$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: ooTcMxUmW8YfYT1Sf7AT0WXJqHrjLP2f+TDI5i2CYHY= Subject key identifier: 45:30:3D:E8:29:6C:3C:D4:7A:76:81:B3:C3:0D:E1:59:EB:59:99:82 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 012F Signing time: Sun 07 Sep 2025 05:22:25 +0000 Manifest this update: Sun 07 Sep 2025 05:22:24 +0000 Manifest next update: Sun 14 Sep 2025 05:22:24 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: Z4A1tlpTZsbuazl95mJjCQdW7KbARdn+xyrsAmFxq3Y=) 2: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: ie/x6hO8mgJVypMbJ9dxT11zPfxv7+L2SE4F6aFMCRg=) 3: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fzQzGSAIs0EVXNYEuUhQCq5Xv3M4UYk0ENH+A/wJ0lg=) 4: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: +76rgJH+tlo3mUp003o+tx8igW3K1WeVuibheb9bs0g=) 5: F73A3EA458FF11F0831F6664C4F9AE02.roa (hash: AwPQ2C0JmEfPKukGC3Ro3WYtZg4y6hLp5m6xMhubTwE=) 6: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: C0PtpzbGpwbpDFL/uYPMPp9j/9TP8PxpK7PTzvirT4A=) 7: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: xBAC2IeuuzKl82FU9KBewyyGYj38dZfZQ7//75oYBSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Sep 7 05:22:24 2025 GMT Not After : Sep 14 05:22:24 2025 GMT Subject: CN=68bd1690-0a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:ca:2b:d3:f0:15:34:66:d8:5b:56:21:4f: 68:3a:da:8e:29:9b:8e:da:20:cd:bb:8c:5d:4b:7a: 48:2a:6a:94:eb:46:14:f3:3a:fa:df:3d:2a:75:dd: bc:db:af:12:1a:10:09:20:1c:19:90:95:56:fd:a7: 86:7b:dd:e9:85:e6:96:6d:b2:b5:cb:86:fe:0c:6c: e7:36:25:b8:60:a3:d6:5e:ab:07:5b:b8:6f:68:3b: 14:9c:dd:89:82:f3:e6:28:65:a1:99:d7:49:a8:25: 02:ad:b7:16:7f:cd:e2:38:c7:1d:e2:57:1f:ee:ff: 46:ca:5e:c7:fa:d9:50:3f:c8:66:b0:22:f1:5c:fb: 66:7e:75:86:5e:97:86:9c:20:5c:97:6f:6b:9a:c4: 93:2c:04:5a:a9:5f:e0:ba:7a:0c:87:ca:ec:8e:24: ff:4f:96:5f:9b:1c:ac:df:9d:96:92:e3:10:ff:fa: 3b:19:7b:e9:60:2f:4d:8b:15:7e:03:6f:da:bf:f5: 49:14:b3:18:4e:49:f5:15:8e:a7:58:f5:4c:e1:db: 8b:26:cf:bb:8c:60:10:66:b9:04:24:6a:79:e8:62: 96:64:ba:89:aa:3f:d8:c0:aa:01:f1:de:d7:98:27: b5:1a:de:39:99:96:ea:45:89:90:f5:ca:cf:97:62: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:30:3D:E8:29:6C:3C:D4:7A:76:81:B3:C3:0D:E1:59:EB:59:99:82 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b4:1f:1d:45:56:9f:5e:45:b2:e5:45:64:2f:e0:fb:4e:9d: 8c:8f:b2:6d:d2:b4:69:a3:88:dc:e2:e0:fd:51:f8:ff:61:d3: 15:38:6f:8d:ae:98:4a:30:6a:4a:42:1b:15:dd:6d:d4:be:9c: 31:25:40:89:99:1e:02:1b:87:8d:10:e0:c2:44:a7:51:70:e2: 38:ad:11:69:aa:be:4f:ca:9d:e0:5e:8a:71:96:2c:5a:ff:a9: 83:97:04:80:1c:06:6f:12:3a:5e:70:60:5d:13:e0:f2:5a:5a: 7d:14:5d:a4:1b:c6:3f:ea:56:85:55:63:39:76:95:84:d2:fc: a1:d2:3c:52:08:5c:cb:d8:fa:35:91:a5:97:f4:3d:09:6e:10: 24:23:59:ea:2b:0d:a1:4d:57:b2:b9:46:94:fe:f3:f7:b4:58: 1c:03:02:1a:44:d5:19:8b:02:7f:77:e7:b8:ee:44:92:a1:91: 9c:43:93:ae:48:fb:aa:79:2d:80:4a:b4:75:da:3a:0e:7a:e9: 56:b6:31:8e:70:c5:13:5c:72:0d:af:29:fd:30:87:41:1e:69: 6c:37:0d:8a:74:01:24:70:d8:99:68:75:ef:9a:1e:ff:70:da: 64:58:50:1f:ee:24:ac:2b:ff:e4:5b:40:80:9e:b1:99:b2:91: 64:46:ee:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUwOTA3MDUyMjI0WhcNMjUwOTE0MDUyMjI0WjAYMRYwFAYD VQQDEw02OGJkMTY5MC0wYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeXKK9PwFTRm2FtWIU9oOtqOKZuO2iDNu4xdS3pIKmqU60YU8zr63z0qdd28 268SGhAJIBwZkJVW/aeGe93pheaWbbK1y4b+DGznNiW4YKPWXqsHW7hvaDsUnN2J gvPmKGWhmddJqCUCrbcWf83iOMcd4lcf7v9Gyl7H+tlQP8hmsCLxXPtmfnWGXpeG nCBcl29rmsSTLARaqV/gunoMh8rsjiT/T5Zfmxys352WkuMQ//o7GXvpYC9NixV+ A2/av/VJFLMYTkn1FY6nWPVM4duLJs+7jGAQZrkEJGp56GKWZLqJqj/YwKoB8d7X mCe1Gt45mZbqRYmQ9crPl2INRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUwPegp bDzUenaBs8MN4VnrWZmCMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4tB8dRVafXkWy5UVkL+D7Tp2Mj7Jt0rRpo4jc4uD9Ufj/YdMVOG+N rphKMGpKQhsV3W3UvpwxJUCJmR4CG4eNEODCRKdRcOI4rRFpqr5Pyp3gXopxlixa /6mDlwSAHAZvEjpecGBdE+DyWlp9FF2kG8Y/6laFVWM5dpWE0vyh0jxSCFzL2Po1 kaWX9D0JbhAkI1nqKw2hTVeyuUaU/vP3tFgcAwIaRNUZiwJ/d+e47kSSoZGcQ5Ou SPuqeS2ASrR12joOeulWtjGOcMUTXHINryn9MIdBHmlsNw2KdAEkcNiZaHXvmh7/ cNpkWFAf7iSsK//kW0CAnrGZspFkRu7C -----END CERTIFICATE-----Generated at Mon Sep 8 07:07:54 2025 by rpki-client