$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: gjQo9yCkSrrm4z6dm7mHd+6ulnKsqEjJec0bdkHVrQI= Subject key identifier: 23:46:A8:F2:D8:9E:C2:EC:7B:0B:A2:38:12:44:06:B0:67:B4:83:09 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 01A4 Signing time: Sat 23 Aug 2025 03:26:15 +0000 Manifest this update: Sat 23 Aug 2025 03:26:15 +0000 Manifest next update: Sat 30 Aug 2025 03:26:15 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: U8zrPKWA+4udfm+ZXkPfviS1k6fNblzgBTolZ9T922g=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: wN+RYivC51/sVMn5qM1gC8zTEDi66N47MLSR9Ot7lLw=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Aug 23 03:26:15 2025 GMT Not After : Aug 30 03:26:15 2025 GMT Subject: CN=68a934d7-e261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:5c:d6:64:32:6f:c6:d7:26:6c:1c:10:14: c2:8d:d0:47:cf:bf:e8:d2:23:8e:d5:ac:3a:0c:cf: 38:92:0d:1c:c3:25:fa:00:a1:ab:2d:58:9e:b4:af: 9e:4f:b0:0d:7b:39:40:e9:88:ff:1c:40:8a:9e:c2: 37:b8:81:05:0d:cf:8b:22:00:bf:08:2e:85:51:95: fc:ec:d3:c9:88:0d:82:a3:b3:51:f5:6e:89:75:d6: 72:b8:d9:ae:59:b4:f3:fa:d7:07:44:f7:de:0c:5a: e3:b8:a2:54:d6:76:84:49:b6:62:48:0d:18:0a:ed: ee:bb:cc:59:9f:5d:a3:48:17:83:37:ff:f9:7b:83: 16:1f:96:4d:89:7e:0d:d1:01:30:1d:ff:56:5b:e2: 00:1c:d6:3d:f4:b5:66:e6:f0:86:fa:6e:0c:81:4c: 1c:5b:d7:e4:6d:9c:2b:8d:8e:41:95:53:59:09:62: 6a:33:14:28:c2:3a:3f:5b:07:17:2f:72:69:d5:05: b5:ce:b2:9f:1a:90:eb:1f:32:fd:fd:8d:37:bd:f8: 51:21:a3:0c:6e:d6:76:dd:0c:be:0a:af:28:b9:93: 8e:7a:94:4c:5e:c7:86:83:aa:ad:39:01:df:23:92: 40:00:1f:d1:e7:87:53:83:50:9a:f5:26:2a:e6:d7: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:46:A8:F2:D8:9E:C2:EC:7B:0B:A2:38:12:44:06:B0:67:B4:83:09 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:80:42:04:30:b6:dc:34:5b:51:7b:c4:a7:d1:8a:e0:67:ae: a1:f7:90:94:6f:9f:3f:bd:f3:0e:ba:97:30:99:1d:ff:71:ae: 12:a1:ab:7e:99:d2:f0:c9:8c:59:54:2e:a9:97:9a:87:6e:bf: 81:54:dc:d1:36:b0:b4:d8:c2:f3:0b:8a:85:b0:98:c5:6d:62: d0:ac:a2:fd:be:11:b7:6f:98:26:c7:d3:9e:f3:ea:e4:85:1e: 43:d4:4d:48:9c:c6:d8:fb:1e:16:e5:63:f7:ae:0c:07:30:18: 4e:27:f5:3d:cd:12:22:b5:8c:5e:40:b3:3b:d0:a7:fe:ab:82: 36:d6:de:92:86:aa:33:b4:86:c8:d7:a6:f8:a8:7e:c9:f3:12: f9:e1:7a:f5:84:c2:04:7c:f9:9b:7e:36:dd:94:c7:97:58:47: 44:35:04:8f:ed:d3:50:db:6f:ac:e1:ac:99:f1:7d:31:01:26: 37:65:70:37:a3:d9:36:50:9c:e5:e5:ab:45:cd:40:33:87:ab: 0f:d3:5e:80:dd:b5:42:8a:0a:b9:2f:23:4e:71:a3:ae:71:3a: 47:ea:23:07:f8:0e:c7:8d:01:7e:38:5c:ba:ee:c9:6c:f9:fd: 76:d0:f2:cf:50:20:78:9d:db:76:bc:05:d8:78:86:7b:4a:93: af:41:98:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUwODIzMDMyNjE1WhcNMjUwODMwMDMyNjE1WjAYMRYwFAYD VQQDEw02OGE5MzRkNy1lMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0Vc1mQyb8bXJmwcEBTCjdBHz7/o0iOO1aw6DM84kg0cwyX6AKGrLVietK+e T7ANezlA6Yj/HECKnsI3uIEFDc+LIgC/CC6FUZX87NPJiA2Co7NR9W6JddZyuNmu WbTz+tcHRPfeDFrjuKJU1naESbZiSA0YCu3uu8xZn12jSBeDN//5e4MWH5ZNiX4N 0QEwHf9WW+IAHNY99LVm5vCG+m4MgUwcW9fkbZwrjY5BlVNZCWJqMxQowjo/WwcX L3Jp1QW1zrKfGpDrHzL9/Y03vfhRIaMMbtZ23Qy+Cq8ouZOOepRMXseGg6qtOQHf I5JAAB/R54dTg1Ca9SYq5tcWhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNGqPLY nsLsewuiOBJEBrBntIMJMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvgEIEMLbcNFtRe8Sn0YrgZ66h95CUb58/vfMOupcwmR3/ca4Soat+ mdLwyYxZVC6pl5qHbr+BVNzRNrC02MLzC4qFsJjFbWLQrKL9vhG3b5gmx9Oe8+rk hR5D1E1InMbY+x4W5WP3rgwHMBhOJ/U9zRIitYxeQLM70Kf+q4I21t6ShqoztIbI 16b4qH7J8xL54Xr1hMIEfPmbfjbdlMeXWEdENQSP7dNQ22+s4ayZ8X0xASY3ZXA3 o9k2UJzl5atFzUAzh6sP016A3bVCigq5LyNOcaOucTpH6iMH+A7HjQF+OFy67sls +f120PLPUCB4ndt2vAXYeIZ7SpOvQZhY -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:17 2025 by rpki-client