$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: JPoXvPdLDig8UueYy/xLSeNKfnSCL14UWeAbqH1c+80= Subject key identifier: 18:22:3C:23:45:CD:0A:24:78:BD:51:3F:90:81:0D:7F:78:56:D4:D4 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 017A Signing time: Fri 19 Sep 2025 04:13:28 +0000 Manifest this update: Fri 19 Sep 2025 04:13:27 +0000 Manifest next update: Fri 26 Sep 2025 04:13:27 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: 3HP66kK716L3zizYmZiKzEzKLxfJVaplxaGOtm4B+Qk=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Sep 19 04:13:27 2025 GMT Not After : Sep 26 04:13:27 2025 GMT Subject: CN=68ccd867-e95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:22:5a:be:1a:00:2a:89:71:61:6e:26:d2: 91:0c:ba:18:d5:ee:b4:6c:3d:9f:50:88:79:8c:65: 60:77:66:90:5a:8a:81:09:dd:f3:37:ab:0f:33:eb: 36:89:56:45:6d:9c:18:7b:bd:8e:28:7e:72:ea:47: 23:40:e4:2e:6d:1e:ae:42:00:43:7c:fb:94:0a:4c: d5:19:92:c6:8f:6b:ab:d8:39:2c:fc:b0:5b:f2:32: 66:b9:15:4b:8e:5d:8f:ef:b1:2e:98:93:dd:bb:67: 64:f7:05:6b:cb:49:d6:9e:ef:c4:98:75:fb:2c:0a: 12:73:8e:58:5a:25:8c:9a:c8:7d:ef:b0:bb:12:f4: a3:76:68:18:ca:c2:ee:69:22:b3:7e:3a:59:c1:b1: 4e:d7:45:64:d4:7f:0c:5b:60:ac:3f:01:a7:8e:b7: a9:34:c2:96:97:35:0e:66:9c:14:90:b0:49:96:5c: 7b:03:c7:e3:91:2f:1d:aa:48:67:76:a4:5d:b8:63: 89:58:64:f3:5d:8a:a1:30:4f:35:85:fe:ff:49:3c: 2a:29:89:0a:03:54:2b:eb:c0:31:90:90:67:79:bd: ac:1f:d0:01:1b:91:99:27:cf:0d:3f:0d:3c:b7:aa: 63:b2:86:6c:45:14:2e:1c:53:8c:af:51:0e:9f:ea: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:3C:23:45:CD:0A:24:78:BD:51:3F:90:81:0D:7F:78:56:D4:D4 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:ea:59:5d:79:1a:cf:29:ac:ef:33:81:cb:ae:5f:91:74: 08:62:02:8b:98:b5:44:84:7a:11:43:c9:9a:62:fa:94:9f:51: 0f:b6:c5:b1:9d:30:8c:b4:e1:ec:53:c5:f9:63:63:0e:3d:94: f0:0d:34:d5:ed:93:e3:24:75:fd:69:0b:2f:5b:1b:59:d4:f4: 39:cd:10:fc:6f:73:10:a7:a7:e5:10:7d:24:4c:39:bf:61:cc: 6b:c3:41:cb:ef:c8:03:d1:56:60:cb:7f:da:93:9b:de:a6:26: b5:37:5b:59:3c:84:80:57:c6:90:e3:6f:d6:0c:01:33:b6:ce: a6:97:b7:53:99:8f:8a:80:ee:ab:bb:ac:08:7e:22:25:d8:db: 97:36:30:c8:0b:e7:a2:5e:7f:19:a8:b1:85:4a:65:3b:10:cf: 97:91:43:f3:22:89:40:ba:b1:f4:9a:54:72:2a:fc:3d:b7:4e: d2:9e:5e:ba:54:de:c5:34:fa:67:a0:0f:bb:e1:4a:77:c7:eb: 6a:24:8d:dc:b6:d3:58:57:ec:37:e9:72:36:5e:77:ac:bd:b5: 02:e0:14:5f:ac:ed:d5:3e:eb:09:88:77:cc:74:73:98:13:09: 87:76:a7:90:d9:e6:e8:60:27:b2:b7:fb:01:c4:c9:c3:24:e6: 81:fb:09:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUwOTE5MDQxMzI3WhcNMjUwOTI2MDQxMzI3WjAYMRYwFAYD VQQDEw02OGNjZDg2Ny1lOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFAiWr4aACqJcWFuJtKRDLoY1e60bD2fUIh5jGVgd2aQWoqBCd3zN6sPM+s2 iVZFbZwYe72OKH5y6kcjQOQubR6uQgBDfPuUCkzVGZLGj2ur2Dks/LBb8jJmuRVL jl2P77EumJPdu2dk9wVry0nWnu/EmHX7LAoSc45YWiWMmsh977C7EvSjdmgYysLu aSKzfjpZwbFO10Vk1H8MW2CsPwGnjrepNMKWlzUOZpwUkLBJllx7A8fjkS8dqkhn dqRduGOJWGTzXYqhME81hf7/STwqKYkKA1Qr68AxkJBneb2sH9ABG5GZJ88NPw08 t6pjsoZsRRQuHFOMr1EOn+rAqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgiPCNF zQokeL1RP5CBDX94VtTUMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPupZXXkazyms7zOBy65fkXQIYgKLmLVEhHoRQ8maYvqUn1EPtsWx nTCMtOHsU8X5Y2MOPZTwDTTV7ZPjJHX9aQsvWxtZ1PQ5zRD8b3MQp6flEH0kTDm/ Ycxrw0HL78gD0VZgy3/ak5vepia1N1tZPISAV8aQ42/WDAEzts6ml7dTmY+KgO6r u6wIfiIl2NuXNjDIC+eiXn8ZqLGFSmU7EM+XkUPzIolAurH0mlRyKvw9t07Snl66 VN7FNPpnoA+74Up3x+tqJI3cttNYV+w36XI2XnesvbUC4BRfrO3VPusJiHfMdHOY EwmHdqeQ2eboYCeyt/sBxMnDJOaB+wkh -----END CERTIFICATE-----Generated at Fri Sep 19 18:34:30 2025 by rpki-client