$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: 1FiwveRqhQhHsJ1q/zoQLs5/ElYx6PwnrY9ip6yr1CQ= Subject key identifier: 69:69:66:DA:01:1F:36:55:71:56:1E:0B:48:AF:24:99:6F:81:CE:BC Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0617 Signing time: Fri 22 Aug 2025 23:00:20 +0000 Manifest this update: Fri 22 Aug 2025 23:00:19 +0000 Manifest next update: Fri 29 Aug 2025 23:00:19 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: rCDzhbBENIBjHhyTuZeritJcTrb9Ba+QtjnQjI0MQJw=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Aug 22 23:00:19 2025 GMT Not After : Aug 29 23:00:19 2025 GMT Subject: CN=68a8f683-870c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:47:c0:d5:21:87:9a:3c:e4:9d:38:be:08: 79:f4:8f:e6:10:e0:34:c1:15:28:28:da:91:ad:a6: 5b:bc:fc:94:9a:67:69:38:22:1b:59:4c:f5:26:32: 87:01:ec:81:0c:71:70:3c:d3:47:cf:92:4c:02:28: 6e:cc:e0:0a:02:95:f0:9a:02:8c:c3:72:87:18:03: f5:71:93:34:54:9f:f7:af:48:d3:bd:04:b8:24:12: ac:88:e0:a1:8a:3e:41:c8:68:6c:43:8e:97:c8:57: 51:cf:62:ab:d6:a7:8d:b1:22:44:51:64:33:91:99: 40:27:e2:73:33:8b:07:a8:1e:22:3e:b9:14:f0:b1: 71:06:c3:d7:20:f8:f6:4e:af:db:65:da:f6:58:79: 97:7c:d2:e8:66:d8:38:6d:0a:f7:f4:03:67:7b:2e: c0:63:64:dd:d4:31:65:f3:4d:63:5a:d0:db:95:34: 17:b0:dc:ad:44:29:8d:f8:c2:27:08:56:19:cb:8d: 2f:24:8b:b8:49:25:38:09:77:ed:43:ef:02:a3:48: 61:c9:2c:c1:ed:ba:c2:28:4f:fa:f0:39:d3:21:ce: c9:9f:32:e7:14:30:0a:88:7f:51:22:e4:e8:1d:cd: b5:7b:7b:cb:c8:0c:22:e9:f6:05:0e:cd:78:ba:d9: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:66:DA:01:1F:36:55:71:56:1E:0B:48:AF:24:99:6F:81:CE:BC X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:15:23:e1:c2:bf:31:d8:16:4a:71:44:10:09:b9:7b:c4: 14:5b:a6:8d:23:2f:8d:da:29:7a:20:da:6b:7b:f5:85:d5:f8: c6:73:dd:59:7e:61:d3:b6:3b:5b:90:11:f9:cc:a9:41:f1:ec: d7:2b:f3:ec:6c:0f:4a:38:6d:36:dc:e0:fb:1f:4d:c5:fe:ce: a8:f4:69:a3:d7:aa:da:f0:af:49:87:39:d7:49:b9:90:84:34: d6:f7:48:3a:35:18:a1:22:05:7f:e9:3d:f6:ee:e6:c5:1f:73: 0b:e9:75:2e:ec:ce:bb:59:67:35:ab:88:e4:3d:bf:ce:42:21: 66:cf:a5:f9:86:19:ea:ed:6e:3d:97:81:55:6c:df:e3:7b:54: 78:04:3f:46:94:16:f6:af:52:b9:7d:d7:2b:5c:ba:79:bd:80: 80:6b:bb:f3:db:d8:72:18:9d:d9:e9:a8:a6:10:3a:93:90:04: 21:0c:69:2e:7d:20:9b:06:42:80:6c:a1:ff:65:61:4e:8f:b7: 45:b3:81:27:1f:fd:fd:7a:dc:ae:2e:38:81:9b:a0:80:77:b3: f6:eb:ad:b5:27:b0:b3:14:b4:b2:c9:99:25:9e:c1:65:cd:76: 7f:36:66:ab:62:65:9d:58:cd:07:eb:28:ff:fe:45:5a:c9:19: 6f:06:67:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUwODIyMjMwMDE5WhcNMjUwODI5MjMwMDE5WjAYMRYwFAYD VQQDEw02OGE4ZjY4My04NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjJHwNUhh5o85J04vgh59I/mEOA0wRUoKNqRraZbvPyUmmdpOCIbWUz1JjKH AeyBDHFwPNNHz5JMAihuzOAKApXwmgKMw3KHGAP1cZM0VJ/3r0jTvQS4JBKsiOCh ij5ByGhsQ46XyFdRz2Kr1qeNsSJEUWQzkZlAJ+JzM4sHqB4iPrkU8LFxBsPXIPj2 Tq/bZdr2WHmXfNLoZtg4bQr39ANney7AY2Td1DFl801jWtDblTQXsNytRCmN+MIn CFYZy40vJIu4SSU4CXftQ+8Co0hhySzB7brCKE/68DnTIc7JnzLnFDAKiH9RIuTo Hc21e3vLyAwi6fYFDs14utkH/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlpZtoB HzZVcVYeC0ivJJlvgc68MB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbQBUj4cK/MdgWSnFEEAm5e8QUW6aNIy+N2il6INpre/WF1fjGc91Z fmHTtjtbkBH5zKlB8ezXK/PsbA9KOG023OD7H03F/s6o9Gmj16ra8K9JhznXSbmQ hDTW90g6NRihIgV/6T327ubFH3ML6XUu7M67WWc1q4jkPb/OQiFmz6X5hhnq7W49 l4FVbN/je1R4BD9GlBb2r1K5fdcrXLp5vYCAa7vz29hyGJ3Z6aimEDqTkAQhDGku fSCbBkKAbKH/ZWFOj7dFs4EnH/39etyuLjiBm6CAd7P26621J7CzFLSyyZklnsFl zXZ/NmarYmWdWM0H6yj//kVayRlvBmd7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:24:55 2025 by rpki-client