$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: n4O0eIIWgImY5Kk2JIsrB2iu5ENo3g7fbdjvb7Hu6HM= Subject key identifier: E0:BA:28:89:B5:92:3F:1C:1C:1A:45:4B:EE:E5:FE:20:13:9A:B3:7A Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 05:11:13 +0000 Manifest this update: Sat 23 Aug 2025 05:11:13 +0000 Manifest next update: Sat 30 Aug 2025 05:11:13 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: 5nFBlj86eqUk7QtmGy35cFMlpTUMvprduAbFcJlcVWg=) 2: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: lV9/OfD1pP8tzM2lzafbNv9IW406iEKYXoupLohRi0g=) 3: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: ej1Z6/vJKdXFXCjwXb83ZJtZZrkbIfDZkFd1eoC4aOQ=) 4: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=) 5: F73A3EA458FF11F0831F6664C4F9AE02.roa (hash: 9HomyUX0PomXvq45psvaACwfTmVg8wmvwSi8lzKvi40=) 6: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=) 7: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Aug 23 05:11:13 2025 GMT Not After : Aug 30 05:11:13 2025 GMT Subject: CN=68a94d71-9744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:fc:88:09:d2:f5:10:4e:55:9b:8f:08:f2: f5:2e:9d:69:24:ac:b0:f2:55:d9:d6:70:22:34:cf: ca:d4:53:bc:21:36:b0:04:d5:70:9e:9c:42:3b:58: 7d:bc:7e:ab:4c:97:8f:09:70:81:64:e1:6e:7d:01: fb:c4:11:e0:49:64:62:63:99:21:d7:63:93:79:79: 07:95:36:a2:be:2c:f8:6c:92:75:ac:6f:5d:0e:af: 24:b9:73:6c:44:87:75:e8:32:86:5e:76:5b:b8:01: 1e:b9:30:5c:b0:47:b7:00:de:0e:ce:97:4e:84:e7: 88:60:dd:d0:43:c0:1c:a5:bc:98:f3:1e:06:15:db: 8e:f1:77:e1:41:59:10:67:55:5b:47:0c:f5:cf:3f: 58:d1:b1:1e:65:c4:20:00:4f:d0:47:5b:52:65:3e: 5c:d1:0b:b2:34:af:ad:db:d1:bc:6c:69:bb:f8:bb: d6:bc:df:11:c3:e3:4f:2f:09:b8:3d:c4:a5:b5:9c: 23:5c:e1:04:51:4c:6f:7f:6d:4d:b2:df:5f:df:91: ea:39:d9:5e:21:8f:bb:5d:14:5e:f0:34:33:56:35: 0b:69:63:42:df:23:00:ed:3c:d7:84:c5:56:c8:68: 1d:49:b9:35:0b:f0:5d:eb:b7:8c:35:33:f2:1e:01: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:28:89:B5:92:3F:1C:1C:1A:45:4B:EE:E5:FE:20:13:9A:B3:7A X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ef:1e:ed:ca:3d:8b:18:87:77:a4:0c:ec:a2:0d:62:52:23: 2b:6e:e5:11:bc:41:04:03:2c:f3:82:19:28:b8:2f:d5:01:96: 8f:6f:17:42:65:74:28:e4:e7:33:08:cb:69:39:19:02:3d:6b: 91:59:36:12:56:3e:e7:df:60:3f:6e:ec:2c:f8:29:42:e4:09: 3c:05:2d:01:f0:5c:57:13:7e:c2:5a:65:67:2f:a7:c2:bf:2d: f2:55:52:20:23:5d:55:b1:a5:f4:f5:4c:0c:3a:19:fb:88:f3: 58:9e:f9:4d:73:80:14:48:61:71:3a:b4:87:fa:2a:bf:05:8d: ed:53:a0:9e:56:d0:4c:3e:9d:77:92:b7:6b:1a:b7:a2:62:36: 7c:e2:7a:50:61:9f:af:96:9f:62:a9:22:b9:18:e4:ac:58:f0: 7f:eb:22:03:45:26:b3:7f:35:84:54:21:d9:2c:d1:a7:69:b1: 86:63:3b:73:47:6b:f0:21:f7:e8:42:60:68:27:9a:4d:34:68: 7c:08:c2:71:f2:58:fa:eb:06:c4:a1:6c:e6:67:a0:90:c2:c8: 7e:a8:26:fc:45:34:59:aa:ce:06:8e:8c:f6:54:00:b5:56:f4: 3d:50:b2:39:27:f1:4b:29:3d:e8:7a:44:33:a3:bb:41:6f:0e: 08:4a:56:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUwODIzMDUxMTEzWhcNMjUwODMwMDUxMTEzWjAYMRYwFAYD VQQDEw02OGE5NGQ3MS05NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYr8iAnS9RBOVZuPCPL1Lp1pJKyw8lXZ1nAiNM/K1FO8ITawBNVwnpxCO1h9 vH6rTJePCXCBZOFufQH7xBHgSWRiY5kh12OTeXkHlTaiviz4bJJ1rG9dDq8kuXNs RId16DKGXnZbuAEeuTBcsEe3AN4OzpdOhOeIYN3QQ8AcpbyY8x4GFduO8XfhQVkQ Z1VbRwz1zz9Y0bEeZcQgAE/QR1tSZT5c0QuyNK+t29G8bGm7+LvWvN8Rw+NPLwm4 PcSltZwjXOEEUUxvf21Nst9f35HqOdleIY+7XRRe8DQzVjULaWNC3yMA7TzXhMVW yGgdSbk1C/Bd67eMNTPyHgHzIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC6KIm1 kj8cHBpFS+7l/iATmrN6MB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS7x7tyj2LGId3pAzsog1iUiMrbuURvEEEAyzzghkouC/VAZaPbxdC ZXQo5OczCMtpORkCPWuRWTYSVj7n32A/buws+ClC5Ak8BS0B8FxXE37CWmVnL6fC vy3yVVIgI11VsaX09UwMOhn7iPNYnvlNc4AUSGFxOrSH+iq/BY3tU6CeVtBMPp13 krdrGreiYjZ84npQYZ+vlp9iqSK5GOSsWPB/6yIDRSazfzWEVCHZLNGnabGGYztz R2vwIffoQmBoJ5pNNGh8CMJx8lj66wbEoWzmZ6CQwsh+qCb8RTRZqs4Gjoz2VAC1 VvQ9ULI5J/FLKT3oekQzo7tBbw4ISlaq -----END CERTIFICATE-----Generated at Sat Aug 23 22:17:01 2025 by rpki-client