$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: P+6jfQD/7MSqQi3DUQF7MTcUE1CXjg8/ZuP7EJQmELE= Subject key identifier: FA:96:1A:6A:5F:D8:7C:50:F9:C5:56:93:0D:C1:39:85:27:92:90:5D Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 0197 Signing time: Sat 23 Aug 2025 03:44:25 +0000 Manifest this update: Sat 23 Aug 2025 03:44:24 +0000 Manifest next update: Sat 30 Aug 2025 03:44:24 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: w1RIjE0TZs2MIeKrBMmIuyq/xK5xvKE6A5R1kcpobbE=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Aug 23 03:44:24 2025 GMT Not After : Aug 30 03:44:24 2025 GMT Subject: CN=68a93919-2def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:54:ca:f2:0b:a2:53:32:16:86:00:44:46: 37:e1:ea:f3:e9:22:72:27:d5:be:5d:6d:27:b3:bf: 07:f7:f7:1f:5e:b3:66:8e:8d:44:d9:4c:50:30:cf: 12:76:20:9b:5e:a1:06:91:bd:b0:62:54:ac:08:85: a4:cd:5c:1f:9a:d9:f6:49:c6:b0:8f:4f:45:36:63: e5:f2:8a:88:8a:de:03:08:fd:80:87:ad:1d:16:ca: 5f:35:5d:91:fb:47:96:df:d1:fa:a9:5e:c5:e0:7a: 8f:36:50:6e:b9:9a:7b:5d:47:86:62:bc:12:b7:9d: a0:af:97:e9:b1:50:8f:db:d7:55:6b:f6:91:79:ba: 66:e3:9e:71:b7:29:2d:28:6f:f0:c8:95:60:c6:ee: 13:20:7f:09:b0:c8:70:95:6d:48:6e:ad:ba:37:5b: 31:d7:80:8b:a0:a5:b8:24:54:5b:be:ad:e7:03:7e: 26:00:21:38:9c:af:b4:0a:88:42:d1:21:c4:82:46: f8:a3:b1:e6:1f:14:b6:61:13:49:92:29:d9:8e:d0: 2f:67:8b:21:49:f0:69:f8:77:29:f1:fe:4f:0e:9b: 88:95:b2:f0:9d:26:6a:0a:28:c1:5e:eb:cc:a5:79: ef:e2:ac:f7:4e:0e:a6:66:71:87:e5:41:f3:b1:d0: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:96:1A:6A:5F:D8:7C:50:F9:C5:56:93:0D:C1:39:85:27:92:90:5D X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:30:8b:cb:36:7e:f7:a1:11:eb:8d:e4:e5:9e:71:4b:f2:8b: 31:89:30:c9:b6:79:ec:32:b5:aa:4c:8b:cc:55:77:b8:71:62: 3d:8c:8d:1c:06:72:f2:d8:f0:6b:76:47:ef:00:44:64:85:97: b0:7f:11:cf:82:3e:76:d2:9d:45:2d:88:ca:ee:ec:03:53:21: d3:92:fe:f8:77:8a:b0:94:de:ad:87:cf:c0:a0:d1:8c:d3:d2: 9b:93:0e:1c:6c:1f:dd:17:cb:10:11:94:86:0f:d4:0f:63:4b: 87:1e:1d:da:c3:b3:d7:13:74:17:12:a9:c9:82:30:9f:7b:20: ce:3d:8e:d8:d3:3f:e0:21:cd:6e:7a:4b:80:57:1d:ca:63:aa: b3:42:b1:73:dc:45:e1:f1:a7:f8:13:06:86:68:81:58:19:d9: 93:a2:23:2e:42:6d:c4:cd:ec:cb:b8:43:c6:a8:77:5f:5d:f6: b0:24:72:10:3f:e5:53:3d:77:a1:7e:cc:65:3f:34:58:31:ee: 50:73:2d:ff:fb:73:3e:07:7d:9b:42:98:3e:11:0e:51:b9:62: 35:0e:da:a1:24:21:c9:c2:d3:c8:d5:db:66:3b:56:27:90:21: db:1b:71:d0:03:95:a6:04:c0:12:03:08:f1:10:a0:dc:bf:23: 18:67:a3:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUwODIzMDM0NDI0WhcNMjUwODMwMDM0NDI0WjAYMRYwFAYD VQQDEw02OGE5MzkxOS0yZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8xUyvILolMyFoYAREY34erz6SJyJ9W+XW0ns78H9/cfXrNmjo1E2UxQMM8S diCbXqEGkb2wYlSsCIWkzVwfmtn2Scawj09FNmPl8oqIit4DCP2Ah60dFspfNV2R +0eW39H6qV7F4HqPNlBuuZp7XUeGYrwSt52gr5fpsVCP29dVa/aRebpm455xtykt KG/wyJVgxu4TIH8JsMhwlW1Ibq26N1sx14CLoKW4JFRbvq3nA34mACE4nK+0CohC 0SHEgkb4o7HmHxS2YRNJkinZjtAvZ4shSfBp+Hcp8f5PDpuIlbLwnSZqCijBXuvM pXnv4qz3Tg6mZnGH5UHzsdCUgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqWGmpf 2HxQ+cVWkw3BOYUnkpBdMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtMIvLNn73oRHrjeTlnnFL8osxiTDJtnnsMrWqTIvMVXe4cWI9jI0c BnLy2PBrdkfvAERkhZewfxHPgj520p1FLYjK7uwDUyHTkv74d4qwlN6th8/AoNGM 09Kbkw4cbB/dF8sQEZSGD9QPY0uHHh3aw7PXE3QXEqnJgjCfeyDOPY7Y0z/gIc1u ekuAVx3KY6qzQrFz3EXh8af4EwaGaIFYGdmToiMuQm3EzezLuEPGqHdfXfawJHIQ P+VTPXehfsxlPzRYMe5Qcy3/+3M+B32bQpg+EQ5RuWI1DtqhJCHJwtPI1dtmO1Yn kCHbG3HQA5WmBMASAwjxEKDcvyMYZ6N8 -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:53 2025 by rpki-client