$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: YXh4OgiB+ep2i4T6L/n3T46hVkMuc3BdhPdVF2AKwIo= Subject key identifier: B3:DF:29:F0:AA:2E:0F:2A:E8:E8:B6:C9:D7:15:1B:2E:83:FA:C2:8A Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 01B7 Signing time: Sat 23 Aug 2025 03:19:36 +0000 Manifest this update: Sat 23 Aug 2025 03:19:36 +0000 Manifest next update: Sat 30 Aug 2025 03:19:36 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: oCZ8pwN/lailHRxILVScGk+6/PW10Y/hn315OAfXZLs=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Aug 23 03:19:36 2025 GMT Not After : Aug 30 03:19:36 2025 GMT Subject: CN=68a93348-f1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:c1:94:73:bc:fe:1f:3e:15:d0:b0:8e:ad: 03:2a:33:05:3b:a2:76:8a:f0:84:7e:03:e0:72:e4: 8d:51:a8:de:73:53:8a:e6:0f:44:8b:23:19:62:de: df:ed:00:c2:30:26:8d:6f:c8:e2:16:a8:a3:a6:0b: e6:c0:82:f9:82:b1:bc:2d:ea:78:0c:72:d7:51:d9: 20:9e:f4:35:36:24:01:c5:49:66:52:5a:c2:39:fe: 9a:8e:93:f4:77:85:c7:df:2b:de:0c:56:60:74:75: cb:ab:d0:64:55:22:5f:e4:b4:f7:e7:74:65:cb:6c: 2d:b1:a0:fd:54:38:2f:fd:9c:bf:b8:2f:0e:6a:ec: 81:d9:62:4e:fa:81:b5:b9:96:64:7d:45:50:d8:6f: 69:ea:f1:ce:7b:57:89:77:ae:ac:be:95:2b:70:0c: 2d:f5:a9:3a:28:8b:00:03:19:5f:21:34:ff:43:dd: ee:aa:cd:ef:2f:92:e3:20:97:49:1d:13:cb:83:0f: f8:75:6e:c9:8c:78:c3:c3:b1:22:0a:8f:bf:0a:5d: 66:ab:72:b7:fe:a2:db:91:c5:14:b1:e2:c7:5d:fa: 21:87:57:4f:ff:03:c5:ed:4b:47:b2:78:96:c2:f7: 01:7a:3a:96:18:7e:17:cb:a3:d5:47:46:bf:6e:c1: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DF:29:F0:AA:2E:0F:2A:E8:E8:B6:C9:D7:15:1B:2E:83:FA:C2:8A X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ff:ab:70:e4:b9:5e:68:b6:54:ad:8f:c7:dd:47:a7:5c:01: 2f:ec:64:88:f4:5e:c2:b8:4b:17:c5:a9:33:95:7c:16:1f:6f: d6:d8:6b:1f:36:ba:40:ab:7f:74:e1:08:0e:b6:8f:29:c2:0d: 83:ba:46:bb:f5:2d:26:ad:fc:4b:6d:2d:08:96:86:f6:1d:db: 11:fe:bf:22:46:6f:00:34:26:ea:91:0e:1c:dc:50:53:55:1c: 92:3d:0b:22:d8:cb:08:08:9e:f7:91:2b:13:eb:2a:ff:92:4f: 6a:0a:c0:8b:d1:82:c5:7a:9a:6c:86:92:78:15:c4:43:28:f1: bc:3f:1a:eb:1d:a3:19:02:1a:82:be:12:83:77:3b:3e:57:be: 1a:39:3f:96:68:cc:b8:3e:17:18:4b:cf:5e:7d:8d:fa:67:89: 9a:b6:d6:b5:94:2c:07:b0:93:13:6a:09:79:9d:3b:04:16:27: 17:14:f6:22:9a:3f:75:8a:8e:21:10:f5:dc:19:b3:9d:30:1e: 17:4f:52:65:c3:1b:14:a6:53:7f:e7:ba:5f:3d:2d:cb:19:b6: af:f7:60:77:cd:13:cf:9a:d0:88:6c:66:2d:d6:72:15:b5:8a: 05:c9:1d:26:de:a8:f5:9a:1f:62:c7:7e:23:71:ea:82:f9:3d: 18:cc:9b:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUwODIzMDMxOTM2WhcNMjUwODMwMDMxOTM2WjAYMRYwFAYD VQQDEw02OGE5MzM0OC1mMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3LBlHO8/h8+FdCwjq0DKjMFO6J2ivCEfgPgcuSNUajec1OK5g9EiyMZYt7f 7QDCMCaNb8jiFqijpgvmwIL5grG8Lep4DHLXUdkgnvQ1NiQBxUlmUlrCOf6ajpP0 d4XH3yveDFZgdHXLq9BkVSJf5LT353Rly2wtsaD9VDgv/Zy/uC8OauyB2WJO+oG1 uZZkfUVQ2G9p6vHOe1eJd66svpUrcAwt9ak6KIsAAxlfITT/Q93uqs3vL5LjIJdJ HRPLgw/4dW7JjHjDw7EiCo+/Cl1mq3K3/qLbkcUUseLHXfohh1dP/wPF7UtHsniW wvcBejqWGH4Xy6PVR0a/bsGQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPfKfCq Lg8q6Oi2ydcVGy6D+sKKMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS/6tw5LleaLZUrY/H3UenXAEv7GSI9F7CuEsXxakzlXwWH2/W2Gsf NrpAq3904QgOto8pwg2Duka79S0mrfxLbS0Ilob2HdsR/r8iRm8ANCbqkQ4c3FBT VRySPQsi2MsICJ73kSsT6yr/kk9qCsCL0YLFeppshpJ4FcRDKPG8PxrrHaMZAhqC vhKDdzs+V74aOT+WaMy4PhcYS89efY36Z4matta1lCwHsJMTagl5nTsEFicXFPYi mj91io4hEPXcGbOdMB4XT1JlwxsUplN/57pfPS3LGbav92B3zRPPmtCIbGYt1nIV tYoFyR0m3qj1mh9ix34jceqC+T0YzJvd -----END CERTIFICATE-----Generated at Sat Aug 23 07:21:01 2025 by rpki-client