$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: HsOkNA6CDV3ouAo3uIOIJmgmDqUTsYjm/CCUHNI1Gvc= Subject key identifier: 9A:D4:06:77:48:22:27:5A:A0:FA:D7:70:A6:FD:BA:68:63:F3:AD:1F Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 8F Signing time: Thu 03 Jul 2025 06:46:56 +0000 Manifest this update: Thu 03 Jul 2025 06:46:56 +0000 Manifest next update: Thu 10 Jul 2025 06:46:56 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: dc4CdX9BF/xwIlhTCX1BKv9Hcb2jFyM1rra8fYIFNSI=) 2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: j4rFIHTNRhGLJLDjietaNGRc3CHg7H6921oZKrCNics=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Jul 3 06:46:56 2025 GMT Not After : Jul 10 06:46:56 2025 GMT Subject: CN=68662760-bebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c3:44:56:cb:65:ba:7d:be:03:c9:05:54:3d: 23:8d:17:2e:e0:fe:54:ea:c5:6e:83:bd:7f:af:cf: bf:be:cb:7d:ff:7a:0a:e2:49:6e:a1:4b:0a:dd:40: 7a:2f:67:19:17:9e:5c:79:67:70:72:5f:5a:04:bf: 34:2c:c4:6c:1a:57:70:6d:c2:c3:02:d5:44:be:83: 40:80:de:d9:43:f6:b4:d5:23:58:fc:13:e3:23:a2: 2f:79:09:73:4f:5b:92:68:e6:90:24:15:5a:1e:88: 14:ab:39:66:7e:6d:b9:14:3f:87:06:ef:a0:cf:71: e4:c3:53:4d:d8:0f:37:d5:2e:19:29:e6:07:09:81: e9:4f:a7:e5:b3:21:60:eb:d9:a9:fa:0a:91:0c:61: ce:f8:83:a5:3d:7d:4c:42:9d:1f:95:fa:4c:8c:98: c5:b7:84:be:4f:07:5f:98:6b:7e:92:d0:17:52:f6: 3b:7a:83:b2:56:46:6f:ea:5d:a3:b9:16:7a:de:6d: 8f:f6:f9:07:54:ca:c1:98:ba:f0:1d:ce:3b:fc:4e: 49:a1:ee:ba:b3:9d:23:28:db:83:64:26:d9:56:15: a5:6f:28:ac:7c:7d:a4:18:af:46:b8:cf:1d:0c:c1: df:cb:b5:42:05:e3:5d:ce:d8:ac:9b:72:b6:29:a9: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D4:06:77:48:22:27:5A:A0:FA:D7:70:A6:FD:BA:68:63:F3:AD:1F X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:80:7e:df:f0:f6:db:55:db:ef:38:cd:f8:34:89:2c:03:c3: 2e:e3:22:4b:2b:a4:1f:37:38:b6:1f:43:10:5d:50:a4:c6:49: 27:c2:78:c6:e9:d9:df:d7:15:9e:14:1c:79:18:e3:24:0c:c2: 61:bc:a5:bb:05:eb:22:eb:bf:60:7d:10:1b:2f:0f:7f:d5:95: 7f:36:8c:e9:84:61:b6:f3:77:59:d8:38:91:8a:36:53:ea:35: 43:1c:1f:76:29:05:b0:9f:34:c7:3b:57:40:81:de:70:0b:dc: 3d:43:19:fd:68:15:aa:ed:1a:5f:9b:8a:bc:9d:6c:5f:71:05: be:7f:1e:67:2c:8e:a3:5d:f0:3f:b9:0f:13:59:bc:f6:cb:33: c9:66:13:6d:7a:44:70:fa:d6:52:97:b1:39:32:dd:68:5f:d4: 6a:0e:f0:06:76:0e:9e:fd:b5:df:60:52:0e:51:bc:73:9e:82: b2:81:6a:84:cc:0a:a3:34:0c:6c:f6:76:25:5c:4e:28:14:26: 31:d8:5d:f0:b3:da:82:58:75:85:00:1b:e1:a9:00:3d:de:6e: 44:66:a2:ec:68:75:55:58:21:3a:f8:ff:e7:ef:be:bd:a5:96: be:43:b3:c3:fb:83:0b:cd:17:78:4f:4f:2f:8a:7b:ce:7f:3a: a4:bc:23:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUwNzAzMDY0NjU2WhcNMjUwNzEwMDY0NjU2WjAYMRYwFAYD VQQDEw02ODY2Mjc2MC1iZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sNEVstlun2+A8kFVD0jjRcu4P5U6sVug71/r8+/vst9/3oK4kluoUsK3UB6 L2cZF55ceWdwcl9aBL80LMRsGldwbcLDAtVEvoNAgN7ZQ/a01SNY/BPjI6IveQlz T1uSaOaQJBVaHogUqzlmfm25FD+HBu+gz3Hkw1NN2A831S4ZKeYHCYHpT6flsyFg 69mp+gqRDGHO+IOlPX1MQp0flfpMjJjFt4S+TwdfmGt+ktAXUvY7eoOyVkZv6l2j uRZ63m2P9vkHVMrBmLrwHc47/E5Joe66s50jKNuDZCbZVhWlbyisfH2kGK9GuM8d DMHfy7VCBeNdztism3K2Kak8YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrUBndI IidaoPrXcKb9umhj860fMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfgH7f8PbbVdvvOM34NIksA8Mu4yJLK6QfNzi2H0MQXVCkxkknwnjG 6dnf1xWeFBx5GOMkDMJhvKW7Besi679gfRAbLw9/1ZV/NozphGG283dZ2DiRijZT 6jVDHB92KQWwnzTHO1dAgd5wC9w9Qxn9aBWq7Rpfm4q8nWxfcQW+fx5nLI6jXfA/ uQ8TWbz2yzPJZhNtekRw+tZSl7E5Mt1oX9RqDvAGdg6e/bXfYFIOUbxznoKygWqE zAqjNAxs9nYlXE4oFCYx2F3ws9qCWHWFABvhqQA93m5EZqLsaHVVWCE6+P/n7769 pZa+Q7PD+4MLzRd4T08vinvOfzqkvCPv -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:19 2025 by rpki-client