$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: neciCr8BTz3YCuo9cbeagoQOpULvkxf/Jlq8JYzee3I= Subject key identifier: 23:DB:21:C4:03:0F:D3:D0:D0:8B:AA:7E:DA:B9:42:E2:8B:38:64:B7 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: 0115 Signing time: Wed 17 Sep 2025 05:40:45 +0000 Manifest this update: Wed 17 Sep 2025 05:40:45 +0000 Manifest next update: Wed 24 Sep 2025 05:40:44 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: cjWEGPf3DgBz5nS1LpD3bmrga9C+L2nLFjC0O9zEncE=) 2: 33FB0E48FD2211EFA419DA72C4F9AE02.roa (hash: hGFJA7vbBE7czUFInCqw+SAQ5MusDF01ceEYN+8+xgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Sep 17 05:40:45 2025 GMT Not After : Sep 24 05:40:44 2025 GMT Subject: CN=68ca49dd-e61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:7c:5e:ee:04:98:51:b2:89:22:8d:e4:10: 7e:40:20:c5:59:2b:2f:7a:a9:81:ce:b2:70:4c:f9: 37:52:8d:80:c3:55:08:2f:4c:15:c7:14:1c:c7:00: 08:96:62:32:a2:fe:07:2e:50:3b:a8:78:68:69:7e: cc:8d:16:7b:25:3c:d6:c2:4e:99:2f:c5:2c:a5:b5: d3:5b:02:b1:2e:a0:4d:6d:bb:34:a7:5a:09:e4:28: b6:63:58:47:0e:52:27:9c:3c:21:54:64:e8:4a:d8: f7:fd:5f:ea:bc:3b:2c:ca:31:40:b5:45:be:16:52: 82:ed:2b:b6:c8:99:a9:78:8b:56:ed:28:4c:aa:37: 3f:fc:b9:a4:62:c9:f8:59:22:0f:7b:a4:79:9e:4d: f9:e2:cc:e5:38:03:9c:47:98:f6:4a:9e:63:ce:6b: d8:66:18:a9:f2:8c:12:84:66:c0:a3:3b:43:12:39: 26:5c:47:23:e4:a2:8d:92:83:69:00:b2:3b:aa:d9: 1c:46:2c:ee:84:7d:b8:a2:1d:79:37:f8:6a:60:99: cb:3a:fd:5f:18:4e:27:73:6e:04:c1:e4:9b:17:94: 88:1e:56:ef:fa:a3:b8:da:a0:d0:d0:65:75:f9:c4: 07:87:ac:a0:3b:1d:a2:7d:20:5e:1f:77:c0:53:2f: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:21:C4:03:0F:D3:D0:D0:8B:AA:7E:DA:B9:42:E2:8B:38:64:B7 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:46:c6:62:0b:78:d5:c4:fc:7d:6d:c3:ff:76:02:bb:d7: 25:54:35:fa:17:bd:0e:c2:0c:1c:0d:ab:6f:3c:de:9b:0b:d3: d4:89:c6:ff:a5:03:43:59:12:12:da:f5:ef:49:4e:b2:72:79: 52:1b:84:69:11:1c:92:5d:6f:6b:4c:c0:1c:73:b2:86:77:4a: 6b:1f:71:94:4e:c8:ff:9c:95:21:17:e3:83:48:ec:13:21:4e: a5:1f:3d:f5:a2:a7:c8:9a:66:d2:43:37:fc:4e:d3:05:7e:e4: 02:84:fb:b5:cd:c1:c8:d4:98:ad:87:26:0f:8a:28:ca:f9:22: cc:b0:1b:e1:90:a3:eb:1b:27:5a:5e:ed:06:09:f5:99:26:95: c6:a5:09:a6:86:42:37:74:2f:ae:a7:a3:f6:62:a7:c7:8c:84: 02:a6:fe:06:11:bd:38:80:8c:f9:9f:bb:78:e7:4e:72:59:76: 3f:d2:b7:f2:98:bb:3b:77:e6:93:a2:d4:e2:3f:05:07:eb:97: 61:f5:8d:8f:ea:e2:36:6c:a8:2e:12:fe:48:62:4c:3d:4b:49: 97:8d:c7:2e:75:7d:44:1a:80:63:58:ae:b7:20:d1:3e:21:60: 9e:73:c3:3f:34:3f:2b:a1:bb:5e:7f:ef:58:4a:25:25:89:b7: a8:f0:1d:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUwOTE3MDU0MDQ1WhcNMjUwOTI0MDU0MDQ0WjAYMRYwFAYD VQQDEw02OGNhNDlkZC1lNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8N8Xu4EmFGyiSKN5BB+QCDFWSsveqmBzrJwTPk3Uo2Aw1UIL0wVxxQcxwAI lmIyov4HLlA7qHhoaX7MjRZ7JTzWwk6ZL8UspbXTWwKxLqBNbbs0p1oJ5Ci2Y1hH DlInnDwhVGToStj3/V/qvDssyjFAtUW+FlKC7Su2yJmpeItW7ShMqjc//LmkYsn4 WSIPe6R5nk354szlOAOcR5j2Sp5jzmvYZhip8owShGbAoztDEjkmXEcj5KKNkoNp ALI7qtkcRizuhH24oh15N/hqYJnLOv1fGE4nc24EweSbF5SIHlbv+qO42qDQ0GV1 +cQHh6ygOx2ifSBeH3fAUy/amwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPbIcQD D9PQ0Iuqftq5QuKLOGS3MB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM2kbGYgt41cT8fW3D/3YCu9clVDX6F70OwgwcDatvPN6bC9PUicb/ pQNDWRIS2vXvSU6ycnlSG4RpERySXW9rTMAcc7KGd0prH3GUTsj/nJUhF+ODSOwT IU6lHz31oqfImmbSQzf8TtMFfuQChPu1zcHI1JithyYPiijK+SLMsBvhkKPrGyda Xu0GCfWZJpXGpQmmhkI3dC+up6P2YqfHjIQCpv4GEb04gIz5n7t4505yWXY/0rfy mLs7d+aTotTiPwUH65dh9Y2P6uI2bKguEv5IYkw9S0mXjccudX1EGoBjWK63INE+ IWCec8M/ND8robtef+9YSiUlibeo8B0r -----END CERTIFICATE-----Generated at Fri Sep 19 03:52:55 2025 by rpki-client