$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: WkDNEbTuRLalN8dLMBFbtsE3YdvKv+Y7/rIbRJdUyGY= Subject key identifier: EB:82:F1:A2:BE:BF:93:20:B1:1C:19:86:53:0F:7B:66:D2:2C:E0:1F Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1E18 Signing time: Wed 02 Jul 2025 16:12:37 +0000 Manifest this update: Wed 02 Jul 2025 16:12:37 +0000 Manifest next update: Wed 09 Jul 2025 16:12:37 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: OG6bT8nYWNg/9KOQHaIokZhCPJ+nUn48cG6FQ42jVyA=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7721 (0x1e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Jul 2 16:12:37 2025 GMT Not After : Jul 9 16:12:37 2025 GMT Subject: CN=68655a75-8ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:38:66:ed:49:8c:6b:a3:08:db:37:58:b9: 19:b4:a0:42:ab:9b:7d:00:d7:07:72:98:4d:6d:75: 21:29:a3:e9:07:5c:16:87:0e:cb:ec:ad:e4:c6:4a: 06:0c:c5:11:c2:61:8a:fb:b6:81:38:ef:84:b7:97: 0f:f2:19:b5:65:6b:e4:2e:bd:62:00:67:8b:74:3e: 9a:a8:97:d9:79:79:5a:88:de:2d:1b:8b:70:95:ba: 6a:4c:68:d4:3d:03:cd:aa:35:d1:65:bf:5d:d0:10: 76:23:85:c4:b8:57:df:59:0a:81:bf:e5:9a:70:a9: 91:b1:7c:a7:63:61:d1:a7:a0:a7:26:20:bd:f8:7b: 08:1a:e0:54:8c:1a:e0:1d:65:91:ac:d2:80:c5:56: 20:34:c0:1c:d1:ed:43:e5:52:8b:68:4d:57:0e:d2: cf:1b:db:5c:89:3d:9b:97:7d:b1:b5:2a:4e:51:57: ef:00:d3:80:f4:8f:4f:60:81:bb:2e:8e:03:f4:39: 9c:53:a7:05:49:bf:bb:55:e9:d0:90:22:f8:ee:ec: ed:07:4c:96:6b:81:8b:59:9a:7a:aa:9a:1d:0d:93: e2:c8:c3:85:60:df:c3:cb:b1:f6:a3:d8:85:a4:75: 23:dd:6a:54:2e:eb:aa:a5:e8:33:5c:64:e9:c4:b8: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:82:F1:A2:BE:BF:93:20:B1:1C:19:86:53:0F:7B:66:D2:2C:E0:1F X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:be:5f:f7:4a:06:af:31:65:93:a6:1c:32:47:e2:31:4b:48: da:44:00:20:6c:03:53:df:d5:ba:93:0b:57:17:e3:86:06:91: 72:97:fa:e2:f6:4e:f0:70:95:a5:31:58:0e:e0:09:98:42:33: 67:cb:bd:b7:96:7c:56:d5:97:1b:24:b7:c5:bc:ab:e5:45:d6: 8c:87:9c:bb:a9:90:0d:73:63:7d:44:80:1d:91:bb:ff:f0:46: d6:13:01:e5:74:08:c9:03:c9:b5:30:c5:08:d8:95:41:c9:0d: 5f:7d:68:93:4c:88:67:81:71:eb:e2:91:1c:c4:46:64:45:6c: 80:f1:50:bf:1a:d9:6c:2b:c6:00:9d:08:34:3f:fa:1e:af:00: 64:6c:e0:30:92:f2:20:4c:52:5c:b8:fc:50:e7:4f:57:aa:c8: ec:a2:0c:01:f8:f9:f6:cf:80:ac:1f:45:9c:bd:00:28:0e:e0: 19:70:ec:fe:3b:6f:16:05:52:8a:78:2c:5e:23:46:d7:c8:31: 19:1a:23:85:a1:87:2e:aa:15:77:2d:8c:06:5f:0e:3c:76:0b: 03:d4:22:1a:fd:07:6b:06:4b:df:a6:7e:c3:f6:a4:a4:49:d6: dc:4d:bc:c9:99:c4:e2:46:52:9f:b1:f7:dc:59:38:5c:e8:d7: e1:2a:5c:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjUwNzAyMTYxMjM3WhcNMjUwNzA5MTYxMjM3WjAYMRYwFAYD VQQDEw02ODY1NWE3NS04ZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHc4Zu1JjGujCNs3WLkZtKBCq5t9ANcHcphNbXUhKaPpB1wWhw7L7K3kxkoG DMURwmGK+7aBOO+Et5cP8hm1ZWvkLr1iAGeLdD6aqJfZeXlaiN4tG4twlbpqTGjU PQPNqjXRZb9d0BB2I4XEuFffWQqBv+WacKmRsXynY2HRp6CnJiC9+HsIGuBUjBrg HWWRrNKAxVYgNMAc0e1D5VKLaE1XDtLPG9tciT2bl32xtSpOUVfvANOA9I9PYIG7 Lo4D9DmcU6cFSb+7VenQkCL47uztB0yWa4GLWZp6qpodDZPiyMOFYN/Dy7H2o9iF pHUj3WpULuuqpegzXGTpxLinhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuC8aK+ v5MgsRwZhlMPe2bSLOAfMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfvl/3SgavMWWTphwyR+IxS0jaRAAgbANT39W6kwtXF+OGBpFyl/ri 9k7wcJWlMVgO4AmYQjNny723lnxW1ZcbJLfFvKvlRdaMh5y7qZANc2N9RIAdkbv/ 8EbWEwHldAjJA8m1MMUI2JVByQ1ffWiTTIhngXHr4pEcxEZkRWyA8VC/GtlsK8YA nQg0P/oerwBkbOAwkvIgTFJcuPxQ509XqsjsogwB+Pn2z4CsH0WcvQAoDuAZcOz+ O28WBVKKeCxeI0bXyDEZGiOFoYcuqhV3LYwGXw48dgsD1CIa/QdrBkvfpn7D9qSk SdbcTbzJmcTiRlKfsffcWThc6NfhKlz4 -----END CERTIFICATE-----Generated at Thu Jul 3 22:00:59 2025 by rpki-client