$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft File: zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json) Hash identifier: iyEQJ+zJPqQ4AV9yExfOA1H5u932yiNCTk4msyvDmDw= Subject key identifier: 89:ED:31:52:82:7B:7F:00:EB:E3:52:29:64:95:32:0E:5F:49:04:9C Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 Certificate issuer: /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft Manifest number: D5 Signing time: Thu 03 Jul 2025 05:46:24 +0000 Manifest this update: Thu 03 Jul 2025 05:46:24 +0000 Manifest next update: Thu 10 Jul 2025 05:46:24 +0000 Files and hashes: 1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: xumc1VPxKWL8y8U4v0woWuPazHV312XtNP4doTI78/Q=) 2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Validity Not Before: Jul 3 05:46:24 2025 GMT Not After : Jul 10 05:46:24 2025 GMT Subject: CN=68661930-b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:73:98:3e:86:9a:7d:89:dc:27:1d:99:4f: f7:a8:dd:d4:dc:5f:f0:cc:b0:06:d1:d1:c9:48:a1: f2:9d:9e:19:3d:fc:1e:99:83:42:91:e6:33:94:e4: 02:19:91:cf:83:0b:4c:31:93:d3:32:71:9c:b5:e2: fe:e7:94:8c:10:04:68:8f:4c:49:14:76:34:fa:86: 81:af:af:f9:63:93:5a:ec:c3:f7:24:4c:ef:3b:16: 19:04:6a:c4:75:1a:cc:b3:d9:51:36:aa:5c:33:c2: 73:c7:01:97:5b:1d:d9:74:48:1f:f6:e3:87:8e:04: be:01:a9:6d:d6:1b:ac:e6:94:c5:15:c7:53:7c:99: e5:80:93:e7:10:0a:58:8f:a5:e3:49:3e:28:0c:35: b4:30:40:e4:65:68:3b:b9:48:26:62:a7:20:cb:dc: 1b:e4:2d:2a:bb:d8:0f:7d:94:34:db:57:c0:22:f3: ec:fd:34:c7:da:ae:53:d7:ed:d3:2d:0a:aa:8f:2f: 3f:89:16:79:ea:67:4f:54:07:00:e5:4f:5c:e0:3a: ee:7a:30:ae:95:6a:92:d8:67:ef:56:38:cc:9f:bc: fd:5c:14:26:5e:df:51:63:10:80:0f:14:8c:90:03: 32:4b:50:d6:49:12:b7:41:4e:4e:1c:3b:19:7b:08: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:ED:31:52:82:7B:7F:00:EB:E3:52:29:64:95:32:0E:5F:49:04:9C X509v3 Authority Key Identifier: keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:c8:85:3e:53:78:84:25:27:05:dc:92:e7:34:8a:0d:69:9d: 6a:2a:49:b6:33:c0:5f:7a:31:ce:69:01:00:e3:3a:6c:9f:19: 77:ad:cb:1c:89:8f:e8:93:58:10:06:0e:3e:bb:8e:ab:34:b0: 52:08:15:f6:ca:bc:70:7c:53:48:cc:92:d6:b0:51:f0:c9:7e: b9:9a:39:1d:08:a1:8b:b1:bd:17:48:91:53:27:88:b6:c3:25: ec:84:66:fd:eb:eb:33:9e:cb:1c:2b:2b:a7:27:67:da:3d:45: 42:a1:e6:da:4e:ce:82:08:fe:e3:ec:28:3e:32:fb:6b:4d:6c: c5:6c:c3:64:b0:01:e3:ef:6b:ef:6f:2d:b7:76:92:45:29:89: ca:e0:87:d7:15:15:2a:08:49:1c:6b:ba:3a:0e:98:00:d7:5d: f7:7f:4a:ce:bd:6f:36:e2:76:60:29:c1:16:b3:c1:ce:bc:79: 64:e4:ae:d3:ee:d8:63:1e:6c:a9:9d:62:fe:7a:be:af:57:20: b8:ce:2f:d6:c4:b5:60:58:65:26:f0:b7:42:13:e1:e2:3e:26: b2:e6:5d:27:a1:4a:bb:05:80:88:20:54:f7:6d:0e:ea:49:ce: d4:37:de:70:97:a1:30:00:e6:59:c1:b8:bc:01:be:36:d8:08: 45:73:d0:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGODYxMTAvBgNVBAUTKENFNkJGQjA4Rjk1Mjg2MzUyN0E5M0MxMERBM0NBN0RG OTExM0FDRjEwHhcNMjUwNzAzMDU0NjI0WhcNMjUwNzEwMDU0NjI0WjAYMRYwFAYD VQQDEw02ODY2MTkzMC1iNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw1zmD6Gmn2J3CcdmU/3qN3U3F/wzLAG0dHJSKHynZ4ZPfwemYNCkeYzlOQC GZHPgwtMMZPTMnGcteL+55SMEARoj0xJFHY0+oaBr6/5Y5Na7MP3JEzvOxYZBGrE dRrMs9lRNqpcM8JzxwGXWx3ZdEgf9uOHjgS+Aalt1hus5pTFFcdTfJnlgJPnEApY j6XjST4oDDW0MEDkZWg7uUgmYqcgy9wb5C0qu9gPfZQ021fAIvPs/TTH2q5T1+3T LQqqjy8/iRZ56mdPVAcA5U9c4DruejCulWqS2GfvVjjMn7z9XBQmXt9RYxCADxSM kAMyS1DWSRK3QU5OHDsZewhlZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIntMVKC e38A6+NSKWSVMg5fSQScMB8GA1UdIwQYMBaAFM5r+wj5UoY1J6k8ENo8p9+RE6zx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY4Ni8wOTAzREI5MDEy QjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hqVW5xVHdRMmp5bjM1RVRy UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptdjdDUGxTaGpVbnFUd1EyanluMzVFVHJQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY4Ni8wOTAzREI5MDEyQjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hq VW5xVHdRMmp5bjM1RVRyUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+yIU+U3iEJScF3JLnNIoNaZ1qKkm2M8BfejHOaQEA4zpsnxl3rcsc iY/ok1gQBg4+u46rNLBSCBX2yrxwfFNIzJLWsFHwyX65mjkdCKGLsb0XSJFTJ4i2 wyXshGb96+sznsscKyunJ2faPUVCoebaTs6CCP7j7Cg+MvtrTWzFbMNksAHj72vv by23dpJFKYnK4IfXFRUqCEkca7o6DpgA1133f0rOvW824nZgKcEWs8HOvHlk5K7T 7thjHmypnWL+er6vVyC4zi/WxLVgWGUm8LdCE+HiPiay5l0noUq7BYCIIFT3bQ7q Sc7UN95wl6EwAOZZwbi8Ab422AhFc9Bk -----END CERTIFICATE-----Generated at Fri Jul 4 14:43:09 2025 by rpki-client