$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: ClI9kj5TAijRnf6ZT7lN3wVwCKUyXIsu5Y/W+a8ux2s= Subject key identifier: A7:FF:06:C2:72:A8:D4:3B:3E:D2:35:02:92:45:7D:37:E2:12:AC:5C Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: C6 Signing time: Tue 09 Sep 2025 06:03:43 +0000 Manifest this update: Tue 09 Sep 2025 06:03:43 +0000 Manifest next update: Tue 16 Sep 2025 06:03:42 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: eJs9vZ0nbzpsm1CbWiP9zyKdPhOQUGSYrhMtZm+d5Vo=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: FLsSk6E317UI1n66jph+9Dir8yNvamWkdarfqoL42t0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Sep 9 06:03:43 2025 GMT Not After : Sep 16 06:03:42 2025 GMT Subject: CN=68bfc33f-e033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:df:6a:13:6e:24:84:fc:4a:18:7f:19:a9: a2:e8:f1:ad:18:31:ee:89:39:8b:2d:e8:95:54:6a: 6b:62:e6:38:10:a9:2f:db:6f:c6:4f:7e:68:87:9d: 6e:bf:55:70:c7:ee:c8:4f:77:d0:a0:e7:21:1b:b1: 59:95:45:15:42:9c:88:3a:ee:a9:95:59:63:5b:8c: ec:43:bd:35:36:7c:41:10:96:24:0a:0b:ee:d3:36: 5b:aa:a0:81:91:25:94:04:6e:62:e3:21:6e:98:a6: 6b:86:8b:9c:45:bb:3f:a9:b5:31:d9:7f:88:72:b9: 4e:1a:db:ee:5e:de:53:02:ae:cb:cc:4d:39:74:ed: fb:e8:aa:bd:a7:a7:e9:f7:2b:40:0c:28:2c:8b:52: 4f:de:f9:27:3f:4c:c0:49:67:a2:c4:ce:aa:c6:75: 3f:d4:b9:c7:2a:d1:cd:6a:31:ce:63:e1:d6:ed:d9: 02:68:4d:e5:c5:de:bf:3b:c3:95:ae:b1:b6:05:e9: 45:18:29:d1:f3:7c:0e:da:83:48:1a:cc:5d:5e:70: 28:7e:64:eb:a1:b4:0f:36:0a:ae:1d:3f:24:df:85: e6:00:9e:dc:c0:fe:2c:a9:48:e5:f3:c3:b1:44:6c: c2:5e:91:09:94:1a:08:4e:ed:9a:60:12:40:33:5e: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:06:C2:72:A8:D4:3B:3E:D2:35:02:92:45:7D:37:E2:12:AC:5C X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d6:ad:50:2c:19:5b:6f:01:59:75:d3:9e:18:b9:02:8c:ed: a2:22:cd:89:bc:43:84:14:86:44:1c:15:fb:33:3f:15:f8:ec: f9:82:e8:a7:a0:f0:70:da:20:01:5c:bf:ef:7a:ee:f9:6d:4f: a8:d8:40:fd:ad:a8:5f:f3:35:f2:51:2c:bb:35:81:f1:88:ff: 92:98:50:5e:1e:ee:66:2a:0d:4a:88:48:c2:80:22:2c:bf:a0: 67:5d:c1:69:5c:40:83:f6:20:ae:eb:e6:1f:86:51:ef:77:c1: 92:11:aa:78:14:54:57:b5:a1:d2:45:f6:0c:41:b5:a7:8d:c4: 01:6c:d8:e4:7c:8a:17:0b:43:88:43:fe:88:53:58:17:30:84: 69:c6:1c:50:7a:88:da:8a:36:48:31:8e:b2:a4:50:91:23:2e: 1e:88:02:51:ee:04:2f:b4:c0:82:8a:90:6b:7e:e3:89:b7:68: cc:77:2c:96:bd:e5:be:d2:87:15:09:22:d4:0b:e3:bb:41:83: 57:d7:e1:e7:01:7a:f1:f6:7c:79:73:a2:f7:93:fd:8d:09:76: b1:9f:80:57:96:01:14:df:e0:cc:0d:bb:f6:5e:9e:6a:b3:05: f3:1d:96:e3:45:9c:cb:ff:fd:59:1f:36:4e:86:a0:f5:a2:af: c9:75:f1:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUwOTA5MDYwMzQzWhcNMjUwOTE2MDYwMzQyWjAYMRYwFAYD VQQDEw02OGJmYzMzZi1lMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1/fahNuJIT8Shh/Gami6PGtGDHuiTmLLeiVVGprYuY4EKkv22/GT35oh51u v1Vwx+7IT3fQoOchG7FZlUUVQpyIOu6plVljW4zsQ701NnxBEJYkCgvu0zZbqqCB kSWUBG5i4yFumKZrhoucRbs/qbUx2X+IcrlOGtvuXt5TAq7LzE05dO376Kq9p6fp 9ytADCgsi1JP3vknP0zASWeixM6qxnU/1LnHKtHNajHOY+HW7dkCaE3lxd6/O8OV rrG2BelFGCnR83wO2oNIGsxdXnAofmTrobQPNgquHT8k34XmAJ7cwP4sqUjl88Ox RGzCXpEJlBoITu2aYBJAM15LcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf/BsJy qNQ7PtI1ApJFfTfiEqxcMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV1q1QLBlbbwFZddOeGLkCjO2iIs2JvEOEFIZEHBX7Mz8V+Oz5guin oPBw2iABXL/veu75bU+o2ED9rahf8zXyUSy7NYHxiP+SmFBeHu5mKg1KiEjCgCIs v6BnXcFpXECD9iCu6+YfhlHvd8GSEap4FFRXtaHSRfYMQbWnjcQBbNjkfIoXC0OI Q/6IU1gXMIRpxhxQeojaijZIMY6ypFCRIy4eiAJR7gQvtMCCipBrfuOJt2jMdyyW veW+0ocVCSLUC+O7QYNX1+HnAXrx9nx5c6L3k/2NCXaxn4BXlgEU3+DMDbv2Xp5q swXzHZbjRZzL//1ZHzZOhqD1oq/JdfGX -----END CERTIFICATE-----Generated at Tue Sep 9 16:42:31 2025 by rpki-client