$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: JylmbN5nrpUDHjJKh+MylCFSyFLGzblI6jhrqKWDJrY= Subject key identifier: CB:8C:81:4E:D7:E8:62:C1:E8:28:64:67:C5:75:DD:1B:B0:B8:C2:00 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D3E Signing time: Mon 08 Sep 2025 16:08:26 +0000 Manifest this update: Mon 08 Sep 2025 16:08:25 +0000 Manifest next update: Mon 15 Sep 2025 16:08:25 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: gZuISLAX+C+CcDtd1R+zvP3Ffzc+hfJ9vCtVN26ic/w=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7499 (0x1d4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Sep 8 16:08:25 2025 GMT Not After : Sep 15 16:08:25 2025 GMT Subject: CN=68beff79-6cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:e5:a4:a8:97:27:c4:69:c6:a8:de:6f:5b: 5b:39:03:e7:ea:00:2b:32:de:70:b3:fc:d5:d8:08: 09:0f:3b:42:5a:99:1b:28:8b:f6:83:28:a5:35:b6: 5f:b3:cf:59:94:67:1a:bb:3f:72:a6:82:c8:a8:08: fb:38:6e:44:6a:10:69:c4:ca:fd:82:9e:ab:17:68: 32:49:e5:32:2c:82:f5:f4:c8:38:53:79:16:7f:d3: 99:2a:a1:5f:01:3d:17:7b:4b:4e:fe:58:b8:eb:b1: 78:b4:4d:83:1b:1c:aa:f4:a5:3e:98:88:01:8b:e1: 43:bf:52:5c:18:1e:e2:21:6d:38:47:d9:f1:48:c3: 87:be:0f:10:e5:0b:55:72:e0:20:58:78:e4:43:65: f1:28:cd:d9:83:b2:78:54:6d:66:56:b8:e8:ba:52: f3:9b:2f:b0:41:28:08:6c:4d:54:1d:ec:ef:09:19: 1c:31:50:8a:80:a9:1d:70:e7:9d:1f:62:b4:d8:15: ee:88:60:e0:3e:6b:53:2c:26:65:9d:be:15:86:b5: 64:29:75:51:6c:6c:45:3f:7f:62:45:cd:df:b2:7a: 50:20:bb:1a:6b:70:f8:38:e8:66:28:0b:4a:6e:ea: 06:4d:92:bb:75:ca:b8:91:35:e0:7c:71:d9:73:c7: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8C:81:4E:D7:E8:62:C1:E8:28:64:67:C5:75:DD:1B:B0:B8:C2:00 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4e:b7:d5:87:76:58:e9:d4:02:5b:41:15:94:c3:11:d0:c7: 99:7b:e0:fa:05:e1:45:e9:3f:cf:8f:61:bf:eb:0e:2b:ad:e8: d9:4d:d9:b7:68:55:23:3c:df:49:b2:b0:d1:14:90:69:ec:ad: 5f:a0:75:52:c3:50:45:d3:2e:6f:e1:7c:83:62:89:cf:6b:bb: b9:db:11:61:1b:c0:57:84:48:23:d5:72:85:cd:5d:d3:b9:cf: bb:f7:09:11:d3:bc:73:52:bb:b0:b8:67:73:c7:00:0d:43:e3: 7b:67:ac:30:23:29:9f:38:74:16:11:2a:00:56:e7:01:7e:1d: 53:7e:72:6a:c3:3f:b3:41:b0:a7:32:94:e8:28:dd:60:d7:b6: d9:1f:20:d8:1e:a9:1f:92:f0:44:1a:c8:5e:af:82:f6:11:72: d0:f6:75:f5:5c:42:58:46:e6:c8:db:79:ac:56:41:1e:f4:c2: f9:16:8a:b6:cd:45:8a:c1:8b:36:7d:02:94:b3:5c:52:6c:5d: d8:24:61:e8:c9:f4:ee:70:d6:dd:87:98:48:20:2f:3b:e7:b8: 7a:ce:f3:ac:3d:75:e4:dd:74:b4:1a:ab:df:d2:68:df:ff:b6: b9:b5:b6:71:03:2e:a4:c6:1a:a7:26:43:2a:df:0e:95:8c:3c: a8:b6:6c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwOTA4MTYwODI1WhcNMjUwOTE1MTYwODI1WjAYMRYwFAYD VQQDEw02OGJlZmY3OS02Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXXlpKiXJ8Rpxqjeb1tbOQPn6gArMt5ws/zV2AgJDztCWpkbKIv2gyilNbZf s89ZlGcauz9ypoLIqAj7OG5EahBpxMr9gp6rF2gySeUyLIL19Mg4U3kWf9OZKqFf AT0Xe0tO/li467F4tE2DGxyq9KU+mIgBi+FDv1JcGB7iIW04R9nxSMOHvg8Q5QtV cuAgWHjkQ2XxKM3Zg7J4VG1mVrjoulLzmy+wQSgIbE1UHezvCRkcMVCKgKkdcOed H2K02BXuiGDgPmtTLCZlnb4VhrVkKXVRbGxFP39iRc3fsnpQILsaa3D4OOhmKAtK buoGTZK7dcq4kTXgfHHZc8eo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuMgU7X 6GLB6ChkZ8V13RuwuMIAMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjTrfVh3ZY6dQCW0EVlMMR0MeZe+D6BeFF6T/Pj2G/6w4rrejZTdm3 aFUjPN9JsrDRFJBp7K1foHVSw1BF0y5v4XyDYonPa7u52xFhG8BXhEgj1XKFzV3T uc+79wkR07xzUruwuGdzxwANQ+N7Z6wwIymfOHQWESoAVucBfh1TfnJqwz+zQbCn MpToKN1g17bZHyDYHqkfkvBEGsher4L2EXLQ9nX1XEJYRubI23msVkEe9ML5Foq2 zUWKwYs2fQKUs1xSbF3YJGHoyfTucNbdh5hIIC8757h6zvOsPXXk3XS0Gqvf0mjf /7a5tbZxAy6kxhqnJkMq3w6VjDyotmwM -----END CERTIFICATE-----Generated at Tue Sep 9 13:43:18 2025 by rpki-client