$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json) Hash identifier: tv/QlpuTGtuRSiAbGREEDTjBasCz/RaEKo1dFtySwR8= Subject key identifier: 20:AE:3D:10:98:C7:05:7C:98:01:A4:BC:4A:A6:6A:B1:48:2C:B8:42 Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft Manifest number: 01B1 Signing time: Sat 23 Aug 2025 03:24:36 +0000 Manifest this update: Sat 23 Aug 2025 03:24:35 +0000 Manifest next update: Sat 30 Aug 2025 03:24:35 +0000 Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: UmZ/NXU6FsH19RulEL/v/4hYzCDSqZ+rPXbMmEKXQyY=) 2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=) 3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=) 4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=) 5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=) 6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Validity Not Before: Aug 23 03:24:35 2025 GMT Not After : Aug 30 03:24:35 2025 GMT Subject: CN=68a93474-6364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:97:83:e2:87:a7:7e:58:87:ca:12:26:36: 35:d5:18:c0:96:a0:6d:af:7e:ee:31:1c:af:39:be: 6a:81:cc:52:8b:90:92:2e:a6:0c:50:95:46:ed:d8: 90:49:0d:b1:7e:8d:b9:56:8f:43:83:cc:78:20:80: c8:b3:c2:8d:c9:94:4c:80:57:8e:0c:02:f8:c8:0d: 2e:e0:c9:0f:4e:8f:29:02:ba:6a:bd:b7:f0:12:0a: 3b:48:42:89:72:03:11:91:53:a8:68:dd:63:ae:73: c7:52:49:d6:49:0f:88:57:4e:28:76:9d:ca:03:4d: 80:99:d1:53:44:c2:04:5d:91:af:a9:41:3c:0d:f7: a4:ea:92:ca:f7:68:f7:c1:45:88:e7:54:74:a8:23: a6:20:80:87:f9:d0:15:7b:75:1b:c5:d8:38:94:66: 14:23:df:dc:19:69:f0:ef:22:c9:e2:8c:7d:f4:ba: 43:a4:af:54:75:b4:a6:2a:8d:a5:a0:2c:54:6a:83: 18:1f:77:9a:be:f1:6b:3c:74:79:12:a8:d6:cb:0e: 77:93:d1:25:b2:eb:b3:c0:57:2a:db:5c:46:1a:e1: fd:21:1e:4f:9a:9a:4f:f8:de:32:4a:e7:53:cb:5c: a8:92:a2:5b:c0:96:40:c6:f6:c6:b7:81:8f:77:1b: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:3D:10:98:C7:05:7C:98:01:A4:BC:4A:A6:6A:B1:48:2C:B8:42 X509v3 Authority Key Identifier: keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8e:0b:b6:c5:2d:e7:7a:3e:f2:d8:01:ca:10:0f:51:89:64: e5:58:fb:ad:ed:54:e3:e5:dd:c5:6d:d3:2b:3b:a7:57:34:25: 92:f1:5b:ba:6b:e7:51:f5:11:75:e2:a9:04:da:52:84:91:9e: 7d:8a:85:c2:ad:19:ef:e7:33:ce:5e:ac:8e:a7:3e:23:f5:e6: 25:32:ff:fe:00:42:94:ea:11:f1:0c:9f:01:82:32:83:9f:ea: 3a:52:5b:ca:21:68:66:d8:d3:1b:cf:b6:08:0b:4a:b1:99:b5: 68:50:17:27:d0:e4:01:49:be:16:23:22:f2:7d:c7:69:98:c7: bd:fb:cc:46:d4:af:b2:a8:e1:38:ab:f6:70:3f:98:d4:88:1b: d1:21:ec:86:04:05:6c:b2:78:bf:8b:02:39:59:82:8a:19:76: b2:30:3e:32:88:54:d0:0d:62:16:74:e0:ca:c1:e4:47:aa:a0: 5b:f0:11:f2:17:05:2b:4a:a7:8a:3e:71:a4:2b:d9:9b:90:15: f3:1d:00:e9:5b:87:12:d9:c0:a7:e5:6b:db:5b:61:3f:72:64: ea:f1:cc:40:bf:88:9f:bd:83:63:48:d7:d2:a6:6a:5e:55:fd: 2d:59:b2:f7:f2:de:44:97:ac:73:40:e4:96:81:35:0c:d5:d6: dc:94:c8:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3 NDYxOTkzODMwHhcNMjUwODIzMDMyNDM1WhcNMjUwODMwMDMyNDM1WjAYMRYwFAYD VQQDEw02OGE5MzQ3NC02MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyICXg+KHp35Yh8oSJjY11RjAlqBtr37uMRyvOb5qgcxSi5CSLqYMUJVG7diQ SQ2xfo25Vo9Dg8x4IIDIs8KNyZRMgFeODAL4yA0u4MkPTo8pArpqvbfwEgo7SEKJ cgMRkVOoaN1jrnPHUknWSQ+IV04odp3KA02AmdFTRMIEXZGvqUE8Dfek6pLK92j3 wUWI51R0qCOmIICH+dAVe3Ubxdg4lGYUI9/cGWnw7yLJ4ox99LpDpK9UdbSmKo2l oCxUaoMYH3eavvFrPHR5EqjWyw53k9ElsuuzwFcq21xGGuH9IR5PmppP+N4ySudT y1yokqJbwJZAxvbGt4GPdxvA7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCuPRCY xwV8mAGkvEqmarFILLhCMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4 UjRMbWYyWV9QQmwwWVprNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+jgu2xS3nej7y2AHKEA9RiWTlWPut7VTj5d3FbdMrO6dXNCWS8Vu6 a+dR9RF14qkE2lKEkZ59ioXCrRnv5zPOXqyOpz4j9eYlMv/+AEKU6hHxDJ8BgjKD n+o6UlvKIWhm2NMbz7YIC0qxmbVoUBcn0OQBSb4WIyLyfcdpmMe9+8xG1K+yqOE4 q/ZwP5jUiBvRIeyGBAVssni/iwI5WYKKGXayMD4yiFTQDWIWdODKweRHqqBb8BHy FwUrSqeKPnGkK9mbkBXzHQDpW4cS2cCn5WvbW2E/cmTq8cxAv4ifvYNjSNfSpmpe Vf0tWbL38t5El6xzQOSWgTUM1dbclMiH -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:25 2025 by rpki-client