$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: PTlrBSfqydzjTjd0K3Ohf1XrOIfOyYZzXZJX8Ey/Sh4= Subject key identifier: 8A:54:4F:7F:92:6A:78:CA:52:17:61:AC:BB:0E:60:A1:FF:73:88:02 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 023E Signing time: Sat 23 Aug 2025 02:12:23 +0000 Manifest this update: Sat 23 Aug 2025 02:12:23 +0000 Manifest next update: Sat 30 Aug 2025 02:12:23 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: HmNlCysjcROONb99+6elmAjEdmUfDttvMVpXUU+oyn0=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 51QAmttT+orS5nLye3GO8kzrs6tbUA9omCigEUTINK8=) 3: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: m/lCeZPbzI4IUTU7gNKG3Pc87gLIw4AUvkAgjskQsFI=) 4: E2C0769466F311F0BAB87F38C4F9AE02.roa (hash: 5zWVc3wXqfB69czjTeeDsjWlSnO6nNwU6Knu/X1TBzA=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: xDTqUqT1kIUmz8RtVDNj1figux9es0r/Ivvx61/pp9g=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: JI7/VMpNwJi4JTM3hdmA2otFXIkGdb1UEZF29e+5G6g=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: SYChnCFDXmbiMMIWGfC0umDJGm3jePYzq4pHvcNe8VM=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: Lj70ItgANJi9RJPk81TbBsVkkeLlGArDAr9zaonHm8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Aug 23 02:12:23 2025 GMT Not After : Aug 30 02:12:23 2025 GMT Subject: CN=68a92387-6ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:87:d5:74:c5:17:99:4d:d4:52:67:29:7a: 11:8b:27:a1:8b:e4:ba:1b:d3:b9:8c:ec:2d:44:5f: 34:a8:04:04:12:99:ef:f5:88:95:27:fb:89:36:3b: 5e:aa:f0:44:08:ba:5a:b6:82:ad:99:0f:fb:1c:8b: bc:0b:6f:54:c0:ad:4b:cd:a9:1a:f4:8a:9c:f0:3c: d8:03:5b:ba:3f:88:10:28:8a:db:dc:b4:a5:65:c7: 54:fa:9d:19:4c:40:67:ac:76:e8:f9:c8:81:19:3c: 12:b2:c3:96:9e:cd:81:c9:e8:50:fc:96:56:d8:ca: 4a:bb:25:4f:e8:30:31:2c:3c:d7:b9:bf:fc:64:99: bc:02:f9:55:9a:f0:63:3f:9e:38:59:22:50:31:49: 18:4e:15:c3:57:1f:23:3b:8a:59:27:d3:b7:aa:36: 7a:fe:0a:f9:e2:f5:b0:4a:c0:81:38:e2:f6:6d:05: 4b:54:30:36:2a:94:6a:93:60:c6:30:90:e1:b7:a6: 01:3e:ee:9f:7e:69:f0:9c:13:e2:52:36:c9:08:82: 2b:c3:dc:7f:a3:31:37:b6:6e:37:cb:fe:54:d2:29: 68:31:c8:99:3c:d5:1f:46:ae:c5:b8:c4:d0:29:12: ed:96:e2:86:93:51:b6:08:91:37:e6:1a:58:49:be: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:4F:7F:92:6A:78:CA:52:17:61:AC:BB:0E:60:A1:FF:73:88:02 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:63:d3:ea:4b:2d:0d:fb:3e:21:de:3e:62:e7:2c:66:86:75: 24:07:72:a2:eb:a4:93:80:2d:30:89:4a:a7:d1:8e:1a:c1:1a: ab:60:1d:ff:17:40:97:4f:29:a4:12:12:e5:03:19:62:25:0b: d1:ec:6f:d5:53:4e:8d:07:d3:05:03:5f:87:bb:77:9c:8b:53: e7:f2:c3:f6:53:53:59:af:01:22:58:b7:68:a3:f9:57:0c:19: 72:b7:28:29:66:d7:7f:a8:0f:bb:c3:c8:49:cc:7d:31:09:fa: 6a:43:51:ed:5a:72:90:8a:31:d7:7d:69:a3:74:ea:7d:cd:7e: d4:73:98:b2:8b:19:5b:85:1c:c3:1f:60:12:dd:9e:0c:f1:15: b1:39:1b:97:5e:4a:e3:05:45:e6:ca:82:5f:6c:18:44:5c:f9: 8c:8c:02:c4:81:9c:76:e4:b9:dc:07:28:0f:21:26:99:1e:a2: e8:b4:5b:52:4b:36:a2:1c:05:42:34:28:3d:92:3c:13:2f:88: 59:61:80:25:80:18:18:35:47:2e:23:3e:2d:34:df:b9:45:70: b6:da:15:04:4c:76:70:27:4f:98:df:10:24:c7:ef:99:82:0d: 1d:ed:d6:f4:7f:4b:a6:c0:81:54:3c:e8:97:c6:43:31:00:f0: b3:44:6e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwODIzMDIxMjIzWhcNMjUwODMwMDIxMjIzWjAYMRYwFAYD VQQDEw02OGE5MjM4Ny02Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2GH1XTFF5lN1FJnKXoRiyehi+S6G9O5jOwtRF80qAQEEpnv9YiVJ/uJNjte qvBECLpatoKtmQ/7HIu8C29UwK1Lzaka9Iqc8DzYA1u6P4gQKIrb3LSlZcdU+p0Z TEBnrHbo+ciBGTwSssOWns2ByehQ/JZW2MpKuyVP6DAxLDzXub/8ZJm8AvlVmvBj P544WSJQMUkYThXDVx8jO4pZJ9O3qjZ6/gr54vWwSsCBOOL2bQVLVDA2KpRqk2DG MJDht6YBPu6ffmnwnBPiUjbJCIIrw9x/ozE3tm43y/5U0iloMciZPNUfRq7FuMTQ KRLtluKGk1G2CJE35hpYSb5qVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpUT3+S anjKUhdhrLsOYKH/c4gCMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAY9PqSy0N+z4h3j5i5yxmhnUkB3Ki66STgC0wiUqn0Y4awRqrYB3/ F0CXTymkEhLlAxliJQvR7G/VU06NB9MFA1+Hu3eci1Pn8sP2U1NZrwEiWLdoo/lX DBlytygpZtd/qA+7w8hJzH0xCfpqQ1HtWnKQijHXfWmjdOp9zX7Uc5iyixlbhRzD H2AS3Z4M8RWxORuXXkrjBUXmyoJfbBhEXPmMjALEgZx25LncBygPISaZHqLotFtS SzaiHAVCNCg9kjwTL4hZYYAlgBgYNUcuIz4tNN+5RXC22hUETHZwJ0+Y3xAkx++Z gg0d7db0f0umwIFUPOiXxkMxAPCzRG5+ -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:50 2025 by rpki-client