$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: iwY4r476XY1orVlyYTDxJhQMgF6iM/iPvp5b8K9eqoo= Subject key identifier: 5E:CA:09:12:F5:34:B6:5F:6A:C4:CE:A4:ED:CD:87:41:47:2C:6B:60 Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 093D Signing time: Fri 22 Aug 2025 20:20:39 +0000 Manifest this update: Fri 22 Aug 2025 20:20:39 +0000 Manifest next update: Fri 29 Aug 2025 20:20:39 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: t1cuwBgcqrPqM8CZSXDn+f9II/BqpDKLsXNR4iWGsvQ=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Aug 22 20:20:39 2025 GMT Not After : Aug 29 20:20:39 2025 GMT Subject: CN=68a8d117-aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:9e:bf:2f:28:1d:c2:be:f6:93:59:1a:ad: ee:e8:81:5a:2a:d8:54:73:aa:38:89:46:e1:72:c2: 06:28:46:9d:fc:ac:16:47:e5:fe:f4:db:36:83:71: 7f:d2:8e:0d:f3:49:11:b3:4d:95:5d:c1:74:97:c5: 35:73:59:cf:c4:51:a2:b6:57:81:c9:64:5c:9a:61: 74:e9:0c:d8:57:7a:d4:c3:60:00:d7:21:5e:f8:a4: ee:6d:49:b3:71:26:d3:10:2d:b4:73:7e:cc:95:09: 69:9e:fc:c0:44:65:55:36:fa:18:09:70:53:c1:9d: cb:67:94:9f:b5:4c:59:f8:d9:29:af:ff:3f:00:9a: f8:7c:95:86:31:dc:ff:ac:eb:d8:85:71:90:b5:06: 3d:0f:83:15:63:07:2d:fa:b3:fb:c1:cf:ac:da:41: 8f:42:b6:00:e9:1c:e4:ec:10:f7:2f:4b:2c:f0:88: 16:5e:43:ab:b5:31:70:4d:f4:25:a5:5b:fb:d5:5b: 31:14:98:f6:41:85:97:bc:5f:78:ce:28:db:1f:57: 8d:a7:d9:8c:3c:0b:6b:32:57:40:fa:f0:a5:2d:51: bd:ad:c5:64:c1:28:6d:d5:ad:69:fa:8b:60:f7:74: 1e:d6:1b:98:1e:e7:16:c0:d4:0f:16:98:d0:9d:93: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CA:09:12:F5:34:B6:5F:6A:C4:CE:A4:ED:CD:87:41:47:2C:6B:60 X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:23:1b:61:30:fd:03:5f:2d:fc:c2:69:42:ba:d4:24:bd:e2: 4e:00:a6:60:31:ee:da:68:b0:3b:f1:a4:34:b5:bb:a8:3b:32: 01:91:f3:9c:10:53:69:7c:1b:e6:66:44:b3:79:28:18:f3:8c: ae:11:b7:f8:3a:e6:a8:29:72:dc:76:54:95:3b:52:1d:74:5c: 70:b7:52:b3:0c:b8:85:22:54:06:46:cb:bb:bb:3a:2e:75:b2: 88:3e:40:6c:42:73:be:7f:da:98:be:f6:91:b4:ee:32:55:99: cf:f7:2c:1f:68:a3:36:b1:b5:a5:84:2d:f0:d2:1c:e9:91:b4: 73:b7:d0:cd:ee:07:76:c2:d0:18:c1:4c:94:49:64:a8:0d:7e: e9:05:96:bf:22:5f:c9:89:91:23:a0:fa:ca:92:8f:00:db:5a: c8:36:90:22:dc:95:7d:6e:31:2a:da:bc:a6:66:86:3f:30:a3: 88:65:14:cd:db:37:51:67:ef:cc:02:3f:0b:24:9c:46:a3:99: 3d:8a:0a:0e:37:48:74:fb:6b:89:57:f6:2d:d4:e7:8b:3c:f1: b1:0f:cf:75:88:c1:cc:4d:7a:36:43:a4:5c:4e:c6:2a:f2:cc: 91:3f:08:b3:d8:45:46:34:4a:62:13:48:d8:0d:67:44:f5:00: a5:8a:a6:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUwODIyMjAyMDM5WhcNMjUwODI5MjAyMDM5WjAYMRYwFAYD VQQDEw02OGE4ZDExNy1hYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VGevy8oHcK+9pNZGq3u6IFaKthUc6o4iUbhcsIGKEad/KwWR+X+9Ns2g3F/ 0o4N80kRs02VXcF0l8U1c1nPxFGitleByWRcmmF06QzYV3rUw2AA1yFe+KTubUmz cSbTEC20c37MlQlpnvzARGVVNvoYCXBTwZ3LZ5SftUxZ+Nkpr/8/AJr4fJWGMdz/ rOvYhXGQtQY9D4MVYwct+rP7wc+s2kGPQrYA6Rzk7BD3L0ss8IgWXkOrtTFwTfQl pVv71VsxFJj2QYWXvF94zijbH1eNp9mMPAtrMldA+vClLVG9rcVkwSht1a1p+otg 93Qe1huYHucWwNQPFpjQnZNvOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7KCRL1 NLZfasTOpO3Nh0FHLGtgMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdIxthMP0DXy38wmlCutQkveJOAKZgMe7aaLA78aQ0tbuoOzIBkfOc EFNpfBvmZkSzeSgY84yuEbf4OuaoKXLcdlSVO1IddFxwt1KzDLiFIlQGRsu7uzou dbKIPkBsQnO+f9qYvvaRtO4yVZnP9ywfaKM2sbWlhC3w0hzpkbRzt9DN7gd2wtAY wUyUSWSoDX7pBZa/Il/JiZEjoPrKko8A21rINpAi3JV9bjEq2rymZoY/MKOIZRTN 2zdRZ+/MAj8LJJxGo5k9igoON0h0+2uJV/Yt1OeLPPGxD891iMHMTXo2Q6RcTsYq 8syRPwiz2EVGNEpiE0jYDWdE9QCliqbv -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:12 2025 by rpki-client