$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: 3n5XVuErBRgSORvzm5mNMUPlFEwGuq6BmLirurx7A5E= Subject key identifier: 3A:45:35:F8:B1:EC:65:47:8E:A7:E4:CC:71:6E:B9:D7:32:99:82:88 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: BB Signing time: Sat 23 Aug 2025 06:36:34 +0000 Manifest this update: Sat 23 Aug 2025 06:36:33 +0000 Manifest next update: Sat 30 Aug 2025 06:36:33 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: J8uluEWvNnf/sJX0AhfXSuHwf4wGzsv3ahnOr89vspQ=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 6: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Aug 23 06:36:33 2025 GMT Not After : Aug 30 06:36:33 2025 GMT Subject: CN=68a96172-7f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cf:09:ab:dc:51:1c:3c:14:16:52:5b:e8:2b: 2e:b7:04:dc:72:5d:59:82:cf:85:89:52:1d:3b:ec: c7:42:15:40:15:41:a3:14:cb:31:12:30:af:e2:83: ed:eb:8b:eb:8d:55:01:17:79:5d:6f:f6:43:4e:be: 60:2f:6d:29:07:6f:b6:34:1e:69:31:24:71:3a:3a: e3:52:fc:5a:9a:82:f7:7a:12:3c:75:b6:42:4e:88: 59:78:2c:ab:ad:3f:0e:7e:33:3d:f6:f6:40:4f:9b: cd:78:cb:93:71:04:91:6d:7b:56:7a:ae:2e:59:cc: 59:0b:0b:cb:54:d5:61:d1:18:b5:a8:96:4d:5c:7c: a1:70:43:ab:2c:32:06:f2:c0:bb:a2:6f:c8:08:69: 34:83:fd:5a:eb:8a:15:ea:d3:8a:a5:5e:c8:3d:47: 0b:c5:33:2d:72:91:62:79:f3:9b:bc:2b:7a:ce:4c: c4:89:37:92:fb:d5:23:1c:50:14:03:c2:74:e9:f0: 7b:3f:32:ab:a1:56:63:ae:03:24:5c:41:17:53:49: 90:30:49:4e:5f:56:82:45:ca:0f:a5:3f:74:be:c9: 08:3f:de:20:4f:10:54:eb:a3:01:b6:7e:00:d3:0c: 16:e2:86:08:12:e1:b5:75:3a:6b:f7:d8:78:f3:c0: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:35:F8:B1:EC:65:47:8E:A7:E4:CC:71:6E:B9:D7:32:99:82:88 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a2:d5:31:38:13:97:be:ce:c8:26:9d:ab:b2:dc:0f:b6:8e: ab:b4:f9:5b:7f:bb:fa:67:8b:73:6d:3b:91:2e:90:16:64:47: d5:22:60:18:dd:df:06:40:48:3c:e3:96:2f:ec:19:35:da:da: da:45:6b:c3:15:c6:fd:43:f3:e5:f7:32:8b:0c:0f:aa:88:bb: 10:f0:0d:9e:e1:39:f7:fe:a3:e4:6a:b3:0a:df:e3:91:75:8c: 68:4c:2f:e0:d6:b9:36:03:b3:12:9d:32:cd:3c:07:fe:a6:9a: e5:10:ec:c7:94:d8:40:b2:09:57:ce:a0:3c:15:fb:ce:1f:55: 35:14:7f:5d:31:c5:c3:49:01:8b:da:92:6e:37:44:10:0c:7f: b4:05:26:7a:e4:1a:6b:bb:8e:1c:d0:ad:71:af:e6:ad:6a:3f: eb:44:6c:50:e8:bc:3a:5d:30:0e:e1:79:68:76:0a:4c:a9:08: 48:c3:56:f7:8b:26:8f:4e:f8:29:b8:59:9f:6f:16:0c:54:db: 5e:f6:12:4b:c8:ef:2d:89:67:d3:0f:09:99:e5:56:e8:5f:61: 76:55:a6:77:9c:eb:35:ba:ad:f8:d1:af:af:61:4f:fa:7d:93: 19:c2:b6:26:c1:84:b0:c0:51:f8:8b:bc:1f:d7:9e:9d:a9:98: 01:3d:5d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwODIzMDYzNjMzWhcNMjUwODMwMDYzNjMzWjAYMRYwFAYD VQQDEw02OGE5NjE3Mi03ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM8Jq9xRHDwUFlJb6CsutwTccl1Zgs+FiVIdO+zHQhVAFUGjFMsxEjCv4oPt 64vrjVUBF3ldb/ZDTr5gL20pB2+2NB5pMSRxOjrjUvxamoL3ehI8dbZCTohZeCyr rT8OfjM99vZAT5vNeMuTcQSRbXtWeq4uWcxZCwvLVNVh0Ri1qJZNXHyhcEOrLDIG 8sC7om/ICGk0g/1a64oV6tOKpV7IPUcLxTMtcpFiefObvCt6zkzEiTeS+9UjHFAU A8J06fB7PzKroVZjrgMkXEEXU0mQMElOX1aCRcoPpT90vskIP94gTxBU66MBtn4A 0wwW4oYIEuG1dTpr99h488DamQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpFNfix 7GVHjqfkzHFuudcymYKIMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuotUxOBOXvs7IJp2rstwPto6rtPlbf7v6Z4tzbTuRLpAWZEfVImAY 3d8GQEg845Yv7Bk12traRWvDFcb9Q/Pl9zKLDA+qiLsQ8A2e4Tn3/qPkarMK3+OR dYxoTC/g1rk2A7MSnTLNPAf+pprlEOzHlNhAsglXzqA8FfvOH1U1FH9dMcXDSQGL 2pJuN0QQDH+0BSZ65Bpru44c0K1xr+ataj/rRGxQ6Lw6XTAO4XlodgpMqQhIw1b3 iyaPTvgpuFmfbxYMVNte9hJLyO8tiWfTDwmZ5VboX2F2VaZ3nOs1uq340a+vYU/6 fZMZwrYmwYSwwFH4i7wf156dqZgBPV3U -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:19 2025 by rpki-client