$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: +q1wglghLqpgOFOsJfQh/Mi2rvxW0eJj6EIv7Drr4Rk= Subject key identifier: E6:07:F3:51:78:9B:2E:73:54:1E:CE:D8:29:1A:57:A7:E2:5A:ED:28 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 018A Signing time: Thu 03 Jul 2025 03:41:21 +0000 Manifest this update: Thu 03 Jul 2025 03:41:20 +0000 Manifest next update: Thu 10 Jul 2025 03:41:20 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: +fbyA8H6BazUTxRP6wZgB7IX2DdFDglnvijXmRcMWhQ=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: wN+RYivC51/sVMn5qM1gC8zTEDi66N47MLSR9Ot7lLw=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Jul 3 03:41:20 2025 GMT Not After : Jul 10 03:41:20 2025 GMT Subject: CN=6865fbe1-bfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:11:04:03:56:97:64:9f:b9:ab:5d:81:a0: 3b:58:a0:ff:13:a7:27:f4:70:1e:c4:1d:04:77:e2: 65:2a:37:85:5b:13:6e:66:c3:06:c0:37:79:ff:64: 09:7c:da:13:be:84:43:bb:bb:f7:f0:88:26:73:f3: de:ed:dd:74:d0:a2:3c:99:9a:93:72:eb:28:ea:e1: 76:f0:0a:3b:24:b3:ad:3c:36:76:7e:88:7b:ea:78: f7:bb:bb:d2:ed:92:8d:a6:91:79:c9:f5:45:c2:ea: b8:6b:f8:16:b5:d7:2b:62:a3:0e:a5:d1:e9:c0:6e: 8e:23:a7:42:7d:09:13:19:a9:51:6f:f4:da:b4:e1: 64:37:a5:6f:28:1d:e1:97:ef:9a:d2:43:f5:10:c8: 59:3f:df:53:eb:ea:e8:cd:aa:33:1a:00:60:2e:72: 91:9c:c1:b8:a1:33:eb:c8:59:ab:f2:fa:13:af:84: 25:a1:12:2a:86:c6:fe:15:66:d0:a2:6e:bd:f4:27: 13:95:5c:12:c8:49:a6:d0:e2:98:8a:08:7c:4e:52: 59:0f:97:e4:b0:ad:d7:57:e5:6e:6e:6d:b1:c8:ac: b4:de:73:cd:53:d7:7a:cf:86:99:13:54:87:ff:cc: 06:05:f7:7a:fd:28:8b:a1:2e:12:ca:1f:d0:35:2e: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:07:F3:51:78:9B:2E:73:54:1E:CE:D8:29:1A:57:A7:E2:5A:ED:28 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:f1:3a:04:92:b9:1d:e0:e1:ef:83:f2:cf:96:b5:35:65:97: 29:81:0f:0d:a2:f4:9e:f2:dc:33:d2:ad:dc:37:26:2e:36:f5: 18:3b:79:d6:2d:06:0b:c9:07:7f:ee:34:80:c4:03:9e:00:53: 55:60:3b:57:da:79:98:06:50:da:31:03:4c:90:3c:20:51:60: 1b:f3:01:49:57:0c:8c:49:4d:4c:af:7e:f7:c6:fa:e9:26:d4: 5b:59:df:df:e7:1c:0e:a5:be:b0:ed:4c:8d:7f:d6:37:9f:c4: 00:8e:28:ce:91:64:19:a1:82:da:70:0e:e6:a0:e8:df:07:8a: 5f:03:ad:e2:91:98:11:2a:b3:b3:1c:59:d2:dd:0f:56:40:e4: 4c:05:92:07:fa:d3:54:dc:2e:4e:b0:4a:39:ad:07:7b:cc:c4: e0:74:0d:28:36:99:8a:26:e0:b9:83:4c:4e:bb:08:cc:19:c3: 26:e1:b3:18:c0:da:f1:91:57:e4:89:37:b2:fa:4e:b5:01:00: 0f:29:af:33:88:60:1d:84:5f:e4:16:dd:13:46:5b:18:69:fc: fa:8b:a3:81:f0:a0:51:27:73:a2:61:57:4e:92:63:4b:b5:c6: 5e:1b:b5:3d:8f:5a:09:df:fe:b7:31:1c:5a:a8:38:fe:3f:c9: 6e:c9:96:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUwNzAzMDM0MTIwWhcNMjUwNzEwMDM0MTIwWjAYMRYwFAYD VQQDEw02ODY1ZmJlMS1iZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+ARBANWl2SfuatdgaA7WKD/E6cn9HAexB0Ed+JlKjeFWxNuZsMGwDd5/2QJ fNoTvoRDu7v38Igmc/Pe7d100KI8mZqTcuso6uF28Ao7JLOtPDZ2foh76nj3u7vS 7ZKNppF5yfVFwuq4a/gWtdcrYqMOpdHpwG6OI6dCfQkTGalRb/TatOFkN6VvKB3h l++a0kP1EMhZP99T6+rozaozGgBgLnKRnMG4oTPryFmr8voTr4QloRIqhsb+FWbQ om699CcTlVwSyEmm0OKYigh8TlJZD5fksK3XV+Vubm2xyKy03nPNU9d6z4aZE1SH /8wGBfd6/SiLoS4Syh/QNS6b8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYH81F4 my5zVB7O2CkaV6fiWu0oMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC78ToEkrkd4OHvg/LPlrU1ZZcpgQ8NovSe8twz0q3cNyYuNvUYO3nW LQYLyQd/7jSAxAOeAFNVYDtX2nmYBlDaMQNMkDwgUWAb8wFJVwyMSU1Mr373xvrp JtRbWd/f5xwOpb6w7UyNf9Y3n8QAjijOkWQZoYLacA7moOjfB4pfA63ikZgRKrOz HFnS3Q9WQORMBZIH+tNU3C5OsEo5rQd7zMTgdA0oNpmKJuC5g0xOuwjMGcMm4bMY wNrxkVfkiTey+k61AQAPKa8ziGAdhF/kFt0TRlsYafz6i6OB8KBRJ3OiYVdOkmNL tcZeG7U9j1oJ3/63MRxaqDj+P8luyZbx -----END CERTIFICATE-----Generated at Fri Jul 4 11:54:38 2025 by rpki-client