$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: sijjfKZSE4/JrNTyWg6uIb3zh8xoc7q6jZ/2GpoQEoY= Subject key identifier: BB:EB:B0:9D:51:2F:E1:F4:46:2C:CE:F0:0B:F0:35:0B:7D:F1:1C:4B Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0FD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0FCB Signing time: Fri 22 Aug 2025 17:37:14 +0000 Manifest this update: Fri 22 Aug 2025 17:37:14 +0000 Manifest next update: Fri 29 Aug 2025 17:37:14 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: kW60Pb8aR2Do8si1nFXrXMWYH8VPo+GZYPGTQi46V2M=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4057 (0xfd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Aug 22 17:37:14 2025 GMT Not After : Aug 29 17:37:14 2025 GMT Subject: CN=68a8aaca-5dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:ec:fe:6d:b6:fd:5c:88:05:a3:6c:53:55: c2:fe:36:53:b4:ef:ec:ba:0a:a1:e4:35:f9:ad:34: df:27:e1:46:e3:80:43:27:f9:28:1d:72:26:15:2a: 31:d0:04:a3:4c:45:d6:76:a8:f4:93:99:94:d7:d2: d2:1a:96:eb:73:b4:22:4b:4f:56:9c:26:50:77:4b: cd:70:c2:73:50:d9:6f:56:9a:90:21:49:55:0c:68: 0c:ed:48:db:a8:85:87:5d:1a:7d:11:1f:ba:96:23: 2e:16:38:4f:bd:b6:58:e3:15:95:39:80:d4:de:d0: 12:88:6d:49:8e:0b:e7:e8:e1:cf:9d:8c:e1:81:9c: 62:85:c4:2c:4d:fe:0c:9c:0c:30:43:3c:39:dc:d9: 50:06:90:c7:2f:0a:db:0a:0b:40:5e:45:b9:09:e9: 36:90:08:de:af:8d:ec:f8:c3:21:86:62:e9:6d:58: ea:90:42:d3:57:95:c2:d9:a8:bc:d1:30:f8:e3:c0: 59:43:99:85:22:48:4c:b9:c9:5f:21:0e:5e:ee:c6: 84:a0:3b:1f:0b:9f:5c:ae:74:29:ab:d6:eb:df:cc: db:a8:02:13:96:50:3e:da:53:2d:31:bc:2a:b2:70: 83:af:b3:26:5e:6a:55:3e:c2:4d:83:e2:b7:1b:0f: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:B0:9D:51:2F:E1:F4:46:2C:CE:F0:0B:F0:35:0B:7D:F1:1C:4B X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:ac:d3:6f:fd:62:84:85:bc:d1:88:cf:e1:b4:c7:ca:f5:b4: 0c:d9:61:72:69:c6:c0:66:ef:c5:50:f0:df:dd:6b:e9:c6:cf: cd:bb:5c:62:69:96:7a:f9:35:87:4d:86:ca:91:88:bd:ea:d4: f7:19:cb:76:96:d3:c6:48:ad:22:d4:cf:e9:37:e5:2e:13:35: 7c:88:17:b9:53:3f:4b:e7:92:1d:cd:3d:ad:fb:e1:41:4c:03: 77:ca:ed:6c:43:58:40:98:c2:18:2e:3a:a9:d0:21:eb:6a:45: cb:ae:9c:43:83:5e:54:3a:74:20:79:34:45:32:f4:c2:b7:94: 50:c1:11:c6:d0:ff:ea:65:69:c5:e0:93:49:e1:44:6c:3f:4d: 2d:36:b6:0f:be:6e:02:7c:12:00:1a:d5:c6:31:51:9f:e6:1c: d0:1b:bd:a6:59:5d:3a:a8:15:9a:5f:81:ac:56:10:c1:6b:a1: b8:2a:13:f9:07:ce:ab:b2:ab:f2:22:08:05:c4:b1:b7:6a:d6: fe:77:fc:84:6a:0b:e7:fb:3b:48:ec:f5:f0:b7:21:b2:22:2f: 39:88:ee:29:46:1b:00:57:30:d9:6a:b1:f3:e8:5b:48:6b:69: d0:af:f2:0c:4d:62:b5:17:72:9c:4f:cd:01:ca:d7:1f:95:0d: bd:6b:3b:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjUwODIyMTczNzE0WhcNMjUwODI5MTczNzE0WjAYMRYwFAYD VQQDEw02OGE4YWFjYS01ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur7s/m22/VyIBaNsU1XC/jZTtO/sugqh5DX5rTTfJ+FG44BDJ/koHXImFSox 0ASjTEXWdqj0k5mU19LSGpbrc7QiS09WnCZQd0vNcMJzUNlvVpqQIUlVDGgM7Ujb qIWHXRp9ER+6liMuFjhPvbZY4xWVOYDU3tASiG1Jjgvn6OHPnYzhgZxihcQsTf4M nAwwQzw53NlQBpDHLwrbCgtAXkW5Cek2kAjer43s+MMhhmLpbVjqkELTV5XC2ai8 0TD448BZQ5mFIkhMuclfIQ5e7saEoDsfC59crnQpq9br38zbqAITllA+2lMtMbwq snCDr7MmXmpVPsJNg+K3Gw8JlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvrsJ1R L+H0RizO8AvwNQt98RxLMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDrNNv/WKEhbzRiM/htMfK9bQM2WFyacbAZu/FUPDf3Wvpxs/Nu1xi aZZ6+TWHTYbKkYi96tT3Gct2ltPGSK0i1M/pN+UuEzV8iBe5Uz9L55IdzT2t++FB TAN3yu1sQ1hAmMIYLjqp0CHrakXLrpxDg15UOnQgeTRFMvTCt5RQwRHG0P/qZWnF 4JNJ4URsP00tNrYPvm4CfBIAGtXGMVGf5hzQG72mWV06qBWaX4GsVhDBa6G4KhP5 B86rsqvyIggFxLG3atb+d/yEagvn+ztI7PXwtyGyIi85iO4pRhsAVzDZarHz6FtI a2nQr/IMTWK1F3KcT80BytcflQ29azuO -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:49 2025 by rpki-client