$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: 96U49KNv8NbR1E4Uj11DaNKz8Xp5gfN/V3nOSIml0VI= Subject key identifier: 2E:08:71:3D:CA:30:4A:B3:22:88:AF:FF:1C:8E:53:22:A1:1E:90:C5 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: B9 Signing time: Tue 19 Aug 2025 06:52:14 +0000 Manifest this update: Tue 19 Aug 2025 06:52:13 +0000 Manifest next update: Tue 26 Aug 2025 06:52:13 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: mM/yGWb6KcZoAkGYX8UaCqYT4AVknjex5tKW9RYp9wc=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 6: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Aug 19 06:52:13 2025 GMT Not After : Aug 26 06:52:13 2025 GMT Subject: CN=68a41f1d-a8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:ac:90:e2:b9:dc:61:c7:08:e8:ff:32:d8: d9:fb:9f:12:e4:fb:19:ac:96:e6:45:43:ef:0d:eb: a2:47:e7:17:9e:68:72:97:79:33:9d:6c:98:c9:93: e6:08:06:5b:dc:20:6e:58:17:88:90:0f:48:cb:0e: 3c:b6:eb:c0:14:1f:e6:40:a1:d8:95:1d:95:19:0b: 07:e0:bd:c9:58:a0:59:91:43:03:c7:ab:10:07:e8: bf:a4:5b:87:21:01:35:7f:2b:ed:5b:90:26:1a:60: 3e:75:14:c9:b6:e9:4d:c1:1b:95:8d:93:d8:35:08: a1:68:cd:50:7e:48:b1:c1:de:2b:c1:a9:1f:4a:07: 82:cd:b0:0a:26:45:07:3f:71:6b:9c:4c:93:93:6b: 2a:a7:55:c8:0f:08:7c:9a:a7:5c:d6:1a:d3:84:43: c4:40:7f:4f:f4:37:d0:ff:b2:b8:40:88:13:19:c5: a0:8f:3a:58:d5:a6:38:49:12:16:c5:67:0b:47:68: 82:c4:0e:23:1b:e5:4b:45:99:b3:18:3a:62:9b:b7: 85:13:58:67:ac:b0:0d:c3:ce:de:09:cf:77:bd:50: 7b:5c:fc:f4:69:89:29:44:bb:84:d3:54:a8:71:48: 43:0e:66:54:6a:60:92:c8:2b:8a:02:68:2d:ca:23: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:08:71:3D:CA:30:4A:B3:22:88:AF:FF:1C:8E:53:22:A1:1E:90:C5 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2a:4c:d0:1f:7a:2d:05:9f:8e:c4:8a:24:96:59:4a:e8:0e: 8b:a6:bd:5e:ca:e2:08:5b:93:6e:81:4a:2d:b6:13:a9:b4:d6: 02:a5:c0:69:f3:ad:75:34:cf:ad:75:20:52:49:1b:8f:bd:9d: 46:d6:2a:d5:ca:6e:f6:fb:02:44:a2:6d:92:01:63:3a:f8:ff: fb:8c:fe:c6:85:b1:dd:62:73:96:47:8e:28:03:d1:d5:3d:9c: ab:49:d7:5a:62:cc:16:f6:a1:62:b5:fb:fc:88:60:16:85:b4: 4d:12:53:76:67:70:04:66:67:a9:09:cb:51:13:66:a4:ac:01: 9b:c3:12:b4:a7:4a:03:a2:77:53:2f:c4:13:4f:12:aa:a4:93: 98:44:36:57:97:f8:ee:25:e7:5a:2a:6a:f4:7d:7c:22:05:50: 47:55:41:28:72:34:2f:7e:5d:f2:7a:4e:f0:9a:bf:22:b7:0e: c2:46:8d:bc:16:10:02:45:e7:0a:3e:7f:56:d4:56:3c:6b:83: bf:69:f5:a6:77:a0:45:5b:ca:9c:b7:33:d9:a5:9b:f0:12:1e: b3:17:a5:c9:6c:65:aa:a8:2f:be:95:7f:6f:3c:bd:e4:a1:a1: 91:06:0e:8a:4a:54:77:e9:94:51:a8:c9:1c:1c:68:87:d6:cb: a8:50:a5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwODE5MDY1MjEzWhcNMjUwODI2MDY1MjEzWjAYMRYwFAYD VQQDEw02OGE0MWYxZC1hOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7J6skOK53GHHCOj/MtjZ+58S5PsZrJbmRUPvDeuiR+cXnmhyl3kznWyYyZPm CAZb3CBuWBeIkA9Iyw48tuvAFB/mQKHYlR2VGQsH4L3JWKBZkUMDx6sQB+i/pFuH IQE1fyvtW5AmGmA+dRTJtulNwRuVjZPYNQihaM1Qfkixwd4rwakfSgeCzbAKJkUH P3FrnEyTk2sqp1XIDwh8mqdc1hrThEPEQH9P9DfQ/7K4QIgTGcWgjzpY1aY4SRIW xWcLR2iCxA4jG+VLRZmzGDpim7eFE1hnrLANw87eCc93vVB7XPz0aYkpRLuE01So cUhDDmZUamCSyCuKAmgtyiNGywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4IcT3K MEqzIoiv/xyOUyKhHpDFMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIKkzQH3otBZ+OxIoklllK6A6Lpr1eyuIIW5NugUotthOptNYCpcBp 8611NM+tdSBSSRuPvZ1G1irVym72+wJEom2SAWM6+P/7jP7GhbHdYnOWR44oA9HV PZyrSddaYswW9qFitfv8iGAWhbRNElN2Z3AEZmepCctRE2akrAGbwxK0p0oDondT L8QTTxKqpJOYRDZXl/juJedaKmr0fXwiBVBHVUEocjQvfl3yek7wmr8itw7CRo28 FhACRecKPn9W1FY8a4O/afWmd6BFW8qctzPZpZvwEh6zF6XJbGWqqC++lX9vPL3k oaGRBg6KSlR36ZRRqMkcHGiH1suoUKUI -----END CERTIFICATE-----Generated at Wed Aug 20 13:54:01 2025 by rpki-client