$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: YJXNTcNtkOAMC0obTQKUE80BZgoJL55TfBaJF8jwY4o= Subject key identifier: 86:B2:00:14:77:4F:D2:1D:2A:42:29:A8:CA:D1:7C:14:80:0A:77:E4 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 06A7 Signing time: Wed 02 Jul 2025 23:28:15 +0000 Manifest this update: Wed 02 Jul 2025 23:28:15 +0000 Manifest next update: Wed 09 Jul 2025 23:28:15 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: jfU/tCZlLQcFn9y9Ww3+WNLSCVRpmRRZ+jOCpD4ysug=) 2: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: dYbJZqNom/l1NiiDKkOTw8oOoBqhK67yv8UuGT2by2s=) 3: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: QGMsCxHtn5F+EfUp5uawCMMpfTHEMExN77Hj2Muh93w=) 4: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: +qzxrrbDAbjm5oGRWL2M9bgOfHEjl4iskK+N/J81qak=) 5: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (hash: hSCKbETyEcrfwdR62qLCMoskeNw2yhn+vArByqXZY/4=) 6: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: JtKKxCXridSwy6SJ7Mx9WW/156HamhanSTK24tMN9c0=) 7: 9CDF55D87D6A11EEA59E8C3FC4F9AE02.roa (hash: mDnMAOX1D7nrgDR/qLwtv3995W8fLU9iXorAjw/Tyy8=) 8: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 5LHlWW/HIHhEuVs7lyfpyvCjCxzDLd5MFI+tQXgroXY=) 9: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: i9lNfJhnnW8QvG2a+A3cDgHR8+veJShI1zYY4cZGLCQ=) 10: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: jbI9nyIyGvuuwD7R5pJI5zo/f8yqDWKnyeAgYYtwurY=) 11: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc=) 12: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: 3uteNlhKYK6907KykR8gAU+oHBxNf/k9LdbZlDl3X5w=) 13: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: VNTbmafGr2Ck68du6AOcxR3XdT37BiEBd7yF9e6N088=) 14: 2C928134155711F099BFE331C4F9AE02.roa (hash: 47lhJb8uhRs8ieTedrS6V4SnBxu8DNcKDZI2uXa5ZQU=) 15: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: S4VX1CO0OF3+Ep6xnyvx/Uv1NHR9lS+F0nBxbNUE0l8=) 16: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 4PiyophquWuYIG0+K5ceNOm7ogfnJHTsjtfCsP+bCrw=) 17: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=) 18: 72DF94424A8611F08884C659C4F9AE02.roa (hash: qmNY1eT8lZOzhKaaMTZ00EicG6iJpbcFbDvpSF0q2To=) 19: 9EB8A27A675C11EE81835581C4F9AE02.roa (hash: OEqTkDyc1rPh8C5CXLgkDLbM+SU7rHYFTB3EDRvvg8I=) 20: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: WvwQUH+4dWCkhf9AYHECGHhhbwO1gaxV2Z7Th1HDWV0=) 21: 757D79F84A8611F08884C659C4F9AE02.roa (hash: 723XHYDyoBJXCZpo9jeRz3e04DkW/NGngxzKchgI3rs=) 22: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ciPuwXvDJnxfTSOuaqjvu4/srjMYa/gs+zRsxwhbhY0=) 23: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: j+WGmLwArNdHL1JjdRwu3siLk/ufBfcUnE+rg1B5suo=) 24: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=) 25: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: B3UEiEYw2WKPOdrQO2wqkgon16D3Efz81MuIIEKCBB8=) 26: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: k4CowUTHd4JWLT5TzNHxTN/JDFAXBiiVbvhmdg4E2JI=) 27: 3DC39FDAE82D11EF86C76B75C4F9AE02.roa (hash: