$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: aZPO5kSxsPBAVSuFjb8/raqLIVzPaJtgYID2bpJFi3I= Subject key identifier: D3:DB:E4:5C:B3:55:A8:8E:CF:4A:7E:A7:0E:E7:3F:44:84:D3:C2:6A Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0D66 Signing time: Mon 08 Sep 2025 18:01:25 +0000 Manifest this update: Mon 08 Sep 2025 18:01:25 +0000 Manifest next update: Mon 15 Sep 2025 18:01:25 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: 3EkZJKNomu2eJ2++iwxp8ymyu09okA5/rhfxBGGPH78=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1, serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Sep 8 18:01:25 2025 GMT Not After : Sep 15 18:01:25 2025 GMT Subject: CN=68bf19f5-88bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:47:00:03:9f:ed:2e:11:f9:ad:2a:6f:62: 64:b4:07:bf:c6:08:ce:3e:40:42:da:fe:2d:7b:81: 9b:ba:e9:d8:5b:7c:ef:b7:33:a6:c4:65:e9:91:fc: cb:ab:7a:9c:d3:ed:9e:a8:0e:8b:6f:2c:68:40:ea: 8d:bd:e0:47:0b:9c:c6:46:ee:c7:8d:24:fd:8c:68: 15:0e:b9:78:72:f7:03:db:94:52:66:eb:4f:a1:32: 84:5d:a9:95:22:3f:dc:96:19:3b:ad:9a:85:6b:26: a9:45:99:15:a1:4e:1f:01:4b:ae:12:fd:91:e9:d2: 29:e1:4f:78:45:26:04:0e:d8:27:b3:14:37:fb:9c: d0:86:74:6c:5a:71:b5:87:70:57:0d:3c:96:b6:a8: 39:89:49:dd:0a:db:82:07:0e:67:4d:c2:71:2d:fa: e7:84:8e:c8:70:ac:6d:ed:83:e7:c3:c7:6a:1c:7e: 1f:2a:e2:90:4c:ea:d4:b1:ff:73:9d:9d:4e:24:0a: 6a:ad:6e:f7:be:ec:6f:78:fd:ef:a7:ac:a8:91:90: bd:b2:a7:ea:11:25:e0:0f:45:a8:99:ce:ad:48:55: 0d:5c:39:5b:2f:27:db:e4:79:71:82:c9:c8:b8:c2: 1f:13:21:b7:83:c1:eb:9d:23:09:99:c3:41:ad:6e: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:E4:5C:B3:55:A8:8E:CF:4A:7E:A7:0E:E7:3F:44:84:D3:C2:6A X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:23:1e:86:8c:56:4a:3e:4a:ed:0b:13:ee:34:09:ee:31:a2: 08:40:30:95:6e:76:2b:1e:89:34:2c:86:6f:3f:64:f2:35:dc: c3:05:56:12:a4:6b:58:52:45:3f:ab:29:67:80:15:53:ab:29: c1:eb:b6:ea:64:5b:56:6b:19:c9:ec:d3:81:72:40:01:cf:6b: b2:90:b2:80:1b:6d:87:33:84:b8:ad:e4:22:2b:c5:5e:0a:33: 4d:ff:8b:14:33:5d:f5:0a:7e:03:c9:12:30:cf:65:98:a6:bc: e0:7c:85:c0:f1:34:5f:2f:59:97:1c:7b:6f:78:69:9a:17:d3: 55:99:c5:06:78:f9:6d:aa:f1:83:95:69:bd:3b:13:2c:32:09: 92:a1:09:14:f6:9d:b7:fb:fb:be:7f:a7:ff:54:e5:62:e9:f5: d4:5a:09:4e:08:53:f8:51:c9:9e:d2:b9:db:06:9b:3c:94:e5: 06:5c:4f:3c:fb:55:d3:6c:4a:65:60:36:52:15:5a:a7:93:ef: 88:da:f5:e7:2f:4b:b1:81:7c:8c:7e:2f:c3:55:b7:59:70:4f: df:3b:db:35:be:dd:87:df:35:86:5a:c9:bd:ff:ee:da:36:ac: 78:72:03:40:56:19:38:0b:0b:03:81:ac:e8:8e:b7:3a:1e:72: 41:1c:61:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjUwOTA4MTgwMTI1WhcNMjUwOTE1MTgwMTI1WjAYMRYwFAYD VQQDEw02OGJmMTlmNS04OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jxHAAOf7S4R+a0qb2JktAe/xgjOPkBC2v4te4GbuunYW3zvtzOmxGXpkfzL q3qc0+2eqA6LbyxoQOqNveBHC5zGRu7HjST9jGgVDrl4cvcD25RSZutPoTKEXamV Ij/clhk7rZqFayapRZkVoU4fAUuuEv2R6dIp4U94RSYEDtgnsxQ3+5zQhnRsWnG1 h3BXDTyWtqg5iUndCtuCBw5nTcJxLfrnhI7IcKxt7YPnw8dqHH4fKuKQTOrUsf9z nZ1OJApqrW73vuxveP3vp6yokZC9sqfqESXgD0Womc6tSFUNXDlbLyfb5HlxgsnI uMIfEyG3g8HrnSMJmcNBrW6vrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPb5Fyz VaiOz0p+pw7nP0SE08JqMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlIx6GjFZKPkrtCxPuNAnuMaIIQDCVbnYrHok0LIZvP2TyNdzDBVYS pGtYUkU/qylngBVTqynB67bqZFtWaxnJ7NOBckABz2uykLKAG22HM4S4reQiK8Ve CjNN/4sUM131Cn4DyRIwz2WYprzgfIXA8TRfL1mXHHtveGmaF9NVmcUGePltqvGD lWm9OxMsMgmSoQkU9p23+/u+f6f/VOVi6fXUWglOCFP4Ucme0rnbBps8lOUGXE88 +1XTbEplYDZSFVqnk++I2vXnL0uxgXyMfi/DVbdZcE/fO9s1vt2H3zWGWsm9/+7a Nqx4cgNAVhk4CwsDgazojrc6HnJBHGEH -----END CERTIFICATE-----Generated at Tue Sep 9 08:15:47 2025 by rpki-client