$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: ksyLsP3KSmPJVYGdTv5/YEvP04f6S8bnqcgPzQYElJo= Subject key identifier: 7E:2B:57:61:E6:F4:96:D3:39:02:DB:E5:92:03:7B:EE:69:EB:B3:F9 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: F4 Signing time: Sat 23 Aug 2025 05:40:27 +0000 Manifest this update: Sat 23 Aug 2025 05:40:27 +0000 Manifest next update: Sat 30 Aug 2025 05:40:27 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: tO3QznnmfOwb+HeOl8awaVpCiU7GZbZPb644VtMWEOM=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Aug 23 05:40:27 2025 GMT Not After : Aug 30 05:40:27 2025 GMT Subject: CN=68a9544b-c4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:42:97:0f:ce:63:b5:a0:03:9e:ba:82:a4: ff:cc:e1:d6:79:e9:92:1a:cc:62:a1:4c:ae:42:b7: 97:5c:76:69:ee:80:cf:0c:65:e6:8b:61:cd:e9:43: 90:2e:03:83:89:46:d7:25:e1:0b:7b:88:d9:19:cf: 22:d0:67:2b:01:7b:f2:11:ee:16:31:65:a3:8d:ba: c7:25:79:e5:63:83:79:2d:58:0e:c4:d8:c0:19:ff: da:f5:dc:f1:6b:c6:ca:50:2d:21:c6:a5:86:ca:c9: 5e:14:38:46:ac:03:e2:f0:d5:a7:8b:ce:a7:74:39: ca:85:7e:b0:a4:97:3c:e4:01:a2:a9:54:3e:33:17: 3a:0f:6c:7a:ce:1b:28:17:83:1e:67:cf:aa:7c:55: 18:aa:3a:64:6f:9f:dd:b9:de:4e:a5:83:d7:17:05: bc:95:86:a3:27:86:ef:7d:66:1b:61:eb:c2:11:b3: ce:46:e2:ec:b6:ba:4f:d5:2b:4b:95:84:7c:3f:66: 49:5b:71:d7:c3:de:c4:1f:4c:e7:68:62:3c:99:46: 3f:80:5d:66:3c:7e:0d:f5:61:47:06:1b:ee:69:02: 83:e8:d9:18:53:47:0b:72:62:05:0b:96:4c:a2:e9: 0b:ce:d6:bb:1d:52:3a:2e:44:37:13:9f:7e:f8:50: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:57:61:E6:F4:96:D3:39:02:DB:E5:92:03:7B:EE:69:EB:B3:F9 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3b:66:3c:c1:3f:74:97:dc:81:ff:7b:be:e7:58:2f:f9:e2: 1c:3e:c9:cf:fb:49:a0:33:88:ec:56:13:0c:89:cd:8f:da:17: 02:e4:ec:3a:b3:39:dc:e9:08:b6:29:c5:f1:2b:58:ec:7f:d6: d9:0e:97:e9:18:c0:4b:68:17:25:2f:0b:73:27:0d:92:54:fd: cd:22:d4:de:4b:f8:3e:32:1b:31:6f:4c:72:bf:2c:09:37:25: 9b:e4:3c:5d:f0:ca:7b:6b:63:e2:65:3e:76:14:bb:cc:e7:0a: 46:95:ee:34:1d:8a:df:5b:b4:2a:49:98:9a:53:cd:d3:74:33: 80:a9:45:96:53:9e:f3:ca:28:7f:e9:fa:73:64:57:93:e3:5d: 6c:fb:78:59:ca:67:61:55:47:0c:15:1d:52:01:82:99:ba:15: fc:59:b5:d7:d5:bd:82:2c:b9:cb:dc:d6:85:1c:e7:f9:15:4b: 4b:46:f5:3c:0a:76:83:65:5e:4c:4d:18:d8:bd:7e:b2:cf:4e: be:4e:17:e1:61:3d:e3:f7:c6:ff:4c:45:67:1b:7b:6b:e3:9b: 5f:02:bb:d1:cc:2a:57:db:67:f9:95:f4:2d:cd:25:01:d6:af: 69:e2:d5:51:99:85:00:dc:39:bc:51:3f:ce:d1:ff:a8:55:bc: cb:91:ac:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwODIzMDU0MDI3WhcNMjUwODMwMDU0MDI3WjAYMRYwFAYD VQQDEw02OGE5NTQ0Yi1jNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNpClw/OY7WgA566gqT/zOHWeemSGsxioUyuQreXXHZp7oDPDGXmi2HN6UOQ LgODiUbXJeELe4jZGc8i0GcrAXvyEe4WMWWjjbrHJXnlY4N5LVgOxNjAGf/a9dzx a8bKUC0hxqWGysleFDhGrAPi8NWni86ndDnKhX6wpJc85AGiqVQ+Mxc6D2x6zhso F4MeZ8+qfFUYqjpkb5/dud5OpYPXFwW8lYajJ4bvfWYbYevCEbPORuLstrpP1StL lYR8P2ZJW3HXw97EH0znaGI8mUY/gF1mPH4N9WFHBhvuaQKD6NkYU0cLcmIFC5ZM oukLzta7HVI6LkQ3E59++FBQEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4rV2Hm 9JbTOQLb5ZIDe+5p67P5MB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuO2Y8wT90l9yB/3u+51gv+eIcPsnP+0mgM4jsVhMMic2P2hcC5Ow6 sznc6Qi2KcXxK1jsf9bZDpfpGMBLaBclLwtzJw2SVP3NItTeS/g+Mhsxb0xyvywJ NyWb5Dxd8Mp7a2PiZT52FLvM5wpGle40HYrfW7QqSZiaU83TdDOAqUWWU57zyih/ 6fpzZFeT411s+3hZymdhVUcMFR1SAYKZuhX8WbXX1b2CLLnL3NaFHOf5FUtLRvU8 CnaDZV5MTRjYvX6yz06+ThfhYT3j98b/TEVnG3tr45tfArvRzCpX22f5lfQtzSUB 1q9p4tVRmYUA3Dm8UT/O0f+oVbzLkayM -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:55 2025 by rpki-client