$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: bSTLzZlPQCXljMOlkgHuzjn93rOdGXB4GObhKV0CyKs= Subject key identifier: 3F:86:8B:C2:58:B1:C2:AC:4D:EC:39:2E:97:F6:02:99:DE:4F:0A:16 Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: 0129 Signing time: Sat 23 Aug 2025 04:48:38 +0000 Manifest this update: Sat 23 Aug 2025 04:48:37 +0000 Manifest next update: Sat 30 Aug 2025 04:48:37 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: adt7DSx72afRmHMjWmWOfcuAHuG5ldRDiw+xJYamo10=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Aug 23 04:48:37 2025 GMT Not After : Aug 30 04:48:37 2025 GMT Subject: CN=68a94825-f2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:a6:bb:25:7c:a1:ed:bc:55:37:68:db:dc: 0a:21:3e:fd:87:65:7a:23:f7:af:fd:85:ac:3e:cc: 69:8b:a3:d2:27:a2:53:cd:eb:07:33:0a:c2:40:1a: ee:ff:10:e8:b7:f4:4a:9d:56:4f:1d:f5:1a:14:71: b0:9e:1c:5f:d8:31:d8:71:c1:2f:8c:87:1a:84:1f: 45:ea:2b:4d:bb:38:71:56:ff:a0:d8:6c:14:e7:21: 45:82:4a:da:87:fd:69:7c:3a:9c:e5:89:7c:3d:b2: 38:28:46:e7:96:0c:ff:c9:f1:db:77:8e:c1:66:b3: cf:cb:30:94:b7:9a:c9:08:2a:55:72:84:c4:0c:9a: 13:a4:c8:27:85:2a:95:08:10:55:77:f1:e0:e8:ef: fa:ac:a4:b7:1e:e6:ce:4b:95:55:f9:5b:00:8e:2c: cc:85:ff:fa:1d:0d:a5:2f:7e:fd:9e:5a:fc:18:5c: dd:7a:ef:33:4f:64:65:5d:61:52:4b:dd:22:fe:91: 53:32:94:bd:7c:34:91:0e:74:48:06:26:04:22:2d: 1f:e7:91:94:01:6b:2a:34:e7:b9:b5:7b:55:dc:9a: 37:e2:f2:28:84:8c:d3:16:4a:6d:fa:66:76:4c:da: 85:76:db:00:83:c6:ba:16:99:30:20:20:44:bd:88: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:86:8B:C2:58:B1:C2:AC:4D:EC:39:2E:97:F6:02:99:DE:4F:0A:16 X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:29:16:14:23:b1:80:72:b5:58:65:5c:bb:82:eb:9c:6f:ce: 5b:da:6d:1a:98:c9:ef:be:a0:b7:7c:55:e4:2b:c7:97:ae:17: 68:24:bd:81:42:c8:13:3d:bd:e6:f8:76:8a:4c:1d:6f:60:d0: 23:4f:86:10:74:09:9a:00:bf:d0:c7:5a:4e:7e:16:0b:e7:67: be:08:98:d3:02:5e:ab:e2:0e:d0:11:ac:55:8d:a6:f7:7e:93: 28:bb:1b:28:5f:20:56:6c:13:24:8d:75:f7:b6:d2:bc:7a:96: 5c:4c:d1:c1:29:dd:8e:b9:e4:12:64:4e:65:8e:86:a1:e5:47: 42:57:b1:45:8b:35:86:2a:84:4d:48:e1:9d:5d:4c:57:7d:4f: 39:e4:7b:1c:43:88:0f:74:ea:38:ee:d2:2b:4c:b9:89:02:3e: ff:5d:7d:23:bc:8d:8b:d5:bd:20:dd:e1:b2:b8:c7:f4:dd:fd: da:e4:bb:84:ec:c1:2d:1c:65:39:d1:36:4a:97:ab:6d:60:69: 2f:39:25:61:eb:6a:87:55:5f:f3:92:61:8a:92:75:6b:cc:be: 9d:ed:64:57:5b:5c:9c:22:2d:c8:6d:c3:b1:ff:fc:22:09:73: 69:0b:4b:ed:84:7c:3c:66:3c:dc:f7:cc:3d:92:cc:30:16:f8: 04:12:92:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjUwODIzMDQ0ODM3WhcNMjUwODMwMDQ0ODM3WjAYMRYwFAYD VQQDEw02OGE5NDgyNS1mMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhamuyV8oe28VTdo29wKIT79h2V6I/ev/YWsPsxpi6PSJ6JTzesHMwrCQBru /xDot/RKnVZPHfUaFHGwnhxf2DHYccEvjIcahB9F6itNuzhxVv+g2GwU5yFFgkra h/1pfDqc5Yl8PbI4KEbnlgz/yfHbd47BZrPPyzCUt5rJCCpVcoTEDJoTpMgnhSqV CBBVd/Hg6O/6rKS3HubOS5VV+VsAjizMhf/6HQ2lL379nlr8GFzdeu8zT2RlXWFS S90i/pFTMpS9fDSRDnRIBiYEIi0f55GUAWsqNOe5tXtV3Jo34vIohIzTFkpt+mZ2 TNqFdtsAg8a6FpkwICBEvYiLpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+Gi8JY scKsTew5Lpf2ApneTwoWMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5 eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7KRYUI7GAcrVYZVy7guucb85b2m0amMnvvqC3fFXkK8eXrhdoJL2B QsgTPb3m+HaKTB1vYNAjT4YQdAmaAL/Qx1pOfhYL52e+CJjTAl6r4g7QEaxVjab3 fpMouxsoXyBWbBMkjXX3ttK8epZcTNHBKd2OueQSZE5ljoah5UdCV7FFizWGKoRN SOGdXUxXfU855HscQ4gPdOo47tIrTLmJAj7/XX0jvI2L1b0g3eGyuMf03f3a5LuE 7MEtHGU50TZKl6ttYGkvOSVh62qHVV/zkmGKknVrzL6d7WRXW1ycIi3IbcOx//wi CXNpC0vthHw8Zjzc98w9kswwFvgEEpJS -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:55 2025 by rpki-client