$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: tZqfoH02EsNIg4cm91tK11OJp4O+fwY0aycQQCsEO40= Subject key identifier: 4E:FE:11:C7:6C:D3:BF:BD:36:77:58:6F:20:D8:FA:5F:0E:60:0B:EF Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0FE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0FD3 Signing time: Sat 06 Sep 2025 17:36:22 +0000 Manifest this update: Sat 06 Sep 2025 17:36:21 +0000 Manifest next update: Sat 13 Sep 2025 17:36:21 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: VPTF2zo8mVPnsaD6g20BSHAED/UWqIYI9+oCmSTORiI=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4065 (0xfe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Sep 6 17:36:21 2025 GMT Not After : Sep 13 17:36:21 2025 GMT Subject: CN=68bc7115-cc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:bb:32:4f:a5:27:af:02:49:57:c9:4f:87: 80:53:dd:2f:86:33:bc:1c:38:62:b9:21:38:63:6a: 9d:10:df:8f:c4:d1:c0:66:aa:16:cf:b0:0d:85:0b: 87:08:fe:58:5a:ee:36:b7:90:62:68:c0:0b:1e:fc: 92:86:b2:f1:8c:3f:36:63:f5:4e:00:3b:0e:c8:40: 53:d9:fe:4e:a8:1c:63:67:a4:fe:35:6e:d3:aa:62: ce:6b:eb:0f:0e:25:95:2c:20:96:81:1a:26:5a:c1: 42:88:95:5e:3b:ef:60:76:d3:c4:31:34:f6:d7:e4: 65:3a:d8:4b:15:95:00:bf:f8:86:d2:24:cf:1b:26: ad:1c:29:42:a9:e7:bf:22:ad:01:26:cc:0f:75:19: 46:b8:bc:14:0e:2a:ee:87:ac:46:a5:16:f3:dc:55: ec:bc:da:b6:79:40:5e:27:1e:e4:be:b3:f6:e3:4a: ca:17:87:ec:a2:25:e0:18:34:2d:32:02:91:3a:1a: 55:f0:f6:73:80:43:85:f1:96:63:a0:01:77:a9:8c: c0:e6:fb:a1:76:62:7e:b2:f3:08:1b:02:81:aa:fd: a9:79:62:1e:2e:23:43:08:d2:40:f3:18:d3:c4:ca: d2:bf:4c:f2:fa:0c:17:af:0b:ed:81:82:bd:fa:d8: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FE:11:C7:6C:D3:BF:BD:36:77:58:6F:20:D8:FA:5F:0E:60:0B:EF X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:95:bb:6e:14:1e:cf:f8:10:cf:ce:53:43:83:a4:a3:64:47: e1:64:48:f2:50:f9:b2:a0:29:65:16:e6:68:40:bc:9b:78:75: b2:3c:9e:07:cf:ff:a9:04:94:60:bf:b6:cc:86:bb:e4:7e:7a: 24:82:43:c7:fd:cd:75:85:aa:aa:93:d5:eb:5f:12:68:79:de: 72:6f:bb:4c:af:81:87:d5:15:01:03:f2:fb:b7:69:ff:54:ea: a7:12:52:56:19:64:d0:20:cb:f6:df:60:a1:66:e2:cb:23:54: 85:e9:48:4a:03:2b:8d:0b:0a:9a:d3:71:3f:15:fe:27:f6:63: e6:5b:5c:6e:28:b1:ff:55:d8:02:b9:21:91:33:50:1a:11:0e: 99:42:40:51:d9:3e:81:ab:96:e6:4b:78:d5:3e:8d:c3:cf:78: cc:9b:fa:08:60:64:98:9a:f3:da:d5:ed:1d:fd:21:8f:27:48: 1e:27:43:95:e9:6e:c9:4c:fe:59:dc:d4:08:6f:f4:a9:be:15: 2f:e2:47:37:e9:1b:58:8f:9c:2e:bd:f2:60:3c:aa:79:4d:f1: 7a:70:17:56:46:5b:10:07:5d:05:d7:ea:9f:de:f6:ed:8d:c7: 1b:ed:e1:f6:c1:1e:a8:1d:97:11:67:df:34:01:89:64:ea:71: 29:6d:4c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjUwOTA2MTczNjIxWhcNMjUwOTEzMTczNjIxWjAYMRYwFAYD VQQDEw02OGJjNzExNS1jYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0n+7Mk+lJ68CSVfJT4eAU90vhjO8HDhiuSE4Y2qdEN+PxNHAZqoWz7ANhQuH CP5YWu42t5BiaMALHvyShrLxjD82Y/VOADsOyEBT2f5OqBxjZ6T+NW7TqmLOa+sP DiWVLCCWgRomWsFCiJVeO+9gdtPEMTT21+RlOthLFZUAv/iG0iTPGyatHClCqee/ Iq0BJswPdRlGuLwUDiruh6xGpRbz3FXsvNq2eUBeJx7kvrP240rKF4fsoiXgGDQt MgKROhpV8PZzgEOF8ZZjoAF3qYzA5vuhdmJ+svMIGwKBqv2peWIeLiNDCNJA8xjT xMrSv0zy+gwXrwvtgYK9+tjMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7+Ecds 07+9NndYbyDY+l8OYAvvMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/lbtuFB7P+BDPzlNDg6SjZEfhZEjyUPmyoCllFuZoQLybeHWyPJ4H z/+pBJRgv7bMhrvkfnokgkPH/c11haqqk9XrXxJoed5yb7tMr4GH1RUBA/L7t2n/ VOqnElJWGWTQIMv232ChZuLLI1SF6UhKAyuNCwqa03E/Ff4n9mPmW1xuKLH/VdgC uSGRM1AaEQ6ZQkBR2T6Bq5bmS3jVPo3Dz3jMm/oIYGSYmvPa1e0d/SGPJ0geJ0OV 6W7JTP5Z3NQIb/SpvhUv4kc36RtYj5wuvfJgPKp5TfF6cBdWRlsQB10F1+qf3vbt jccb7eH2wR6oHZcRZ980AYlk6nEpbUyU -----END CERTIFICATE-----Generated at Sun Sep 7 10:09:17 2025 by rpki-client