$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: soz9fdZBP+xsoKdHnzjDJBvDI0vIwT19JDEC/iqJGGU= Subject key identifier: E2:13:28:87:43:82:2F:E9:16:48:68:3A:FD:62:B1:26:C4:BE:6A:21 Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 18 Signing time: Sat 23 Aug 2025 08:12:53 +0000 Manifest this update: Sat 23 Aug 2025 08:12:53 +0000 Manifest next update: Sat 30 Aug 2025 08:12:53 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: 1JrzXJcoBmL8qfwKnQqGMBRq0Ijgg/aeiQPCuG+gsGc=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Aug 23 08:12:53 2025 GMT Not After : Aug 30 08:12:53 2025 GMT Subject: CN=68a97805-23c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:37:61:b1:65:63:de:4e:ca:05:7f:6c:de: 33:49:dd:49:de:33:71:59:06:44:8c:d1:fc:11:d0: 5d:f4:19:3a:f0:b7:8e:48:a7:92:ba:22:ff:24:13: aa:2c:8a:89:5c:54:c7:4f:81:5d:7b:e1:26:41:39: a5:b7:f6:8d:48:80:03:22:35:a4:b9:fa:9c:c0:e4: 2d:92:d1:22:95:63:cf:ac:9b:ce:78:b3:71:42:e4: cb:a3:bb:57:d7:46:3d:25:0a:9b:a2:81:ac:d0:ef: 66:d3:a3:b8:7d:38:07:0d:e2:02:55:ae:e3:91:63: b9:67:47:66:54:ba:2b:97:77:48:75:b0:c7:5a:fe: 3c:c8:45:63:ae:4b:fe:b3:f1:d9:14:bf:e6:d1:96: 4c:ff:ff:14:ca:a0:da:da:ca:b5:e3:c9:2b:96:40: 3b:73:a4:fa:f9:95:02:19:38:15:b4:25:1a:12:d2: e6:fa:67:25:56:87:33:05:47:21:54:af:61:24:a5: 26:c1:fb:4f:9a:cf:25:4b:e1:30:e4:64:19:03:83: 0d:f9:0b:ec:d2:06:b7:d0:4f:b9:c0:95:40:f6:e7: 99:1b:2c:b0:b5:fd:f1:8a:0b:07:f7:1b:d4:1d:85: 9e:f9:b6:24:7d:8c:f5:17:02:9d:79:8e:bc:c7:21: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:13:28:87:43:82:2F:E9:16:48:68:3A:FD:62:B1:26:C4:BE:6A:21 X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:99:7c:5e:1b:c5:61:d0:f6:15:f4:fd:03:f0:96:7f:4b:d6: 91:44:c3:5c:93:fa:84:77:4c:75:3d:13:47:8f:b3:9e:4e:84: 65:57:ca:c9:28:da:bd:06:34:91:0b:30:96:3d:85:96:4c:79: 04:ab:6d:c6:09:d8:46:fa:a1:44:90:38:f4:36:e9:b0:5e:2d: 61:75:39:f2:9c:fb:77:e2:d4:b4:5c:21:6b:23:d9:93:88:10: d6:2b:41:10:3a:46:f0:5d:c0:47:64:38:f9:7c:2b:18:8b:d8: 6b:01:7a:67:bc:f3:d0:55:d9:b3:b5:0e:c0:26:05:04:88:bd: ea:16:b0:7a:9f:e2:2d:04:f3:22:bb:a4:76:ea:bd:f2:4d:13: 65:cd:32:00:71:c1:4c:70:e6:6c:96:04:e0:30:fe:06:4f:4c: b7:01:c4:d1:8b:8f:22:93:e7:20:2c:6c:bb:51:c5:24:16:06: 44:8a:5f:4b:8d:b9:c8:d9:8d:fc:7d:a5:54:78:18:1c:44:77: 4b:20:ec:c7:06:c2:07:b4:4e:64:8e:6e:79:8d:57:d5:05:43: d0:6e:45:18:b3:19:28:4d:49:d5:54:cb:3f:bf:8f:da:34:c5: 11:e6:55:0d:3d:2e:32:af:bd:43:c0:05:b4:1d:4a:fb:a2:33: 71:68:4e:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTA4MjMwODEyNTNaFw0yNTA4MzAwODEyNTNaMBgxFjAUBgNV BAMTDTY4YTk3ODA1LTIzYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDo2TdhsWVj3k7KBX9s3jNJ3UneM3FZBkSM0fwR0F30GTrwt45Ip5K6Iv8kE6os iolcVMdPgV174SZBOaW39o1IgAMiNaS5+pzA5C2S0SKVY8+sm854s3FC5Muju1fX Rj0lCpuigazQ72bTo7h9OAcN4gJVruORY7lnR2ZUuiuXd0h1sMda/jzIRWOuS/6z 8dkUv+bRlkz//xTKoNrayrXjySuWQDtzpPr5lQIZOBW0JRoS0ub6ZyVWhzMFRyFU r2EkpSbB+0+azyVL4TDkZBkDgw35C+zSBrfQT7nAlUD255kbLLC1/fGKCwf3G9Qd hZ75tiR9jPUXAp15jrzHIe2XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4hMoh0OC L+kWSGg6/WKxJsS+aiEwHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeZfF4bxWHQ9hX0/QPwln9L1pFEw1yT+oR3THU9E0ePs55OhGVXysko 2r0GNJELMJY9hZZMeQSrbcYJ2Eb6oUSQOPQ26bBeLWF1OfKc+3fi1LRcIWsj2ZOI ENYrQRA6RvBdwEdkOPl8KxiL2GsBeme889BV2bO1DsAmBQSIveoWsHqf4i0E8yK7 pHbqvfJNE2XNMgBxwUxw5myWBOAw/gZPTLcBxNGLjyKT5yAsbLtRxSQWBkSKX0uN ucjZjfx9pVR4GBxEd0sg7McGwge0TmSObnmNV9UFQ9BuRRizGShNSdVUyz+/j9o0 xRHmVQ09LjKvvUPABbQdSvuiM3FoThM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:57:58 2025 by rpki-client