$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: HbnfAwp6+7oX5Rk5Q2o9kAccvmyupVn0+5jlvu+jeKk= Subject key identifier: 0E:A5:A1:AA:5B:FC:99:2D:41:DB:D9:2A:00:F7:83:A6:C1:A8:97:0F Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 013C Signing time: Sat 23 Aug 2025 04:35:52 +0000 Manifest this update: Sat 23 Aug 2025 04:35:52 +0000 Manifest next update: Sat 30 Aug 2025 04:35:52 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: zlGr+fvujde9mBy4kb/rBZb3sh+eTncb8ZKwm3Fuz54=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Aug 23 04:35:52 2025 GMT Not After : Aug 30 04:35:52 2025 GMT Subject: CN=68a94528-7636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:ef:13:48:c7:e3:6d:bb:87:75:2c:97:dc: bd:a7:f1:cc:41:c6:46:a5:a0:ab:0b:bb:f0:3c:73: da:a9:84:f0:0e:6e:9e:93:83:c0:8d:c9:15:9c:04: a5:88:dd:4c:67:b3:e5:32:4f:6f:79:f3:b2:18:75: c4:b5:50:31:15:52:18:e1:9f:dc:8d:de:ff:5e:db: d1:b7:ef:fe:d2:7f:dc:70:c9:51:d6:05:70:32:f0: e0:3a:64:04:7d:e4:54:b3:10:5b:8b:a8:1c:3e:a7: 09:3f:71:d1:2d:d1:10:ad:67:2b:1e:78:10:1d:38: a4:42:aa:ae:f9:bc:38:83:44:32:8f:16:5d:73:25: 6d:a4:e7:3d:a8:be:54:38:7c:d2:1c:84:ee:63:47: 7f:14:8d:e5:94:a2:36:16:b0:e4:70:39:3c:7f:14: 46:46:24:9f:31:47:d3:ce:49:90:7a:72:91:d5:de: 46:d1:15:3d:a8:96:58:5d:47:f8:93:fc:68:85:f9: aa:bf:c8:28:86:76:a6:93:f1:39:c5:c9:50:47:83: cb:3e:dd:7d:99:9c:3c:be:08:f2:99:b2:30:46:f7: 47:99:51:cc:42:ae:83:94:73:04:42:9b:3c:05:e8: d5:49:3a:94:61:67:b5:c0:50:b4:5d:66:2c:6d:3d: 20:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A5:A1:AA:5B:FC:99:2D:41:DB:D9:2A:00:F7:83:A6:C1:A8:97:0F X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b5:8b:56:27:d4:7f:3b:af:56:11:64:90:79:c5:7c:9d:fe: 89:44:4c:9d:7d:31:5d:71:2b:41:58:27:dd:e3:98:aa:2b:45: a7:cc:4f:a5:26:84:c6:3f:c9:97:7d:4f:21:ca:d0:91:3c:d1: 80:64:3c:e5:5e:3a:44:14:33:3f:f8:e5:61:63:1c:46:1f:75: ab:07:8e:c4:18:ac:c3:55:74:a2:58:a1:f1:0b:4a:e2:eb:79: b6:08:e1:25:55:3b:79:48:54:b3:e1:bd:d4:47:1e:73:4c:86: 5d:2a:80:43:b9:cb:a2:3d:54:d4:29:c4:71:a2:dd:36:8f:59: 21:08:cc:8c:c8:a5:0d:0a:9f:47:7a:40:72:18:b3:44:7f:da: 01:66:b2:5f:d7:1f:4e:b5:b1:55:7a:f8:fc:fa:8c:4c:53:99: e4:40:5d:23:a9:ca:04:4d:78:00:10:7d:28:57:09:6e:8f:df: b5:73:fd:61:4e:96:3f:aa:9b:68:3f:b8:42:09:9b:b3:33:e3: 9e:8e:5a:46:19:54:02:61:4b:24:61:49:3b:e4:2f:b0:4b:74: e2:b2:bf:0c:a9:66:89:23:41:6e:09:5a:97:66:53:91:14:9b: f0:da:7a:85:2d:41:4a:84:c0:87:9d:c7:69:60:ef:0d:e6:ce: c8:20:4d:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUwODIzMDQzNTUyWhcNMjUwODMwMDQzNTUyWjAYMRYwFAYD VQQDEw02OGE5NDUyOC03NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8nvE0jH4227h3Usl9y9p/HMQcZGpaCrC7vwPHPaqYTwDm6ek4PAjckVnASl iN1MZ7PlMk9vefOyGHXEtVAxFVIY4Z/cjd7/XtvRt+/+0n/ccMlR1gVwMvDgOmQE feRUsxBbi6gcPqcJP3HRLdEQrWcrHngQHTikQqqu+bw4g0QyjxZdcyVtpOc9qL5U OHzSHITuY0d/FI3llKI2FrDkcDk8fxRGRiSfMUfTzkmQenKR1d5G0RU9qJZYXUf4 k/xohfmqv8gohnamk/E5xclQR4PLPt19mZw8vgjymbIwRvdHmVHMQq6DlHMEQps8 BejVSTqUYWe1wFC0XWYsbT0ggwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6loapb /JktQdvZKgD3g6bBqJcPMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAitYtWJ9R/O69WEWSQecV8nf6JREydfTFdcStBWCfd45iqK0WnzE+l JoTGP8mXfU8hytCRPNGAZDzlXjpEFDM/+OVhYxxGH3WrB47EGKzDVXSiWKHxC0ri 63m2COElVTt5SFSz4b3URx5zTIZdKoBDucuiPVTUKcRxot02j1khCMyMyKUNCp9H ekByGLNEf9oBZrJf1x9OtbFVevj8+oxMU5nkQF0jqcoETXgAEH0oVwluj9+1c/1h TpY/qptoP7hCCZuzM+OejlpGGVQCYUskYUk75C+wS3Tisr8MqWaJI0FuCVqXZlOR FJvw2nqFLUFKhMCHncdpYO8N5s7IIE3L -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:07 2025 by rpki-client