$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: 5oN33R1tFGfjXn+X1LKApFkb9o6wpdmu1lU7Qx1pAw8= Subject key identifier: A7:F0:D2:84:DB:FD:50:39:7F:13:E8:6A:BD:33:6A:F5:23:79:DD:CC Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 0248 Signing time: Fri 05 Sep 2025 02:18:24 +0000 Manifest this update: Fri 05 Sep 2025 02:18:24 +0000 Manifest next update: Fri 12 Sep 2025 02:18:24 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: 2+iuA9dWl9CeuTfLps2dzjW2JEhJxa1/Uh7zs3PvhJQ=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 51QAmttT+orS5nLye3GO8kzrs6tbUA9omCigEUTINK8=) 3: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: m/lCeZPbzI4IUTU7gNKG3Pc87gLIw4AUvkAgjskQsFI=) 4: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: xDTqUqT1kIUmz8RtVDNj1figux9es0r/Ivvx61/pp9g=) 5: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: JI7/VMpNwJi4JTM3hdmA2otFXIkGdb1UEZF29e+5G6g=) 6: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: SYChnCFDXmbiMMIWGfC0umDJGm3jePYzq4pHvcNe8VM=) 7: F84FF96A493911ED805EB686C4F9AE02.roa (hash: Lj70ItgANJi9RJPk81TbBsVkkeLlGArDAr9zaonHm8o=) 8: 4CB6FAD482E511F0B57EE434C4F9AE02.roa (hash: m8k4F06VmmiExsx1XyaFS/SDrFIaVWOgCFFzFPY5WkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Sep 5 02:18:24 2025 GMT Not After : Sep 12 02:18:24 2025 GMT Subject: CN=68ba4870-e2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:72:83:1f:ef:3c:4e:c6:01:a2:a4:3a:ab: c9:31:2b:a7:bb:f9:93:74:6c:a4:a6:d3:35:e2:78: b5:ed:04:a7:92:74:08:90:8a:38:8a:d1:3e:69:39: f8:6d:c4:ac:3a:cd:d9:99:42:d6:e5:c4:c4:90:1d: d5:e2:c9:d8:c6:90:76:2b:80:f4:8f:a9:42:e0:9c: 95:72:60:82:9d:3c:7a:8e:58:b5:66:5d:e6:c7:6f: d0:c2:cc:ba:d8:97:df:6e:e7:0c:99:50:3f:56:93: f7:fb:c9:74:ce:a0:0f:51:f3:84:53:bf:27:cc:5a: 14:ce:f1:f1:7f:c2:cd:aa:e2:47:62:8a:11:2c:ca: 30:50:33:35:78:0a:f7:60:66:ad:90:c5:47:70:88: 01:7e:48:9d:ca:c7:42:32:f9:a1:9d:12:31:9f:af: 85:5b:77:c4:19:b3:40:54:b7:1e:3e:af:2c:d2:5d: 34:2e:ca:77:b1:e7:ac:8f:e6:81:cc:e2:cc:dc:6b: 0e:26:29:e5:b3:e0:59:bf:60:5f:3c:f7:a0:43:6c: d0:27:90:ee:69:65:ff:f4:fb:7a:fa:8e:f1:cf:f1: 85:22:35:2a:63:91:55:5b:60:4e:17:d5:63:54:75: 89:0b:96:ba:c1:b0:c3:a4:7a:46:86:28:21:1c:5a: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F0:D2:84:DB:FD:50:39:7F:13:E8:6A:BD:33:6A:F5:23:79:DD:CC X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ab:00:2a:fe:a4:f4:fa:bd:f5:52:08:9c:09:f9:e5:ad:90: ea:f6:5a:7e:70:b9:93:ad:8a:89:2f:ef:d8:54:ca:9b:70:f1: 1c:9b:bd:f4:ca:bf:d2:3c:38:15:81:cb:cf:67:f2:07:af:77: e5:da:6d:4f:d4:57:2d:97:fc:23:e5:bd:4b:c8:08:9f:12:6c: 90:5c:36:53:e7:f6:6c:f0:3f:00:9e:a7:fd:34:e0:11:70:6c: 2f:0a:df:7d:c7:3f:9d:91:0a:a2:6f:f2:c5:7a:ae:c1:a4:5b: 80:17:4b:d9:b9:0e:e0:b7:4b:2a:d4:31:21:60:c4:31:4e:f0: 48:6a:31:08:0b:dc:28:c7:28:b0:39:2a:17:09:7a:6e:8e:c4: 49:d8:eb:fd:77:4d:f4:99:41:e2:f7:0f:3b:b3:82:28:a2:91: db:2e:1e:ae:c8:29:da:f8:16:47:28:be:3e:cb:3c:97:3f:34: 32:a1:80:83:59:6f:8d:b8:d1:5c:3e:38:e6:4d:02:43:76:19: 7e:9b:7b:67:d9:43:d8:8c:4e:ca:c1:7e:93:c5:68:20:03:3b: f7:1f:46:d8:6b:39:de:6c:e5:75:79:5e:be:13:01:ae:a0:ad: b3:ef:71:2a:43:fa:78:80:22:21:67:0f:1a:1a:6a:56:c9:ef: 13:77:1e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwOTA1MDIxODI0WhcNMjUwOTEyMDIxODI0WjAYMRYwFAYD VQQDEw02OGJhNDg3MC1lMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEVygx/vPE7GAaKkOqvJMSunu/mTdGykptM14ni17QSnknQIkIo4itE+aTn4 bcSsOs3ZmULW5cTEkB3V4snYxpB2K4D0j6lC4JyVcmCCnTx6jli1Zl3mx2/Qwsy6 2JffbucMmVA/VpP3+8l0zqAPUfOEU78nzFoUzvHxf8LNquJHYooRLMowUDM1eAr3 YGatkMVHcIgBfkidysdCMvmhnRIxn6+FW3fEGbNAVLcePq8s0l00Lsp3seesj+aB zOLM3GsOJinls+BZv2BfPPegQ2zQJ5DuaWX/9Pt6+o7xz/GFIjUqY5FVW2BOF9Vj VHWJC5a6wbDDpHpGhighHFpzYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfw0oTb /VA5fxPoar0zavUjed3MMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSqwAq/qT0+r31UgicCfnlrZDq9lp+cLmTrYqJL+/YVMqbcPEcm730 yr/SPDgVgcvPZ/IHr3fl2m1P1Fctl/wj5b1LyAifEmyQXDZT5/Zs8D8Anqf9NOAR cGwvCt99xz+dkQqib/LFeq7BpFuAF0vZuQ7gt0sq1DEhYMQxTvBIajEIC9woxyiw OSoXCXpujsRJ2Ov9d030mUHi9w87s4IoopHbLh6uyCna+BZHKL4+yzyXPzQyoYCD WW+NuNFcPjjmTQJDdhl+m3tn2UPYjE7KwX6TxWggAzv3H0bYaznebOV1eV6+EwGu oK2z73EqQ/p4gCIhZw8aGmpWye8Tdx6K -----END CERTIFICATE-----Generated at Sat Sep 6 06:59:50 2025 by rpki-client