$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: y6tnuPV1nhWqY4s7n7ZDIDHFqBhTHDH4KvxvoFriX7E= Subject key identifier: 28:D1:21:2E:9C:BD:67:C4:E8:07:8C:AA:BB:D0:33:8A:E2:BF:BD:F5 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 0450 Signing time: Mon 07 Jul 2025 00:27:52 +0000 Manifest this update: Mon 07 Jul 2025 00:27:51 +0000 Manifest next update: Mon 14 Jul 2025 00:27:51 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: QLBxFGU+3vfNvZrrJmexPDNe0DVTMBNouluY7t5RbOU=) 2: 5590E4766AD111EFB8AD551AC4F9AE02.roa (hash: u4534TN3FipMq5w+c3LILmi2ZS4NbdKmjDpYBOie5OM=) 3: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 00:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Jul 7 00:27:51 2025 GMT Not After : Jul 14 00:27:51 2025 GMT Subject: CN=686b1487-e57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:29:55:8b:16:e9:72:e9:40:0a:27:f1:7e: bb:c0:af:26:f9:ba:92:c7:77:ca:a6:de:88:fe:19: 17:f6:77:c3:46:d5:9e:ac:99:b8:da:1f:70:75:91: d5:bc:d4:2a:cc:26:6c:86:e3:4c:6d:f6:aa:de:0f: 7c:a2:e7:0c:e3:4f:38:fc:14:73:e1:fc:2f:f3:c4: 11:42:d3:fc:6f:22:95:10:16:ca:fc:73:c1:f3:e3: 3f:36:8d:e2:9e:bc:f0:5e:88:df:84:94:05:89:96: 12:e7:96:45:3d:95:9e:87:ec:e4:ef:a5:fe:f0:48: 59:da:0a:e8:d6:dc:37:cc:89:79:3a:25:14:65:a3: a2:b4:4c:1a:20:65:1c:cc:ea:43:65:94:08:b9:d1: 50:ce:5d:22:98:6e:d7:d2:f1:8c:be:4a:49:1f:5f: 4b:48:3c:9c:a9:62:2d:65:6b:d9:81:a1:ea:99:b8: f1:94:58:89:fb:bc:d4:d9:3a:e6:97:ea:b1:37:2d: 01:d3:f2:74:f5:10:69:6f:d8:e0:c5:09:5a:6e:08: 76:c2:bb:97:06:94:54:25:ef:40:2d:17:4d:49:cf: d8:d9:26:4c:aa:c3:a4:81:ed:4c:55:43:6d:2c:5c: 64:dc:c9:ce:18:17:cb:5a:53:ea:cf:8f:59:7c:6b: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D1:21:2E:9C:BD:67:C4:E8:07:8C:AA:BB:D0:33:8A:E2:BF:BD:F5 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ec:f6:b1:4c:4b:42:9b:c2:46:22:59:74:99:61:2e:0b:5b: 35:27:bb:98:04:b3:eb:c1:0a:0d:f5:5d:f4:8b:63:e5:2b:7f: 3f:c3:4f:76:f2:43:b7:5f:03:d4:a1:38:d0:54:a6:e3:09:7f: 86:74:9c:fe:c1:9c:bf:50:0f:f8:da:82:d0:30:fb:df:8a:0d: 2f:1d:a7:70:4b:51:cf:c8:97:74:28:24:37:83:51:ee:67:ee: 42:04:5d:f2:0c:88:24:e5:96:a7:c1:ce:a9:4c:9b:88:19:7f: 77:39:65:ee:b5:d8:32:eb:4b:56:2d:6e:03:d6:01:3f:3d:e0: 33:08:39:7e:04:d0:09:68:77:66:4f:a6:1c:bf:0c:c6:ec:bd: c9:46:b2:05:d5:74:b8:95:72:9b:82:20:c2:2c:64:79:83:72: 43:c1:dd:a0:29:a6:09:60:6b:8b:8b:70:33:e7:ae:e5:af:16: 8c:a4:6a:91:0f:ac:bb:0d:88:ad:08:70:a5:c2:e1:cc:3e:82: 9d:02:37:23:d7:06:a8:14:eb:fa:78:29:d2:d9:b1:e7:29:2c: b0:23:92:9c:23:09:72:4f:e7:f6:a9:65:a3:1a:b3:59:ec:ab: 9d:e2:48:b5:ca:79:bb:2c:cb:ab:8c:77:92:93:85:5f:6d:0b: 3c:f3:14:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUwNzA3MDAyNzUxWhcNMjUwNzE0MDAyNzUxWjAYMRYwFAYD VQQDEw02ODZiMTQ4Ny1lNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7MpVYsW6XLpQAon8X67wK8m+bqSx3fKpt6I/hkX9nfDRtWerJm42h9wdZHV vNQqzCZshuNMbfaq3g98oucM4084/BRz4fwv88QRQtP8byKVEBbK/HPB8+M/No3i nrzwXojfhJQFiZYS55ZFPZWeh+zk76X+8EhZ2gro1tw3zIl5OiUUZaOitEwaIGUc zOpDZZQIudFQzl0imG7X0vGMvkpJH19LSDycqWItZWvZgaHqmbjxlFiJ+7zU2Trm l+qxNy0B0/J09RBpb9jgxQlabgh2wruXBpRUJe9ALRdNSc/Y2SZMqsOkge1MVUNt LFxk3MnOGBfLWlPqz49ZfGs4PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjRIS6c vWfE6AeMqrvQM4riv731MB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz7PaxTEtCm8JGIll0mWEuC1s1J7uYBLPrwQoN9V30i2PlK38/w092 8kO3XwPUoTjQVKbjCX+GdJz+wZy/UA/42oLQMPvfig0vHadwS1HPyJd0KCQ3g1Hu Z+5CBF3yDIgk5Zanwc6pTJuIGX93OWXutdgy60tWLW4D1gE/PeAzCDl+BNAJaHdm T6YcvwzG7L3JRrIF1XS4lXKbgiDCLGR5g3JDwd2gKaYJYGuLi3Az567lrxaMpGqR D6y7DYitCHClwuHMPoKdAjcj1waoFOv6eCnS2bHnKSywI5KcIwlyT+f2qWWjGrNZ 7Kud4ki1ynm7LMurjHeSk4VfbQs88xRx -----END CERTIFICATE-----Generated at Tue Jul 8 01:50:04 2025 by rpki-client