Vg52JJ41h9xujYIYRb6O5TyTlL0/xesWwRzbmWjYrbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Jul 2 23:28:15 2025 GMT Not After : Jul 9 23:28:15 2025 GMT Subject: CN=6865c08f-22a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:2a:d6:ff:63:6e:e2:ee:6a:2f:71:67:40: 01:c4:a9:6f:4f:39:92:2f:71:b5:a7:3a:22:90:eb: 5f:ad:32:ac:24:89:ff:92:63:1a:ee:35:93:fb:23: 6b:ce:8b:08:fa:e7:71:c1:56:6e:db:48:ef:b6:a7: fd:e0:a6:e9:39:76:7d:36:6f:a2:09:e6:5b:c7:0b: fc:8e:53:bb:79:64:e5:48:99:9e:51:0d:06:c1:9d: c7:71:d7:a0:3d:1c:be:44:ac:5d:9f:d3:0e:aa:6f: b5:1a:f1:fb:65:fe:31:c6:9a:83:94:8a:0a:8b:5b: f4:3c:38:ae:03:3d:ca:dc:bb:e7:4d:cf:5e:3a:76: d5:3d:73:48:67:42:0a:9f:1d:9c:c1:41:cf:d4:48: c4:43:43:27:0e:1e:4a:7b:42:bf:a6:ca:27:b1:ec: a1:a1:fc:e4:e4:a8:eb:8d:41:87:48:51:b1:c6:57: bb:87:87:9a:a6:aa:95:47:0a:1a:8b:53:cc:17:c8: 9b:83:cc:b1:a3:ac:63:84:97:8a:58:b9:ef:b9:3c: d3:b1:41:37:1e:cf:3b:fc:d3:65:68:d3:4c:8a:e1: 72:53:a7:80:2d:c4:ce:17:1c:38:f4:33:7b:88:69: 6d:e8:c8:fd:cd:02:39:b0:e4:f8:0d:fa:78:26:4e: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B2:00:14:77:4F:D2:1D:2A:42:29:A8:CA:D1:7C:14:80:0A:77:E4 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:26:68:7e:97:aa:04:9b:23:f1:24:d6:02:3e:64:e3:43:33: 0f:b6:b2:bb:cb:56:f2:d3:2b:c4:5e:bb:3a:8c:9d:89:79:15: 36:65:f0:18:74:ee:b7:4a:f2:4b:aa:58:d2:0c:fd:26:23:99: 80:ac:7a:c3:78:d7:2c:cb:d9:1e:12:7f:69:47:37:28:04:38: f1:b4:b3:36:32:94:2e:00:04:dc:99:71:26:79:33:d9:e5:b9: c3:e1:b1:a1:d4:52:ca:dd:3a:b9:ca:09:b1:a6:3f:d6:f3:70: a8:85:fc:06:2b:a8:e5:f7:e4:b4:a7:2d:c7:6f:ff:52:08:fa: 31:53:c7:f5:e1:eb:a8:da:49:56:fc:2a:5a:c5:be:e9:a5:12: 4d:b6:a1:45:e3:8e:e1:56:e5:15:a6:63:73:e9:52:2c:2f:2d: 72:7b:39:c5:d5:b1:cb:28:99:96:f5:48:0c:14:a5:ee:89:59: 6a:56:1d:2c:3c:e6:69:e0:3e:13:8b:69:2b:9b:c1:34:c8:89: c3:5b:ca:f5:d9:a1:eb:34:e1:e3:3f:bd:33:ad:a3:ea:0f:7a: 57:33:f4:7c:0b:64:59:3e:9c:25:6b:02:2c:65:da:64:f9:b5: f0:59:0c:9e:a5:11:b5:2b:ce:58:ad:b5:ae:57:ca:d6:ba:44: df:bc:ee:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNzAyMjMyODE1WhcNMjUwNzA5MjMyODE1WjAYMRYwFAYD VQQDEw02ODY1YzA4Zi0yMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngYq1v9jbuLuai9xZ0ABxKlvTzmSL3G1pzoikOtfrTKsJIn/kmMa7jWT+yNr zosI+udxwVZu20jvtqf94KbpOXZ9Nm+iCeZbxwv8jlO7eWTlSJmeUQ0GwZ3Hcdeg PRy+RKxdn9MOqm+1GvH7Zf4xxpqDlIoKi1v0PDiuAz3K3LvnTc9eOnbVPXNIZ0IK nx2cwUHP1EjEQ0MnDh5Ke0K/psonseyhofzk5KjrjUGHSFGxxle7h4eapqqVRwoa i1PMF8ibg8yxo6xjhJeKWLnvuTzTsUE3Hs87/NNlaNNMiuFyU6eALcTOFxw49DN7 iGlt6Mj9zQI5sOT4Dfp4Jk7ciwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIayABR3 T9IdKkIpqMrRfBSACnfkMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJmh+l6oEmyPxJNYCPmTjQzMPtrK7y1by0yvEXrs6jJ2JeRU2ZfAY dO63SvJLqljSDP0mI5mArHrDeNcsy9keEn9pRzcoBDjxtLM2MpQuAATcmXEmeTPZ 5bnD4bGh1FLK3Tq5ygmxpj/W83CohfwGK6jl9+S0py3Hb/9SCPoxU8f14euo2klW /Cpaxb7ppRJNtqFF447hVuUVpmNz6VIsLy1yeznF1bHLKJmW9UgMFKXuiVlqVh0s POZp4D4Ti2krm8E0yInDW8r12aHrNOHjP70zraPqD3pXM/R8C2RZPpwlawIsZdpk +bXwWQyepRG1K85YrbWuV8rWukTfvO4w -----END CERTIFICATE-----Generated at Thu Jul 3 18:18:43 2025 by rpki-client