$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: x/KhTjlq/uUC4nWWpkhA4LxjeYLxoy4OUEVQz6nQKI0= Subject key identifier: 4D:E2:5F:AA:B5:44:05:9D:ED:C7:D5:57:81:93:1A:E9:4C:1A:75:0F Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 13F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 13EE Signing time: Fri 22 Aug 2025 17:03:50 +0000 Manifest this update: Fri 22 Aug 2025 17:03:50 +0000 Manifest next update: Fri 29 Aug 2025 17:03:50 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: /+nVX9VQMETJuAdc8O2zvtd1a4B/OGwqSoFt5kJJB88=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: ttQKVIA3bhQ3yn0h9mDnukLDStF7uBzvZvWVyzWWSJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5110 (0x13f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Aug 22 17:03:50 2025 GMT Not After : Aug 29 17:03:50 2025 GMT Subject: CN=68a8a2f6-8173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ae:e8:08:1a:0a:56:8c:c5:09:44:43:18:26: 2b:8f:26:25:c1:9d:5a:cb:65:e8:25:d5:f5:1c:34: e2:e3:16:85:c0:fd:ab:2a:4e:ec:15:9c:ed:e3:36: e5:68:e8:fd:11:8d:76:8e:43:4e:ae:e0:17:31:29: b2:ed:bc:96:d8:ac:da:0c:db:8e:47:7e:71:99:d8: 00:5e:a4:41:8b:1d:87:ce:92:c9:af:8e:6a:2d:e1: 01:8e:d4:56:a8:35:64:70:98:64:71:39:31:e5:00: 72:92:43:ec:0b:1a:87:9b:a3:f3:9f:e4:99:1a:7e: 5f:20:73:79:52:b6:69:89:72:b0:f0:45:1b:10:38: 63:5d:2a:d5:dc:06:b7:33:c3:56:9e:ab:35:27:00: f6:90:90:c3:80:03:af:4b:a9:85:15:db:99:2b:db: 37:5c:35:57:09:0a:0a:10:1b:ea:97:12:81:6e:57: 8f:c2:12:e6:43:d4:28:9d:f8:71:bc:aa:4c:aa:29: 17:3c:6f:43:02:a1:f2:b2:df:69:e5:ff:97:dc:3e: c4:9e:ff:05:79:ba:2a:f1:b3:9e:cb:12:d7:72:1a: f6:f0:21:48:fa:22:cf:2c:78:d8:48:1c:c6:34:7f: 44:14:c7:40:f9:24:76:fc:8e:00:28:0e:6c:f1:4c: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E2:5F:AA:B5:44:05:9D:ED:C7:D5:57:81:93:1A:E9:4C:1A:75:0F X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ed:b1:42:ae:50:64:48:83:3d:26:51:29:63:68:79:14:27: 75:47:fe:7c:aa:b9:33:6c:96:6d:f9:67:9d:c2:0a:76:45:3b: f7:4f:b6:30:8d:9f:11:a2:bc:8f:48:27:cc:79:05:fe:3b:92: 15:17:48:85:2f:f6:5e:04:79:94:30:5c:7b:33:84:58:4d:ed: e0:9f:42:36:bd:d2:0a:3d:f6:c6:c8:51:7e:00:e7:51:ee:1b: de:70:81:b7:b0:55:23:03:a0:b9:2c:d9:ea:20:56:b8:16:b5: 85:6a:9d:b9:4c:a2:c6:4e:91:37:2c:6d:12:51:33:3f:db:c4: 71:fa:75:39:69:77:30:50:a3:7d:7d:c3:b1:50:4e:2e:c8:50: 2f:9f:26:5d:1e:aa:61:f5:8f:03:ee:10:2e:c0:0b:40:b1:15: da:e9:b0:d6:98:be:11:51:69:e3:76:51:a2:d0:b5:a5:d5:85: 59:48:2d:39:4c:05:4e:82:87:03:8b:bb:68:15:b1:bc:2b:66: 01:af:cb:ab:87:4b:dc:3f:fd:aa:e5:93:e9:16:72:22:06:04: 80:a4:01:2d:57:05:ea:60:ac:9a:f1:63:15:a7:6d:a4:b9:80: a8:16:d0:11:80:b4:fa:4b:ff:a1:64:a6:5d:db:00:83:a8:af: f6:d7:78:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUwODIyMTcwMzUwWhcNMjUwODI5MTcwMzUwWjAYMRYwFAYD VQQDEw02OGE4YTJmNi04MTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9q7oCBoKVozFCURDGCYrjyYlwZ1ay2XoJdX1HDTi4xaFwP2rKk7sFZzt4zbl aOj9EY12jkNOruAXMSmy7byW2KzaDNuOR35xmdgAXqRBix2HzpLJr45qLeEBjtRW qDVkcJhkcTkx5QBykkPsCxqHm6Pzn+SZGn5fIHN5UrZpiXKw8EUbEDhjXSrV3Aa3 M8NWnqs1JwD2kJDDgAOvS6mFFduZK9s3XDVXCQoKEBvqlxKBblePwhLmQ9Qonfhx vKpMqikXPG9DAqHyst9p5f+X3D7Env8Feboq8bOeyxLXchr28CFI+iLPLHjYSBzG NH9EFMdA+SR2/I4AKA5s8UzFjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3iX6q1 RAWd7cfVV4GTGulMGnUPMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT7bFCrlBkSIM9JlEpY2h5FCd1R/58qrkzbJZt+Wedwgp2RTv3T7Yw jZ8RoryPSCfMeQX+O5IVF0iFL/ZeBHmUMFx7M4RYTe3gn0I2vdIKPfbGyFF+AOdR 7hvecIG3sFUjA6C5LNnqIFa4FrWFap25TKLGTpE3LG0SUTM/28Rx+nU5aXcwUKN9 fcOxUE4uyFAvnyZdHqph9Y8D7hAuwAtAsRXa6bDWmL4RUWnjdlGi0LWl1YVZSC05 TAVOgocDi7toFbG8K2YBr8urh0vcP/2q5ZPpFnIiBgSApAEtVwXqYKya8WMVp22k uYCoFtARgLT6S/+hZKZd2wCDqK/213jp -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:39 2025 by rpki-client