$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: SiEWNZQUL0h8LOb3ZxtZ1ot4NTPfc2UGVHGus3yv/KI= Subject key identifier: 03:54:85:8C:11:C2:52:86:4F:D1:83:45:C5:EF:C3:AF:44:F5:D8:47 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: C0 Signing time: Fri 22 Aug 2025 22:07:30 +0000 Manifest this update: Fri 22 Aug 2025 22:07:30 +0000 Manifest next update: Fri 29 Aug 2025 22:07:30 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: LA7NRhTJkN7ubtNHRLiZQiNpKYPTGGLEfBUuwdWk2+4=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: sv5lUJDA6AnF6C7zo5VgHahgAG0mo9/6mAvGr0va81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Aug 22 22:07:30 2025 GMT Not After : Aug 29 22:07:30 2025 GMT Subject: CN=68a8ea22-1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:60:23:94:b8:ff:6a:ef:3b:d6:27:6e:90: f8:66:9a:c1:38:16:89:32:1f:f9:bd:59:d6:e1:05: c6:d0:92:9a:44:fb:e8:c7:d7:d4:0f:7b:e0:31:57: 18:6e:fd:28:91:4c:a7:29:37:86:c2:bb:a8:63:6a: d0:df:7b:58:77:51:41:98:47:9e:3b:a2:9e:2a:18: f3:c9:40:1e:6a:db:35:cf:ee:db:56:1b:e2:d6:26: 0b:9a:37:e2:3f:59:24:b4:bd:13:b7:3d:89:dc:d9: 34:30:73:f5:1b:6a:08:a5:14:65:65:ec:ed:53:56: 96:f1:be:48:68:e3:49:08:45:1e:a7:e9:89:48:07: 1c:1c:fd:9f:83:a9:96:bf:c2:e6:ca:4e:c9:a0:d2: 33:d7:c7:04:57:64:a0:7d:fe:db:99:c9:88:62:b4: 3c:44:cd:c6:af:dd:4c:13:65:82:b5:c9:87:42:7f: e4:4d:16:0a:29:92:95:81:d3:06:f1:da:1b:41:6c: 3a:09:7a:53:c5:37:c3:c9:74:6a:b2:b5:05:53:47: 60:d7:1e:0d:59:bf:3f:82:19:cb:a2:40:19:5f:65: a6:ac:16:13:0a:a8:9b:40:63:b0:34:b3:35:af:35: 7d:4e:ed:aa:fc:93:e2:70:cf:68:d0:f4:c0:88:44: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:54:85:8C:11:C2:52:86:4F:D1:83:45:C5:EF:C3:AF:44:F5:D8:47 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2c:99:9c:18:05:3b:0e:53:3d:83:5d:35:2b:3e:e7:df:38: 42:6b:ea:8f:6a:61:c6:f8:5f:a7:85:98:fb:e7:58:7f:ec:d8: 08:e7:be:2a:42:86:9f:25:34:a6:ac:19:68:fc:73:04:29:84: 75:45:f3:4b:24:58:ed:68:57:2c:18:c2:2a:3d:da:d6:c9:69: 7d:06:6d:d8:32:a0:8e:40:20:7f:64:b0:5b:2a:07:50:74:e9: 9c:f9:07:4f:36:14:1c:10:d6:43:4b:f5:23:38:5d:f7:8e:30: dd:eb:d1:06:09:57:a9:86:db:da:4d:0a:f5:4e:ce:15:f3:2a: a0:2c:43:dc:59:71:ce:ca:b6:cc:a6:38:86:a5:4c:cc:53:67: d0:1a:e8:ab:12:7b:49:1e:12:78:ae:56:96:cc:8f:15:ef:ac: 88:6d:0c:b6:9d:24:21:b4:54:c3:8b:eb:49:dd:a4:c9:69:21: 33:87:55:f9:66:1c:c2:a7:bf:84:56:6d:0d:4d:68:63:03:a2: e9:fc:b5:8e:99:46:7b:bc:0b:8e:fe:45:39:33:66:d4:fb:2a: 5e:6b:45:5c:f1:59:f8:92:88:a4:94:77:ae:97:2a:13:c2:2f: 35:ea:31:5b:46:26:28:4a:9f:57:7e:b3:a0:49:da:5f:a3:c3: 12:a3:4e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjUwODIyMjIwNzMwWhcNMjUwODI5MjIwNzMwWjAYMRYwFAYD VQQDEw02OGE4ZWEyMi0xY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2ZgI5S4/2rvO9YnbpD4ZprBOBaJMh/5vVnW4QXG0JKaRPvox9fUD3vgMVcY bv0okUynKTeGwruoY2rQ33tYd1FBmEeeO6KeKhjzyUAeats1z+7bVhvi1iYLmjfi P1kktL0Ttz2J3Nk0MHP1G2oIpRRlZeztU1aW8b5IaONJCEUep+mJSAccHP2fg6mW v8Lmyk7JoNIz18cEV2Sgff7bmcmIYrQ8RM3Gr91ME2WCtcmHQn/kTRYKKZKVgdMG 8dobQWw6CXpTxTfDyXRqsrUFU0dg1x4NWb8/ghnLokAZX2WmrBYTCqibQGOwNLM1 rzV9Tu2q/JPicM9o0PTAiESeJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANUhYwR wlKGT9GDRcXvw69E9dhHMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5LJmcGAU7DlM9g101Kz7n3zhCa+qPamHG+F+nhZj751h/7NgI574q QoafJTSmrBlo/HMEKYR1RfNLJFjtaFcsGMIqPdrWyWl9Bm3YMqCOQCB/ZLBbKgdQ dOmc+QdPNhQcENZDS/UjOF33jjDd69EGCVephtvaTQr1Ts4V8yqgLEPcWXHOyrbM pjiGpUzMU2fQGuirEntJHhJ4rlaWzI8V76yIbQy2nSQhtFTDi+tJ3aTJaSEzh1X5 ZhzCp7+EVm0NTWhjA6Lp/LWOmUZ7vAuO/kU5M2bU+ypea0Vc8Vn4koiklHeulyoT wi816jFbRiYoSp9XfrOgSdpfo8MSo07x -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:56 2025 by rpki-client