$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft File: zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json) Hash identifier: E/z3Ouk4PSTxXql8RJbQfOoVzETFNno+0wQFYr4DWA8= Subject key identifier: E0:E4:86:2E:F8:75:46:91:1E:A6:22:90:6C:E2:1D:06:00:15:16:C1 Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 Certificate issuer: /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft Manifest number: EF Signing time: Sat 23 Aug 2025 05:26:29 +0000 Manifest this update: Sat 23 Aug 2025 05:26:29 +0000 Manifest next update: Sat 30 Aug 2025 05:26:29 +0000 Files and hashes: 1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: Z6CxbUPZdULdMvolTMdUmV4Lh7/XGJ1cbG/UcYP7rcw=) 2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Validity Not Before: Aug 23 05:26:29 2025 GMT Not After : Aug 30 05:26:29 2025 GMT Subject: CN=68a95105-b987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:2a:2a:cc:15:0b:3e:9f:85:0c:5c:99:5c: 1b:c4:1b:dc:27:16:c3:94:8c:b2:52:7d:7b:03:23: ec:4d:dc:13:66:7b:94:39:81:ca:84:4e:d3:fb:3f: 58:f9:3c:16:bd:d3:5c:a8:9e:eb:f9:3a:4d:1f:ad: 00:12:52:47:e4:14:9a:ee:fc:bc:ed:94:b0:6a:70: c0:ba:e7:e0:81:08:14:21:de:a8:44:a7:d1:56:38: c0:b0:06:1a:42:2d:99:ec:be:71:e0:7b:08:80:01: 29:0d:b8:3e:e8:f8:77:05:36:2e:d4:08:47:50:bd: 6b:39:9a:e4:35:9c:37:ea:24:94:09:4d:f5:85:54: e8:df:f2:0c:18:95:f1:c6:1e:95:7a:b5:9f:ab:ad: 5d:09:33:86:52:e4:5f:ab:24:10:55:05:6e:c8:ff: 9b:b6:d1:e5:5a:06:86:3b:3a:24:eb:c7:9c:8c:16: 18:67:e8:1c:4b:7b:82:33:5c:82:7b:21:90:13:a4: 5c:7e:42:e1:c6:e1:94:e2:f1:44:40:e5:79:44:7f: 2c:45:e7:5a:e8:4d:d5:c6:ef:8e:02:6c:5f:18:f4: 2d:52:56:08:27:d6:bd:0c:c6:3c:d9:c7:96:ac:1d: f1:78:45:63:e0:08:2e:46:1c:55:53:e2:54:e5:67: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E4:86:2E:F8:75:46:91:1E:A6:22:90:6C:E2:1D:06:00:15:16:C1 X509v3 Authority Key Identifier: keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:73:72:06:b8:3c:cf:23:50:5f:33:b1:78:45:17:61:fd: 3c:56:53:47:ef:81:52:37:8f:b8:ba:27:37:5c:1e:37:4f:87: 32:66:49:f9:33:b4:94:d0:e7:3a:0c:96:62:4c:08:75:f5:dd: d9:0b:d3:e8:7c:fb:95:a4:94:3b:e6:9c:7d:f0:c3:9b:d2:29: 61:7d:38:c8:6c:0c:16:65:d8:87:0f:6d:de:da:ac:f3:20:68: 81:3b:08:1a:63:c1:51:3f:fc:14:a9:b6:62:34:81:70:90:93: 9a:13:a7:7a:b7:7c:b7:38:92:5c:c2:14:b5:26:62:33:76:ee: 6f:3b:bd:fa:84:13:d5:59:ad:f2:14:5a:78:45:50:94:ac:1f: b4:d3:8b:7a:39:69:1b:11:64:c3:79:0b:30:eb:f6:86:70:b1: f9:e9:d8:ab:2b:95:09:c1:48:3e:8e:81:aa:64:61:aa:bb:92: 73:8b:1f:c3:05:25:22:2f:93:a6:8d:f4:5b:02:b3:c4:45:df: cb:31:f6:9a:b5:89:cb:1a:1c:7e:03:77:f5:14:ce:c2:14:12: ce:a3:ce:89:b6:d2:67:5c:91:35:91:fb:67:fe:4d:60:c4:d2: 6a:93:f5:b9:b8:8b:99:e2:b5:77:bb:0e:36:96:cc:b6:cb:14: ff:94:e8:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGODYxMTAvBgNVBAUTKENFNkJGQjA4Rjk1Mjg2MzUyN0E5M0MxMERBM0NBN0RG OTExM0FDRjEwHhcNMjUwODIzMDUyNjI5WhcNMjUwODMwMDUyNjI5WjAYMRYwFAYD VQQDEw02OGE5NTEwNS1iOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ooqKswVCz6fhQxcmVwbxBvcJxbDlIyyUn17AyPsTdwTZnuUOYHKhE7T+z9Y +TwWvdNcqJ7r+TpNH60AElJH5BSa7vy87ZSwanDAuufggQgUId6oRKfRVjjAsAYa Qi2Z7L5x4HsIgAEpDbg+6Ph3BTYu1AhHUL1rOZrkNZw36iSUCU31hVTo3/IMGJXx xh6VerWfq61dCTOGUuRfqyQQVQVuyP+bttHlWgaGOzok68ecjBYYZ+gcS3uCM1yC eyGQE6RcfkLhxuGU4vFEQOV5RH8sReda6E3Vxu+OAmxfGPQtUlYIJ9a9DMY82ceW rB3xeEVj4AguRhxVU+JU5Wcp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODkhi74 dUaRHqYikGziHQYAFRbBMB8GA1UdIwQYMBaAFM5r+wj5UoY1J6k8ENo8p9+RE6zx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY4Ni8wOTAzREI5MDEy QjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hqVW5xVHdRMmp5bjM1RVRy UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptdjdDUGxTaGpVbnFUd1EyanluMzVFVHJQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY4Ni8wOTAzREI5MDEyQjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hq VW5xVHdRMmp5bjM1RVRyUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA85XNyBrg8zyNQXzOxeEUXYf08VlNH74FSN4+4uic3XB43T4cyZkn5 M7SU0Oc6DJZiTAh19d3ZC9PofPuVpJQ75px98MOb0ilhfTjIbAwWZdiHD23e2qzz IGiBOwgaY8FRP/wUqbZiNIFwkJOaE6d6t3y3OJJcwhS1JmIzdu5vO736hBPVWa3y FFp4RVCUrB+004t6OWkbEWTDeQsw6/aGcLH56dirK5UJwUg+joGqZGGqu5Jzix/D BSUiL5OmjfRbArPERd/LMfaatYnLGhx+A3f1FM7CFBLOo86JttJnXJE1kftn/k1g xNJqk/W5uIuZ4rV3uw42lsy2yxT/lOgV -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:41 2025 by rpki-client