$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: LW9JBaW/i6EX6A5C3rZPGdfJF0XfLwKbnHEP8Q5u7Hc= Subject key identifier: 0F:1C:BA:ED:0A:11:29:55:61:4A:15:7D:94:18:33:C2:82:0D:6D:96 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 66 Signing time: Sat 23 Aug 2025 07:20:56 +0000 Manifest this update: Sat 23 Aug 2025 07:20:55 +0000 Manifest next update: Sat 30 Aug 2025 07:20:55 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: i5A7h+Jvd8Xw3AzCeWpY7kWsfk3u5qFW1TSip+14MLI=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: KNC2/s+vZ/9r775F1mGNGMou3oGOdH7k+vpChxT9cqQ=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: zMJUwcQ85fc9WyQBZ4Df3FrM+qiFXLoVLbfqvgsrYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Aug 23 07:20:55 2025 GMT Not After : Aug 30 07:20:55 2025 GMT Subject: CN=68a96bd7-7418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:23:a7:f6:20:db:0c:81:e1:ad:f5:2b:02: 21:13:74:3d:8f:9f:ee:ee:30:f7:3e:52:fa:91:3a: cd:d5:eb:78:c8:b8:09:3e:56:2f:86:c1:9a:8d:01: a3:71:55:28:1b:3b:cb:15:a2:87:1c:5c:31:4e:57: 1f:79:47:b7:76:b7:11:d0:49:9e:62:58:4d:91:90: 90:8d:f9:bd:60:61:4a:90:3c:b4:cf:cc:33:71:75: 84:27:94:4f:4f:7b:44:11:c1:a6:0a:3e:e3:02:fb: 98:5d:80:74:42:28:2a:87:e0:d8:02:c9:cd:79:7d: d5:c0:0e:05:15:c8:48:0f:a8:01:77:93:a4:4e:d2: 10:f6:93:f6:dc:0f:10:f5:f1:3c:4c:96:ca:60:3b: 57:93:55:01:09:78:51:dd:93:fe:d1:c2:ff:25:7d: f6:bf:6c:a6:97:b2:7d:c7:a6:c0:c3:ef:6d:7c:8c: 11:63:39:8a:84:68:95:e5:82:2a:bc:99:81:ab:96: fd:e8:f9:be:22:b6:09:80:db:83:4b:37:ee:e0:1c: 12:59:4e:2b:de:7c:a7:1f:63:44:58:08:9c:c4:84: 71:a0:75:2a:ff:a2:fa:a3:e4:02:33:64:98:4d:25: d4:08:5a:3f:e5:30:e3:46:ec:07:67:32:83:5a:b5: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1C:BA:ED:0A:11:29:55:61:4A:15:7D:94:18:33:C2:82:0D:6D:96 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0d:8f:37:e3:92:08:d6:0e:08:43:27:18:6e:d1:c0:92:0f: 0e:4f:56:7a:88:c4:95:ed:e1:e9:4c:dc:32:a3:c0:14:8f:77: aa:c5:d2:ab:d6:a0:ec:7e:54:fd:50:b8:f2:71:85:17:87:8d: f1:73:5b:8a:a2:6a:47:ea:f8:64:a2:45:14:7e:f9:7f:d4:fe: 26:14:c9:d9:ec:e0:46:27:e0:91:37:f2:81:0e:10:11:5b:5c: bd:43:d3:6e:d3:03:d4:96:52:0d:0e:87:f9:0c:49:4a:ef:5b: d3:4f:ae:75:6a:5e:60:43:9b:b8:7a:15:68:0e:5b:64:32:6e: 25:a1:4f:c6:9a:f9:81:d1:34:8b:c9:fe:e8:36:f8:13:a7:33: ab:99:30:ae:94:3f:cc:d7:43:eb:60:4a:4c:12:bb:e8:cc:7a: d0:de:22:11:f7:2a:c2:3a:4e:23:2e:c2:d3:6d:3d:0a:3b:48: 94:91:dd:13:24:38:74:f6:77:3b:5c:b7:14:38:63:21:8e:9d: 60:ec:39:f0:52:c0:35:bb:b2:8c:42:f0:0a:14:37:65:d4:64: 90:d3:f3:83:2c:16:ac:cf:08:11:80:b0:e1:85:b1:df:17:a7: 40:b0:4c:89:46:d4:0e:64:6b:40:d8:04:fd:cd:86:0f:65:69: 1b:bd:be:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA4MjMwNzIwNTVaFw0yNTA4MzAwNzIwNTVaMBgxFjAUBgNV BAMTDTY4YTk2YmQ3LTc0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuMyOn9iDbDIHhrfUrAiETdD2Pn+7uMPc+UvqROs3V63jIuAk+Vi+GwZqNAaNx VSgbO8sVooccXDFOVx95R7d2txHQSZ5iWE2RkJCN+b1gYUqQPLTPzDNxdYQnlE9P e0QRwaYKPuMC+5hdgHRCKCqH4NgCyc15fdXADgUVyEgPqAF3k6RO0hD2k/bcDxD1 8TxMlspgO1eTVQEJeFHdk/7Rwv8lffa/bKaXsn3HpsDD7218jBFjOYqEaJXlgiq8 mYGrlv3o+b4itgmA24NLN+7gHBJZTivefKcfY0RYCJzEhHGgdSr/ovqj5AIzZJhN JdQIWj/lMONG7AdnMoNatXB9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDxy67QoR KVVhShV9lBgzwoINbZYwHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQNjzfjkgjWDghDJxhu0cCSDw5PVnqIxJXt4elM3DKjwBSPd6rF0qvW oOx+VP1QuPJxhReHjfFzW4qiakfq+GSiRRR++X/U/iYUydns4EYn4JE38oEOEBFb XL1D027TA9SWUg0Oh/kMSUrvW9NPrnVqXmBDm7h6FWgOW2QybiWhT8aa+YHRNIvJ /ug2+BOnM6uZMK6UP8zXQ+tgSkwSu+jMetDeIhH3KsI6TiMuwtNtPQo7SJSR3RMk OHT2dztctxQ4YyGOnWDsOfBSwDW7soxC8AoUN2XUZJDT84MsFqzPCBGAsOGFsd8X p0CwTIlG1A5ka0DYBP3Nhg9laRu9vjE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:43 2025 by rpki-client