$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: nHIJZQDF8SUDEkST23KESeL3O+Il9LQY3SUmLkGe0AI= Subject key identifier: AF:73:6B:3C:DC:67:68:CC:C8:71:EE:28:48:E1:09:22:CA:22:FE:F3 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 0468 Signing time: Sat 23 Aug 2025 00:26:03 +0000 Manifest this update: Sat 23 Aug 2025 00:26:02 +0000 Manifest next update: Sat 30 Aug 2025 00:26:02 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: zRuqD5bSxXk4qVYE6Pe9rSQfIEMLmTJ6XXjQ5fqvh+U=) 2: 5590E4766AD111EFB8AD551AC4F9AE02.roa (hash: u4534TN3FipMq5w+c3LILmi2ZS4NbdKmjDpYBOie5OM=) 3: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Aug 23 00:26:02 2025 GMT Not After : Aug 30 00:26:02 2025 GMT Subject: CN=68a90a9b-790a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:40:f6:28:26:7a:c9:fe:7f:2b:d9:c4:db: 64:0a:d1:4b:90:3d:6a:3d:f8:f8:67:64:4b:63:28: fb:30:c6:c3:75:20:16:a8:cd:bb:29:03:95:65:3a: 2d:5c:92:af:dd:0e:7e:b3:83:ca:2a:da:45:4b:0f: 9d:c3:4d:f6:e4:28:5c:23:af:4f:7a:8c:b7:8b:11: e6:0d:88:10:0d:52:e1:54:73:3f:c0:ce:da:73:43: b0:6d:e3:3a:fb:97:eb:3e:8f:98:82:ff:47:d5:a9: fe:7c:4f:46:a0:3f:25:f2:52:74:ed:d6:37:66:c7: f9:4c:18:4a:78:57:a7:e7:ca:d3:5c:17:25:e1:65: c5:ed:95:c9:d8:60:97:d4:15:79:02:b5:66:8f:d5: 6f:f1:7e:92:99:4a:2f:f4:2f:7a:ac:27:64:0b:21: 54:0d:92:16:d4:ce:da:91:75:54:84:81:fe:10:d5: cc:e9:c6:fd:4c:6b:30:10:80:b2:15:70:57:31:b4: fe:e8:96:b8:1f:60:66:ee:a1:6a:5b:0f:e7:97:44: 6b:b7:02:02:0a:6a:79:09:47:f4:ce:1f:6c:f9:8a: 5e:02:e9:05:ac:9f:ac:75:ea:69:32:41:45:82:26: 72:27:b2:68:f0:a2:de:c4:54:bc:d6:e0:fb:04:8e: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:6B:3C:DC:67:68:CC:C8:71:EE:28:48:E1:09:22:CA:22:FE:F3 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:83:06:7b:6b:fa:8a:f9:5a:c2:97:04:da:49:9e:c8:71:00: fc:3a:4c:1e:18:6f:68:e0:e3:7d:ac:b1:6c:30:0f:d1:4b:62: 2c:58:a0:eb:c2:00:2f:1a:a8:a0:a0:ab:3f:ca:6d:8b:a1:91: 84:50:5d:ad:b6:69:ea:68:00:a4:14:c4:a9:41:fe:ef:92:78: d0:82:19:9a:08:a3:32:dc:07:cb:c1:a5:a3:40:6d:06:d8:d2: 93:c5:0c:2c:ae:fc:4e:07:12:6b:11:41:97:74:df:a0:26:da: 53:21:19:13:fa:6e:af:48:a9:44:a4:71:82:ca:f2:b0:c1:7e: b9:5f:6e:2e:b0:ff:83:8a:b5:42:f7:c5:d4:f7:19:22:0a:42: dd:74:7a:c5:7b:41:9f:61:69:3d:a6:f0:1f:09:0e:32:77:b7: f8:09:54:95:cc:aa:0a:08:dc:70:22:9c:01:b3:57:38:26:cb: 6b:31:ec:2e:7e:db:1b:7b:19:9f:1b:f1:2c:0b:13:29:7c:b5: 66:f0:7e:de:c6:2f:50:f0:a7:89:98:07:05:0c:d6:c1:83:2b: 86:cc:40:81:82:c3:cd:36:76:52:b2:78:07:d4:10:0a:e3:49: ec:ae:da:16:b5:68:a1:4e:ec:34:37:67:e9:e1:11:64:8f:a6: 4c:43:9d:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUwODIzMDAyNjAyWhcNMjUwODMwMDAyNjAyWjAYMRYwFAYD VQQDEw02OGE5MGE5Yi03OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXVA9igmesn+fyvZxNtkCtFLkD1qPfj4Z2RLYyj7MMbDdSAWqM27KQOVZTot XJKv3Q5+s4PKKtpFSw+dw0325ChcI69Peoy3ixHmDYgQDVLhVHM/wM7ac0OwbeM6 +5frPo+Ygv9H1an+fE9GoD8l8lJ07dY3Zsf5TBhKeFen58rTXBcl4WXF7ZXJ2GCX 1BV5ArVmj9Vv8X6SmUov9C96rCdkCyFUDZIW1M7akXVUhIH+ENXM6cb9TGswEICy FXBXMbT+6Ja4H2Bm7qFqWw/nl0RrtwICCmp5CUf0zh9s+YpeAukFrJ+sdeppMkFF giZyJ7Jo8KLexFS81uD7BI4iCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9zazzc Z2jMyHHuKEjhCSLKIv7zMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgwZ7a/qK+VrClwTaSZ7IcQD8OkweGG9o4ON9rLFsMA/RS2IsWKDr wgAvGqigoKs/ym2LoZGEUF2ttmnqaACkFMSpQf7vknjQghmaCKMy3AfLwaWjQG0G 2NKTxQwsrvxOBxJrEUGXdN+gJtpTIRkT+m6vSKlEpHGCyvKwwX65X24usP+DirVC 98XU9xkiCkLddHrFe0GfYWk9pvAfCQ4yd7f4CVSVzKoKCNxwIpwBs1c4JstrMewu ftsbexmfG/EsCxMpfLVm8H7exi9Q8KeJmAcFDNbBgyuGzECBgsPNNnZSsngH1BAK 40nsrtoWtWihTuw0N2fp4RFkj6ZMQ53I -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:17 2025 by rpki-client