$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: qNVDkvFHQ6J4gKiBf9Mtj7KCSQ5parVK054vJ6YQSPg= Subject key identifier: 3A:46:15:F3:22:99:98:4C:BE:50:A0:24:E3:46:C5:76:B0:9D:77:C6 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0CAE Signing time: Sun 24 Aug 2025 18:12:11 +0000 Manifest this update: Sun 24 Aug 2025 18:12:11 +0000 Manifest next update: Sun 31 Aug 2025 18:12:11 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: Z7lBQbDORDJVyyTTOkJjtUDyW5r5/YsWa4q9fLUJMf8=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Aug 24 18:12:11 2025 GMT Not After : Aug 31 18:12:11 2025 GMT Subject: CN=68ab55fb-0db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:0f:41:36:85:3b:b7:86:09:c4:1c:da:b2: 8b:c1:fa:1d:65:fa:45:b0:f6:69:f7:57:e1:29:94: 7f:dc:0e:dc:33:cd:6e:ad:29:dc:4e:e1:cd:70:97: c5:b0:3f:bf:5a:1b:dc:96:fc:40:14:f2:22:3b:9f: 03:5b:b3:13:4e:7e:cd:48:9b:17:49:ba:99:53:49: 53:b9:c3:c8:1d:27:00:65:db:cd:4a:54:6d:8d:4c: 10:fb:b5:ee:cd:35:bc:45:a5:c5:50:e9:03:6d:b9: 85:7b:aa:a7:00:81:36:97:d3:ee:e8:d0:91:eb:1c: bb:60:e8:e0:c2:27:6e:d8:bb:23:fd:e1:f3:07:8d: 24:e0:20:2b:fc:9a:45:f4:a7:4e:1a:75:dd:8a:65: c9:e6:c1:b3:bf:c7:5c:79:6c:ad:b2:cd:19:33:d2: b2:d2:95:56:00:87:75:35:a8:0b:3f:0a:15:2a:15: 8a:e0:c9:0f:78:c4:fe:d3:ae:1e:09:ec:bf:e6:d7: 12:c1:e3:b8:f4:8b:85:fd:99:2f:9c:3e:57:64:68: 05:d8:99:3f:1a:70:74:66:5e:28:3c:c4:b7:92:ca: 58:9a:d8:7e:4a:57:1d:aa:f7:e8:fd:be:73:3e:74: 2c:15:4d:13:55:7c:d9:94:15:52:02:2b:6f:50:a6: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:46:15:F3:22:99:98:4C:BE:50:A0:24:E3:46:C5:76:B0:9D:77:C6 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:64:81:1a:8f:fd:94:f0:70:8e:c9:48:ae:fe:df:09:7f:04: b8:b2:e4:d1:18:b3:f3:59:11:8c:93:5a:a5:11:99:7b:6d:98: 2c:5c:71:c0:97:b3:a1:80:00:ff:86:ff:a3:00:b4:a4:ab:8b: a5:e5:e0:ad:ba:cb:e0:e0:35:1c:06:5f:55:9f:a8:dc:96:b2: 5e:a6:21:67:21:48:c4:38:4f:67:45:17:56:f3:51:d8:ce:99: 98:d0:e2:a6:7d:e6:02:a0:a8:90:e2:9d:42:fa:4e:eb:66:44: 3b:48:2e:bf:12:5b:a4:0c:0b:44:6c:60:19:9e:66:29:20:08: c0:58:2e:bd:63:88:fa:9b:b0:ae:20:d0:33:8c:4f:e4:f7:f6: 46:25:15:c3:c6:e2:a5:a1:03:f1:e5:74:00:97:f0:c7:0a:77: 0b:ab:f1:ef:64:37:14:ec:a9:81:b0:92:2d:2e:f6:8a:48:e9: 72:f4:89:25:b5:0b:12:ec:93:da:19:40:2e:fa:0d:cf:5a:7f: 8c:0d:72:99:52:52:02:23:aa:1f:3b:f0:76:2f:e6:c3:56:02: 25:02:61:8a:b8:9b:6f:40:1d:5a:11:0e:d0:b9:74:cd:6a:0e: d7:49:ea:76:05:ff:0a:0b:76:11:56:c6:9c:6f:3a:0a:12:64: 61:36:52:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUwODI0MTgxMjExWhcNMjUwODMxMTgxMjExWjAYMRYwFAYD VQQDEw02OGFiNTVmYi0wZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CUPQTaFO7eGCcQc2rKLwfodZfpFsPZp91fhKZR/3A7cM81urSncTuHNcJfF sD+/WhvclvxAFPIiO58DW7MTTn7NSJsXSbqZU0lTucPIHScAZdvNSlRtjUwQ+7Xu zTW8RaXFUOkDbbmFe6qnAIE2l9Pu6NCR6xy7YOjgwidu2Lsj/eHzB40k4CAr/JpF 9KdOGnXdimXJ5sGzv8dceWytss0ZM9Ky0pVWAId1NagLPwoVKhWK4MkPeMT+064e Cey/5tcSweO49IuF/ZkvnD5XZGgF2Jk/GnB0Zl4oPMS3kspYmth+Slcdqvfo/b5z PnQsFU0TVXzZlBVSAitvUKa9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpGFfMi mZhMvlCgJONGxXawnXfGMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZIEaj/2U8HCOyUiu/t8JfwS4suTRGLPzWRGMk1qlEZl7bZgsXHHA l7OhgAD/hv+jALSkq4ul5eCtusvg4DUcBl9Vn6jclrJepiFnIUjEOE9nRRdW81HY zpmY0OKmfeYCoKiQ4p1C+k7rZkQ7SC6/ElukDAtEbGAZnmYpIAjAWC69Y4j6m7Cu INAzjE/k9/ZGJRXDxuKloQPx5XQAl/DHCncLq/HvZDcU7KmBsJItLvaKSOly9Ikl tQsS7JPaGUAu+g3PWn+MDXKZUlICI6ofO/B2L+bDVgIlAmGKuJtvQB1aEQ7QuXTN ag7XSep2Bf8KC3YRVsacbzoKEmRhNlIb -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:06 2025 by rpki-client