$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: +zDdhNJXKJz3AFT1sY7e6hWDSUvbO8XWhzFqHMqnD50= Subject key identifier: 5C:17:88:CF:A1:74:AE:48:96:07:6C:DE:98:0B:63:2F:BE:2A:0F:49 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 019F Signing time: Sun 07 Sep 2025 03:54:26 +0000 Manifest this update: Sun 07 Sep 2025 03:54:25 +0000 Manifest next update: Sun 14 Sep 2025 03:54:25 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: 6EfP33LnJAj71EjdZ0iwIycfQC7UNcYt8ma3N7QqxhM=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Sep 7 03:54:25 2025 GMT Not After : Sep 14 03:54:25 2025 GMT Subject: CN=68bd01f1-1dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:32:db:c0:ab:94:12:2a:cb:8e:90:16:05: 26:da:2e:c4:1f:14:05:5d:4e:6f:bb:a5:c5:10:bb: 98:bf:81:b5:a5:7c:d8:b8:88:b8:e5:96:87:23:b8: 53:bd:29:e6:73:b7:4e:ff:b2:9e:c6:fc:2f:89:e3: 52:87:91:84:d1:43:b7:1c:ae:e7:c9:7c:8a:3c:aa: 17:86:92:4e:e3:67:8a:4f:48:57:fe:dc:b1:cc:d2: 0d:78:d2:72:2c:0e:aa:50:b1:62:37:b3:de:a7:c4: ff:80:12:3c:c4:fd:01:69:de:ce:c7:7a:0d:b7:57: 7c:77:2f:c9:f3:3c:1d:9d:92:a2:dc:27:23:9e:f2: f5:6d:66:82:8f:ea:ae:02:85:45:a9:66:0c:5e:91: 16:af:f8:c4:69:0a:c5:df:14:eb:39:27:2d:17:23: cb:3f:f2:ad:7b:e7:ae:39:1d:a7:d4:70:c0:9b:f8: 8f:60:9e:a2:fb:00:ed:85:7a:8b:43:0f:97:40:43: d0:9d:73:7f:7d:52:2b:8f:8a:17:5f:3b:94:df:07: c2:5f:3d:e0:8a:7f:43:86:17:ab:14:20:9c:5d:ef: be:83:93:a9:8f:67:17:2b:2a:d0:4b:1c:d2:7a:b5: 28:de:c4:ad:86:69:38:1a:fd:65:f6:ec:2c:5c:8f: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:17:88:CF:A1:74:AE:48:96:07:6C:DE:98:0B:63:2F:BE:2A:0F:49 X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e8:5f:7b:c4:f3:d3:58:d4:5a:0c:07:50:00:cb:ea:9a:18: 65:64:15:1d:80:b1:66:dc:75:ac:cc:c7:8a:cc:e7:29:54:ed: 87:9a:53:6c:8d:86:95:fc:61:78:42:81:96:e6:45:2f:7a:2f: 9d:8a:d1:9b:c0:13:3f:13:0f:bf:91:f6:2d:b5:f7:a6:ed:fa: e2:9f:d5:9d:ab:78:ad:9c:f6:7f:0c:cc:01:7e:04:a9:0e:a6: 7c:9f:66:c2:ba:b0:ca:e3:22:a3:a7:a5:d5:0b:36:d1:cb:28: e7:64:37:e0:d1:88:41:17:a5:8e:08:cd:87:04:15:4c:1c:55: 19:42:41:66:a9:a4:21:bb:06:8b:22:e8:bf:f2:63:5c:67:d6: 19:8b:4f:91:7b:8d:8f:18:88:cf:34:e4:56:b6:16:3b:fb:02: 9d:61:88:dc:7f:f3:f4:bb:cf:4b:90:07:3f:ee:f0:9d:73:0a: 85:19:68:f5:90:68:37:f9:da:f2:3c:a8:a7:96:0c:76:b6:c9: 7a:16:e9:86:89:05:f2:d0:00:58:6f:37:f6:75:1f:e1:1e:b2: 87:5e:80:0b:89:06:3f:b2:0f:7f:27:8c:b1:fb:21:0c:e0:fc: 2c:3a:d9:f6:ad:e5:09:ff:3c:07:53:d0:91:20:cc:2e:05:e4: ff:25:28:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUwOTA3MDM1NDI1WhcNMjUwOTE0MDM1NDI1WjAYMRYwFAYD VQQDEw02OGJkMDFmMS0xZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2My28CrlBIqy46QFgUm2i7EHxQFXU5vu6XFELuYv4G1pXzYuIi45ZaHI7hT vSnmc7dO/7KexvwvieNSh5GE0UO3HK7nyXyKPKoXhpJO42eKT0hX/tyxzNINeNJy LA6qULFiN7Pep8T/gBI8xP0Bad7Ox3oNt1d8dy/J8zwdnZKi3CcjnvL1bWaCj+qu AoVFqWYMXpEWr/jEaQrF3xTrOSctFyPLP/Kte+euOR2n1HDAm/iPYJ6i+wDthXqL Qw+XQEPQnXN/fVIrj4oXXzuU3wfCXz3gin9DhherFCCcXe++g5Opj2cXKyrQSxzS erUo3sSthmk4Gv1l9uwsXI9emQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwXiM+h dK5Ilgds3pgLYy++Kg9JMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN6F97xPPTWNRaDAdQAMvqmhhlZBUdgLFm3HWszMeKzOcpVO2HmlNs jYaV/GF4QoGW5kUvei+ditGbwBM/Ew+/kfYttfem7frin9Wdq3itnPZ/DMwBfgSp DqZ8n2bCurDK4yKjp6XVCzbRyyjnZDfg0YhBF6WOCM2HBBVMHFUZQkFmqaQhuwaL Iui/8mNcZ9YZi0+Re42PGIjPNORWthY7+wKdYYjcf/P0u89LkAc/7vCdcwqFGWj1 kGg3+dryPKinlgx2tsl6FumGiQXy0ABYbzf2dR/hHrKHXoALiQY/sg9/J4yx+yEM 4PwsOtn2reUJ/zwHU9CRIMwuBeT/JSjl -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:52 2025 by rpki-client