$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: 2JnMGSyPrgXPsgaN1YasQZOsxF3WdQNWMhrYKd2GMMg= Subject key identifier: A0:07:CE:51:99:30:A5:7A:E7:9C:75:A3:9C:69:DD:9B:D0:A0:95:B0 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 56 Signing time: Sat 23 Aug 2025 07:28:51 +0000 Manifest this update: Sat 23 Aug 2025 07:28:50 +0000 Manifest next update: Sat 30 Aug 2025 07:28:50 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: 77MzzJK6lEuC/khjghaYGTzPTUOaIStzrqh+2xma2tU=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Aug 23 07:28:50 2025 GMT Not After : Aug 30 07:28:50 2025 GMT Subject: CN=68a96db3-6dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:e8:a9:80:b4:c2:6a:be:26:63:be:24:18: 8c:56:db:31:d4:e0:95:8e:df:a0:ff:eb:f8:eb:28: b8:dd:10:17:4a:ea:68:2a:7a:57:89:8e:88:ab:03: 50:3c:6b:89:4b:a5:4d:3b:50:a9:11:5c:a4:e5:3d: 72:14:c1:a3:e2:ba:ea:42:fb:8e:34:c3:87:09:29: 37:c5:d3:71:28:07:e5:47:9c:3c:e8:58:55:fe:9d: 50:29:0a:0a:17:6b:04:9c:f5:36:e2:1d:1a:d8:70: 22:04:2c:42:65:cd:8b:e9:1f:e6:d5:72:e2:d4:d7: 79:d7:c0:aa:df:a2:da:98:f9:06:66:dd:c1:c6:75: 01:cf:f9:37:98:cc:26:5e:1f:ad:2e:76:fd:ae:77: 46:6c:ac:4a:7e:29:20:a6:b5:f5:4e:e2:93:85:b8: 27:7d:0f:86:e1:ea:49:c8:da:1e:11:01:ab:4f:e6: 19:1e:ac:8d:e1:ea:50:e7:15:18:5c:4a:5b:db:b6: f3:ab:fa:90:a0:ca:ac:f1:26:9c:d5:cc:7f:43:cf: 31:19:ac:a3:a3:8e:3d:82:22:fc:b5:51:1d:b3:15: 96:c5:95:64:21:99:ca:24:e2:7f:53:f1:c2:d4:30: a0:27:4e:10:68:a7:64:cc:9e:c3:99:ab:2b:72:34: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:07:CE:51:99:30:A5:7A:E7:9C:75:A3:9C:69:DD:9B:D0:A0:95:B0 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:6b:36:92:19:67:6c:96:e8:c3:74:1d:18:bd:d4:26:3f:26: 4f:dc:2d:26:7e:48:e2:79:60:e1:69:6f:58:35:4c:6f:c5:c7: ba:98:7a:7e:16:f8:9d:59:de:4c:28:35:a9:93:fb:0b:5b:de: 09:b3:30:4b:45:c9:b5:95:a1:97:93:67:58:5b:23:fe:6f:a1: 1a:98:31:fe:fb:06:47:b7:b5:7e:f9:57:89:1c:b8:14:27:9b: 85:ac:43:36:82:11:5e:e4:30:51:08:48:10:03:33:b8:8a:12: c1:d0:84:f9:86:e2:78:40:b6:bb:14:b7:52:36:a9:91:41:6a: d3:86:75:77:bb:89:a1:26:14:39:a4:ef:e2:2f:c0:61:7b:b7: 38:24:00:b0:f6:3a:be:e2:ab:8f:87:ee:16:0c:80:9f:f9:fd: cf:fa:e1:71:e0:4a:6b:34:27:a5:39:56:66:d5:d6:5d:72:1e: a0:8e:c6:f7:65:5e:89:1d:30:e2:7d:22:e1:d6:02:71:28:b9: 22:6f:a9:6c:51:fd:0e:fa:72:48:a9:72:ef:4b:f7:be:5f:6a: c7:29:3f:e4:6e:ba:c6:86:2c:7f:89:a1:88:bc:63:97:1a:38: 1e:e0:8b:ed:47:91:84:a3:8e:8c:fb:ad:ed:ed:92:ec:a0:43: 1f:96:91:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTA4MjMwNzI4NTBaFw0yNTA4MzAwNzI4NTBaMBgxFjAUBgNV BAMTDTY4YTk2ZGIzLTZkYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJxeipgLTCar4mY74kGIxW2zHU4JWO36D/6/jrKLjdEBdK6mgqeleJjoirA1A8 a4lLpU07UKkRXKTlPXIUwaPiuupC+440w4cJKTfF03EoB+VHnDzoWFX+nVApCgoX awSc9TbiHRrYcCIELEJlzYvpH+bVcuLU13nXwKrfotqY+QZm3cHGdQHP+TeYzCZe H60udv2ud0ZsrEp+KSCmtfVO4pOFuCd9D4bh6knI2h4RAatP5hkerI3h6lDnFRhc SlvbtvOr+pCgyqzxJpzVzH9DzzEZrKOjjj2CIvy1UR2zFZbFlWQhmcok4n9T8cLU MKAnThBop2TMnsOZqytyNBAnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoAfOUZkw pXrnnHWjnGndm9CglbAwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGNrNpIZZ2yW6MN0HRi91CY/Jk/cLSZ+SOJ5YOFpb1g1TG/Fx7qYen4W +J1Z3kwoNamT+wtb3gmzMEtFybWVoZeTZ1hbI/5voRqYMf77Bke3tX75V4kcuBQn m4WsQzaCEV7kMFEISBADM7iKEsHQhPmG4nhAtrsUt1I2qZFBatOGdXe7iaEmFDmk 7+IvwGF7tzgkALD2Or7iq4+H7hYMgJ/5/c/64XHgSms0J6U5VmbV1l1yHqCOxvdl XokdMOJ9IuHWAnEouSJvqWxR/Q76ckipcu9L975fascpP+RuusaGLH+JoYi8Y5ca OB7gi+1HkYSjjoz7re3tkuygQx+WkTE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:47 2025 by rpki-client