a4:be:70:e8:29:25: 7d:d4:d7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwOTE4MTU1MzE2WhcNMjUwOTI1MTU1MzE2WjAYMRYwFAYD VQQDEw02OGNjMmFlYy1kZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD3DMf9cOqbnZaRMV4TnJv3kvpeXHRQjP7r9bOaa+wLiMgWA7fLFOG15qrST PonDjM5CcEn0x5MFoMc2QB18xXTtGMefshx6WAR7274hc9KLPo8AWcWTgkTtqhRV aHmXCR9oF/+eZUPS3g6Fatc5gJTAxqW5CSl0NY4hQb3DkB+8MJqvjd6CRY7sgxL3 7rlVA36CgK14REex0wyS6v4ljGoFx/YeO9lkL9DxcRnWvxo5MbFs61WGP5FhwlW8 KT+W4I2L39OdB27aWPLeDAjJ0JTdMa+7fJsyh14fKM5AT+ITonyjAa/o8CcLmA2M o6BRRVRTu9EsPQ/iDSPLpCbWIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEFuwPV 1PXwwMLyaRFCrKMda8FbMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyRHavwBseE7P+HK3igLRl4NU9kBBC4fAEwLDaOeiHCKXG1QkmyUy2 U+gCL+B/juM9+6l7CjPOkKzWg86DNewNJvbaIcvzeTf6iNvtoNKj/wRAhth0jKC4 mCt0Y8+oINvG1KNApA1t7Xh9zA3B/AXCBxSGujt2OGb4zroiwFSo0w6u+xAKFfqx Vj7jduSABXfTouyFcitbwqplKwRtvh0dppkF3J+7Dk+4duYm8EcJfdyOc8mY3Otk lmhKOeVvqQbFKLDFkYaImvZzbogee/hqNM6Xi7ZFnqhhH9ASwvvsVOrhZGWfVmfG SfUSZuUkV+AWiIm24+KkvnDoKSV91NcP -----END CERTIFICATE-----Generated at Fri Sep 19 01:31:54 2025 by rpki-client