$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: C/k/bE5dR8eVGlFFknmx/FRtCsa20TuUEKJ7tIf+hh4= Subject key identifier: 29:80:C5:C1:3A:4D:2A:12:51:83:EC:A5:5B:47:FA:26:CE:D4:1A:1F Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C9C Signing time: Fri 22 Aug 2025 18:19:29 +0000 Manifest this update: Fri 22 Aug 2025 18:19:29 +0000 Manifest next update: Fri 29 Aug 2025 18:19:29 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: ZA0YjKSt2j8IgJoapZYZLjGHGwshd4Vj/e1yLrGX9OQ=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Aug 22 18:19:29 2025 GMT Not After : Aug 29 18:19:29 2025 GMT Subject: CN=68a8b4b1-1a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:05:c6:c7:60:c4:75:56:ba:d9:32:dc:ce: cb:56:48:20:44:8d:06:8f:77:3b:24:8c:92:a0:b5: 30:c6:3f:f2:6e:9f:34:00:d0:71:19:19:de:09:dc: 9f:06:98:7a:96:2d:41:d3:b6:c7:96:ce:8b:07:ae: 8b:c7:84:8b:4b:ae:64:8e:b9:44:eb:3d:7d:18:52: 99:d2:4f:fe:6b:0e:9a:3a:f8:bb:28:d0:8d:2e:df: 20:82:f2:ba:68:f1:19:dc:c1:ea:bc:ac:a1:03:c1: 7b:00:46:53:93:aa:b8:0c:02:7a:7b:78:0f:eb:5f: 57:ee:06:04:fb:a0:fa:26:eb:db:72:24:bc:2c:8e: 12:4b:03:88:e5:6e:9f:32:6b:c2:95:09:fc:55:fc: c8:22:da:f4:8f:60:6f:2d:5e:4c:24:c2:84:55:79: 08:b2:f6:51:ad:ca:c6:4a:b5:14:68:8b:41:1b:61: bc:e6:3f:f5:8d:26:21:59:35:33:c6:93:81:c2:bf: 2e:1b:e5:a3:21:e8:75:91:af:0b:09:f2:a3:52:1a: a9:07:c9:0f:59:9f:ba:0a:49:84:b0:f9:ec:c7:0d: aa:cc:ef:46:76:6a:b4:f3:87:ae:f5:2b:51:a6:27: 8d:e8:51:ed:6e:c6:f7:1c:4b:f5:d3:25:8a:c3:fa: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:80:C5:C1:3A:4D:2A:12:51:83:EC:A5:5B:47:FA:26:CE:D4:1A:1F X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:1b:d4:98:89:0c:c5:1f:12:9d:e5:e8:1c:a1:02:4c:14:ff: ba:5a:f8:88:f3:87:b4:0d:25:1a:ea:65:a1:ba:dd:a5:df:6c: 64:39:58:3b:b0:01:dc:34:52:d5:b4:21:85:db:98:07:9b:b5: b6:1a:27:4c:73:9e:93:db:f2:65:00:56:82:5f:60:50:e6:5a: e2:cc:a3:0b:e1:9d:21:2e:a3:88:e5:61:92:8b:8c:71:7f:e1: b2:74:be:a2:b4:6e:0e:c2:ba:b8:b2:23:8f:f0:4f:4b:32:61: 6c:d7:ad:d5:5e:9b:07:f8:ff:ab:17:48:f6:4a:c1:95:43:22: 6f:fb:9a:84:5b:8f:30:f3:97:21:f6:68:50:06:69:cb:35:e9: 1c:3d:f5:7f:7d:2c:e1:16:a7:59:f0:5c:a0:11:51:f2:06:ff: 56:a5:c3:5a:f2:3b:8d:78:f0:e2:50:c6:75:3d:c4:39:fa:75: 2d:eb:46:b0:23:89:eb:a3:89:1a:03:85:87:72:8c:b6:d1:5f: d2:10:8d:4f:c5:59:c1:c4:32:c1:a8:18:3c:45:a7:10:09:56: 69:cc:cd:d3:5f:d5:d3:db:bb:69:0d:66:c5:38:8d:33:25:f9: 5c:71:5e:2c:aa:d6:a6:b1:32:58:ff:c8:0a:14:a6:6c:35:98: d7:33:a4:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwODIyMTgxOTI5WhcNMjUwODI5MTgxOTI5WjAYMRYwFAYD VQQDEw02OGE4YjRiMS0xYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUgFxsdgxHVWutky3M7LVkggRI0Gj3c7JIySoLUwxj/ybp80ANBxGRneCdyf Bph6li1B07bHls6LB66Lx4SLS65kjrlE6z19GFKZ0k/+aw6aOvi7KNCNLt8ggvK6 aPEZ3MHqvKyhA8F7AEZTk6q4DAJ6e3gP619X7gYE+6D6JuvbciS8LI4SSwOI5W6f MmvClQn8VfzIItr0j2BvLV5MJMKEVXkIsvZRrcrGSrUUaItBG2G85j/1jSYhWTUz xpOBwr8uG+WjIeh1ka8LCfKjUhqpB8kPWZ+6CkmEsPnsxw2qzO9Gdmq084eu9StR pieN6FHtbsb3HEv10yWKw/ok6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmAxcE6 TSoSUYPspVtH+ibO1BofMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYG9SYiQzFHxKd5egcoQJMFP+6WviI84e0DSUa6mWhut2l32xkOVg7 sAHcNFLVtCGF25gHm7W2GidMc56T2/JlAFaCX2BQ5lrizKML4Z0hLqOI5WGSi4xx f+GydL6itG4Owrq4siOP8E9LMmFs163VXpsH+P+rF0j2SsGVQyJv+5qEW48w85ch 9mhQBmnLNekcPfV/fSzhFqdZ8FygEVHyBv9WpcNa8juNePDiUMZ1PcQ5+nUt60aw I4nro4kaA4WHcoy20V/SEI1PxVnBxDLBqBg8RacQCVZpzM3TX9XT27tpDWbFOI0z JflccV4sqtamsTJY/8gKFKZsNZjXM6S1 -----END CERTIFICATE-----Generated at Sat Aug 23 13:23:22 2025 by rpki-client