$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: cdJ8cgprwP0xYDRabVmBroQVGcMIK8HYNqgn+/nnnAY= Subject key identifier: 24:12:3D:5A:A8:C8:A9:78:E5:6D:56:F0:4A:88:30:95:F0:1B:CD:B0 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 087F Signing time: Fri 22 Aug 2025 20:46:25 +0000 Manifest this update: Fri 22 Aug 2025 20:46:25 +0000 Manifest next update: Fri 29 Aug 2025 20:46:25 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: WBZeJX/osEov+QtlgoxOOWz6j6Km5CmMFdpraHp7cXg=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: f9tQPToB76p1pPXGROGF6QphrQQvfLBw4Gw3PGjwt1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Aug 22 20:46:25 2025 GMT Not After : Aug 29 20:46:25 2025 GMT Subject: CN=68a8d721-e87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:6d:0e:fa:00:7b:a7:4e:23:d8:4d:60:11: b3:da:eb:ae:8d:97:64:ac:c8:03:46:73:4a:e1:af: 4e:c5:0d:ea:12:bc:e8:91:8a:8e:cb:6b:e2:d0:d9: 41:e8:45:92:7b:12:c3:89:04:a9:a7:32:57:b3:22: 75:5a:97:b9:d6:82:60:79:34:f5:ad:eb:77:5f:37: de:49:3b:c0:58:78:8f:c7:0b:a2:3d:e9:7d:c1:fb: a8:2f:d1:1b:11:45:18:fa:94:9d:b7:9f:7c:56:a3: c8:0a:c2:8c:ff:76:41:82:ac:18:85:48:97:61:60: de:6f:33:6c:14:bf:88:4f:57:69:f1:84:04:cc:80: 72:0b:4f:29:e0:ff:95:66:f2:52:5f:bd:d6:1e:a2: 58:3b:99:58:73:4f:45:c5:82:a4:8e:43:9a:23:f9: b9:9c:a4:f0:27:7c:11:dd:43:93:59:b2:4d:9d:79: d2:a2:c6:c7:99:88:3c:96:42:72:2f:90:7f:1f:9d: 3c:68:23:44:e8:46:92:38:f4:c2:0a:5a:69:92:ec: 44:49:70:16:cd:69:9e:10:2c:1c:a5:ab:97:7d:28: f5:81:3f:fe:b9:1a:35:2a:07:83:81:6b:55:c4:bd: 85:2f:c6:59:a8:21:0c:f4:d2:18:25:60:c2:e1:6b: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:3D:5A:A8:C8:A9:78:E5:6D:56:F0:4A:88:30:95:F0:1B:CD:B0 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b2:5d:fc:d8:a5:75:d2:fe:6e:15:36:18:e3:c6:d0:bd:c8: 16:23:1f:24:71:94:11:0b:b3:5c:69:d1:ea:73:df:c9:8a:3f: 53:50:02:ff:62:c2:b0:7a:3c:d0:d3:22:d8:a8:b7:ab:4f:3a: 45:c9:9a:0b:5a:84:e6:b2:b3:bf:8b:9f:e9:4b:5c:8f:2e:eb: da:03:95:d6:36:bc:1d:a0:89:ba:e4:b7:07:b3:89:8f:94:39: 1b:90:e0:b5:96:06:ab:19:b1:36:b9:12:e9:b9:84:a9:bc:cf: 09:02:46:a0:b9:ec:8f:db:e4:5a:6a:f6:19:f5:a3:80:fa:27: 9c:01:b9:bf:17:67:6f:92:d9:85:ed:53:11:6b:42:ea:b0:7c: 3d:05:89:e1:3a:92:87:74:57:d6:69:c1:cb:2b:f8:0b:f6:70: b8:63:13:73:5d:0b:ed:e8:45:8a:8b:15:1e:3e:4c:26:5b:86: 61:87:ee:3b:f6:38:f2:eb:f6:f1:e4:a3:a6:1c:f8:a3:04:49: f9:a9:12:83:eb:d4:88:03:14:9f:5f:78:f0:3e:f4:1c:4c:e1: 96:a2:ec:c1:ed:5b:ee:f9:d8:d8:9a:c2:05:cf:d3:db:95:07: 83:1a:5e:c4:ca:3d:95:76:69:26:91:e5:e2:6d:0c:87:86:17: 90:bc:39:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUwODIyMjA0NjI1WhcNMjUwODI5MjA0NjI1WjAYMRYwFAYD VQQDEw02OGE4ZDcyMS1lODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+FtDvoAe6dOI9hNYBGz2uuujZdkrMgDRnNK4a9OxQ3qErzokYqOy2vi0NlB 6EWSexLDiQSppzJXsyJ1Wpe51oJgeTT1ret3XzfeSTvAWHiPxwuiPel9wfuoL9Eb EUUY+pSdt598VqPICsKM/3ZBgqwYhUiXYWDebzNsFL+IT1dp8YQEzIByC08p4P+V ZvJSX73WHqJYO5lYc09FxYKkjkOaI/m5nKTwJ3wR3UOTWbJNnXnSosbHmYg8lkJy L5B/H508aCNE6EaSOPTCClppkuxESXAWzWmeECwcpauXfSj1gT/+uRo1KgeDgWtV xL2FL8ZZqCEM9NIYJWDC4WvzPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQSPVqo yKl45W1W8EqIMJXwG82wMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHsl382KV10v5uFTYY48bQvcgWIx8kcZQRC7NcadHqc9/Jij9TUAL/ YsKwejzQ0yLYqLerTzpFyZoLWoTmsrO/i5/pS1yPLuvaA5XWNrwdoIm65LcHs4mP lDkbkOC1lgarGbE2uRLpuYSpvM8JAkagueyP2+RaavYZ9aOA+iecAbm/F2dvktmF 7VMRa0LqsHw9BYnhOpKHdFfWacHLK/gL9nC4YxNzXQvt6EWKixUePkwmW4Zhh+47 9jjy6/bx5KOmHPijBEn5qRKD69SIAxSfX3jwPvQcTOGWouzB7Vvu+djYmsIFz9Pb lQeDGl7Eyj2VdmkmkeXibQyHhheQvDkF -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:53 2025 by rpki-client