$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: yNakTQMHv6VUqVim4sSKKgBWYnCHF7iI66uaGK5a758= Subject key identifier: A5:B0:43:88:B9:42:D0:E6:D6:44:78:41:D7:DF:B4:4C:17:BF:92:3B Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 46 Signing time: Sat 23 Aug 2025 07:40:08 +0000 Manifest this update: Sat 23 Aug 2025 07:40:07 +0000 Manifest next update: Sat 30 Aug 2025 07:40:07 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: 4Bt04bWQ/1YpkTP5UXLC16iHzf1472Uutifrv6Rj4Ic=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Aug 23 07:40:07 2025 GMT Not After : Aug 30 07:40:07 2025 GMT Subject: CN=68a97058-4d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:51:9e:27:9e:4d:46:db:2b:8f:3a:2d:7a: 46:ea:8f:32:d0:ea:4e:a9:ec:e3:6e:59:1f:ca:73: 22:b0:40:82:88:0c:23:17:94:ea:ef:5f:91:77:11: 0e:0d:31:a1:5d:2f:34:22:c7:db:24:4b:57:1a:ad: 42:58:a2:d3:81:df:a8:1b:d2:21:86:44:bf:1a:8d: 6f:c1:06:aa:3d:16:91:5e:78:7a:e3:41:77:bb:9e: 9d:fb:61:1e:0b:ab:eb:f6:d7:f8:24:05:35:53:4d: a1:7f:38:05:fd:3b:98:4f:36:14:bd:c1:9f:5c:d6: 33:7a:15:83:71:29:8a:ba:78:b4:b5:f4:c2:7b:10: e7:1b:55:f8:fe:b7:11:e0:59:50:d5:9f:67:59:f4: d4:d5:a7:3d:59:55:e2:c3:db:43:e9:91:3b:78:78: cb:1a:7c:56:3e:31:3b:36:19:5a:86:ee:19:ba:67: 03:b9:2c:66:5b:d5:41:c6:17:41:5f:62:8b:c4:e4: d0:5a:30:84:1c:9c:3f:c8:18:69:fd:67:de:4c:9d: 0e:b5:16:d3:ec:e7:3d:33:0b:f1:c4:57:79:95:2c: 33:22:7e:c3:48:86:c6:80:a3:c0:13:2a:e5:25:43: c4:b9:ba:7b:d4:0e:97:84:66:37:41:9a:79:c2:e4: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B0:43:88:B9:42:D0:E6:D6:44:78:41:D7:DF:B4:4C:17:BF:92:3B X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:51:7f:c7:bb:07:9e:64:46:d8:fe:12:98:29:13:82:0c: 76:b6:3f:0b:a3:59:00:2e:a4:f9:57:66:62:16:84:b0:6b:50: 5a:45:38:d8:e6:22:11:0a:16:20:dc:dd:c3:97:96:b7:55:ca: 38:ab:84:9a:b0:38:b1:81:07:20:a5:eb:bf:a6:9d:3d:48:8b: 7c:a8:ab:0b:dc:7a:32:dd:cd:18:55:9f:64:32:63:07:b3:51: 48:5e:6f:b6:81:a6:48:af:e3:72:b7:e1:11:3c:57:ac:4e:a4: d8:2c:35:4e:8e:2b:22:3b:89:7d:69:5d:39:fd:c2:69:d1:9b: 0a:a4:55:71:b7:0c:21:23:ae:a2:0e:8e:3e:81:e0:cd:06:2f: 5c:c9:dd:85:91:1f:50:b4:49:9a:0a:78:76:b6:5b:1b:af:7b: 79:c3:27:4d:ee:f5:15:a1:5e:16:7d:24:73:e0:6a:68:7a:59: 02:3e:90:02:15:76:f5:c1:22:9b:7c:be:15:00:8a:4e:5b:86: b3:94:17:c9:c6:ec:39:f6:c8:de:b1:56:1b:95:1b:16:d4:11: b8:60:5e:b5:99:3e:8c:1a:9c:9d:d3:95:2f:cb:8c:dc:d4:ea: 34:42:db:eb:be:2d:1f:d4:a1:f8:5f:79:c9:a1:66:12:29:ad: ae:b3:37:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA4MjMwNzQwMDdaFw0yNTA4MzAwNzQwMDdaMBgxFjAUBgNV BAMTDTY4YTk3MDU4LTRkOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY0FGeJ55NRtsrjzotekbqjzLQ6k6p7ONuWR/KcyKwQIKIDCMXlOrvX5F3EQ4N MaFdLzQix9skS1carUJYotOB36gb0iGGRL8ajW/BBqo9FpFeeHrjQXe7np37YR4L q+v21/gkBTVTTaF/OAX9O5hPNhS9wZ9c1jN6FYNxKYq6eLS19MJ7EOcbVfj+txHg WVDVn2dZ9NTVpz1ZVeLD20PpkTt4eMsafFY+MTs2GVqG7hm6ZwO5LGZb1UHGF0Ff YovE5NBaMIQcnD/IGGn9Z95MnQ61FtPs5z0zC/HEV3mVLDMifsNIhsaAo8ATKuUl Q8S5unvUDpeEZjdBmnnC5IRzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpbBDiLlC 0ObWRHhB19+0TBe/kjswHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISDUX/HuweeZEbY/hKYKROCDHa2PwujWQAupPlXZmIWhLBrUFpFONjm IhEKFiDc3cOXlrdVyjirhJqwOLGBByCl67+mnT1Ii3yoqwvcejLdzRhVn2QyYwez UUheb7aBpkiv43K34RE8V6xOpNgsNU6OKyI7iX1pXTn9wmnRmwqkVXG3DCEjrqIO jj6B4M0GL1zJ3YWRH1C0SZoKeHa2Wxuve3nDJ03u9RWhXhZ9JHPgamh6WQI+kAIV dvXBIpt8vhUAik5bhrOUF8nG7Dn2yN6xVhuVGxbUEbhgXrWZPowanJ3TlS/LjNzU 6jRC2+u+LR/UofhfecmhZhIpra6zN6Q= -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:28 2025 by rpki-client