$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: B8qBp41GZdkMKdo6AJNAoDkLXgFE8D/RCa4yz7urlL0= Subject key identifier: DD:74:4E:9B:DA:A5:44:2D:D7:3F:55:A5:F9:74:FD:17:01:F4:68:AC Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0CA3 Signing time: Thu 04 Sep 2025 18:23:12 +0000 Manifest this update: Thu 04 Sep 2025 18:23:11 +0000 Manifest next update: Thu 11 Sep 2025 18:23:11 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: e7TdJXzyRg9cgJP0rjsRcTqhGzMHzmOHe52st9Dr9lo=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 18:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Sep 4 18:23:11 2025 GMT Not After : Sep 11 18:23:11 2025 GMT Subject: CN=68b9d910-d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:78:a0:29:3f:b2:84:69:b5:50:f0:7f:dd: 45:d6:7a:b4:1e:23:2b:e7:13:f4:87:9e:ea:fe:a6: d7:85:32:db:d8:8b:57:20:90:2a:88:03:d2:22:31: 19:2f:79:a7:b6:0a:8c:ef:42:25:2f:3a:c1:05:fb: ca:9a:32:b5:2f:21:42:24:aa:08:c4:8c:f8:8d:f1: 97:f0:de:f6:0c:4b:9f:19:65:72:ad:20:77:b5:8b: 69:f6:54:5e:46:fc:77:88:7c:c2:ff:80:66:da:27: 87:c5:ea:80:4f:b1:57:5b:c0:d1:47:58:ec:ed:1c: 92:bf:b3:08:ba:4e:d3:3f:48:8f:38:4a:c5:9f:11: d6:08:5f:f7:f8:30:52:a2:25:6d:b1:74:9d:58:03: fa:ab:65:ca:17:7f:4d:ba:a7:05:ac:ac:7c:79:4c: d5:55:99:44:17:e3:b7:cb:2d:ea:de:6c:37:2d:3d: 8b:4a:31:58:e1:6f:8d:1b:b1:a7:9d:b3:b5:8c:41: b4:0f:f2:70:71:8a:09:dc:b3:80:bc:87:b1:9b:8f: 65:f6:24:a8:ee:c1:11:d9:fb:5f:89:fa:6a:da:3b: 64:b7:07:be:b8:2e:c7:cb:4f:4d:6b:53:8d:b1:fe: 98:8a:da:0c:3a:54:48:73:e6:e9:a2:d2:2f:9d:06: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:4E:9B:DA:A5:44:2D:D7:3F:55:A5:F9:74:FD:17:01:F4:68:AC X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c8:fd:df:a7:b8:5c:ae:f0:1c:3e:7e:51:73:bc:71:39:13: b6:58:a7:bf:f5:c4:6b:31:49:2e:2a:07:35:fc:84:ca:a4:75: af:7c:26:9c:f5:d2:38:d1:20:4e:76:dd:9b:00:92:9b:ae:c2: bf:74:86:19:e6:8f:f3:11:aa:e9:8a:73:f3:8c:31:2e:3a:53: 5e:a8:a2:69:47:74:a9:03:50:3c:52:42:fc:28:9c:e8:b8:c0: a2:52:d1:50:bc:70:55:dc:60:80:bd:4d:6d:ba:c4:b9:70:24: 8d:5e:a2:7f:2f:a0:6f:25:15:f8:44:7a:ee:13:e7:13:02:50: b5:c4:1e:1c:40:12:4b:29:71:2f:af:99:48:83:6b:7c:7f:59: 40:1d:e5:06:77:d1:46:c3:95:27:8f:d9:08:18:6d:0c:09:d7: 6a:39:42:fe:49:5d:7d:86:95:25:eb:b9:32:fe:5a:b1:c3:8e: a1:9d:58:55:bd:17:c3:d7:12:8a:be:f5:86:4c:da:23:68:b7: 97:d1:15:4b:44:b8:82:60:4b:3d:fb:f0:7b:b8:e4:a8:04:29: a1:2b:f5:47:67:66:d1:76:f3:f3:dd:9e:bb:16:6a:4c:c3:c7: a1:a7:f0:d6:99:7a:a7:29:ba:9e:8d:91:02:27:d9:32:4f:65: 69:e0:fe:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwOTA0MTgyMzExWhcNMjUwOTExMTgyMzExWjAYMRYwFAYD VQQDEw02OGI5ZDkxMC1kNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv54oCk/soRptVDwf91F1nq0HiMr5xP0h57q/qbXhTLb2ItXIJAqiAPSIjEZ L3mntgqM70IlLzrBBfvKmjK1LyFCJKoIxIz4jfGX8N72DEufGWVyrSB3tYtp9lRe Rvx3iHzC/4Bm2ieHxeqAT7FXW8DRR1js7RySv7MIuk7TP0iPOErFnxHWCF/3+DBS oiVtsXSdWAP6q2XKF39NuqcFrKx8eUzVVZlEF+O3yy3q3mw3LT2LSjFY4W+NG7Gn nbO1jEG0D/JwcYoJ3LOAvIexm49l9iSo7sER2ftfifpq2jtktwe+uC7Hy09Na1ON sf6YitoMOlRIc+bpotIvnQZbIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN10Tpva pUQt1z9Vpfl0/RcB9GisMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOyP3fp7hcrvAcPn5Rc7xxORO2WKe/9cRrMUkuKgc1/ITKpHWvfCac 9dI40SBOdt2bAJKbrsK/dIYZ5o/zEarpinPzjDEuOlNeqKJpR3SpA1A8UkL8KJzo uMCiUtFQvHBV3GCAvU1tusS5cCSNXqJ/L6BvJRX4RHruE+cTAlC1xB4cQBJLKXEv r5lIg2t8f1lAHeUGd9FGw5Unj9kIGG0MCddqOUL+SV19hpUl67ky/lqxw46hnVhV vRfD1xKKvvWGTNojaLeX0RVLRLiCYEs9+/B7uOSoBCmhK/VHZ2bRdvPz3Z67FmpM w8ehp/DWmXqnKbqejZECJ9kyT2Vp4P74 -----END CERTIFICATE-----Generated at Fri Sep 5 11:52:56 2025 by rpki-client