$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: pSy7umv4DKbkMnL3P2tpqGfw1KBoAb5ZgFxjgXzg1Mc= Subject key identifier: 61:38:62:DF:80:73:1E:CC:79:66:BA:B3:1E:ED:11:CE:1A:68:7F:17 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 06E8 Signing time: Fri 22 Aug 2025 22:33:48 +0000 Manifest this update: Fri 22 Aug 2025 22:33:47 +0000 Manifest next update: Fri 29 Aug 2025 22:33:47 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: sx8FU5yeHm0G3ggwN0Bj1sK65rFDZvAxWFSEmoun8+s=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Aug 22 22:33:47 2025 GMT Not After : Aug 29 22:33:47 2025 GMT Subject: CN=68a8f04c-d51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:94:22:7c:09:df:15:9e:16:d6:6e:7d:fb: ec:29:6a:1d:b7:45:a5:8d:63:87:9e:7f:39:ca:29: f6:85:50:c8:a4:1c:bc:d1:9b:c9:bc:ad:54:41:75: 61:fb:d1:9a:99:6f:c7:65:2a:55:10:df:99:0c:03: 9d:27:0c:ce:2d:44:c0:78:d0:9c:86:78:7b:f9:1a: 35:ec:e8:34:fa:cb:05:b6:b6:eb:b1:5b:f6:47:2e: 5f:41:61:03:dc:26:f9:f3:68:f5:6c:03:ac:af:f3: e5:68:98:c1:d0:71:c0:fa:64:0d:87:fe:76:4c:16: fb:63:22:99:ee:6c:91:9a:84:7b:f6:a6:89:41:1f: 1c:c1:f0:23:7f:58:ca:90:99:03:fe:d3:3c:5f:f8: 87:6a:7f:b2:1b:b6:c8:0e:be:f2:13:46:20:13:c9: 8c:88:04:8e:0b:80:d1:ef:05:a0:9e:ed:9c:70:b7: 35:05:32:73:a1:df:60:fe:ac:86:a4:bb:65:5e:bd: 0b:99:31:b6:e2:1e:07:1b:fb:28:e1:dc:f5:d2:7d: 68:84:96:7f:d6:f1:b5:28:a2:7c:aa:9b:0d:f1:8f: 8d:1b:f5:33:e2:b2:ba:3f:76:e0:77:7f:43:94:dc: 4c:ed:d2:8b:fb:27:57:bf:08:b3:b4:82:f0:e3:ac: f6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:38:62:DF:80:73:1E:CC:79:66:BA:B3:1E:ED:11:CE:1A:68:7F:17 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:82:ca:26:12:da:2c:de:f6:55:a0:52:a3:2c:de:8a:b3:a7: 70:5f:2a:e2:bf:33:a3:d4:f5:b7:25:a7:e2:05:11:1b:36:76: fa:fd:54:53:d7:2e:77:c9:0e:c5:3c:58:b2:68:13:72:d1:6c: 81:6d:31:c2:5f:ae:c6:df:70:87:ac:a0:f5:1f:53:54:e7:99: 55:32:f3:63:eb:c3:3f:3d:85:b2:aa:2b:a9:95:c6:a7:03:a0: 8d:bf:d7:90:6d:fe:16:7e:16:5c:94:f6:4a:1d:a8:39:86:a6: ad:b2:d8:75:e9:f0:92:5b:5b:2c:9c:ea:e3:c4:f9:fe:9c:39: 17:0e:0e:eb:f8:fd:89:bb:bb:b6:a2:26:11:cc:b9:77:97:69: 16:a1:45:d3:ee:d3:df:5e:59:e4:e0:4b:0b:d5:ae:0f:3d:10: 67:4a:b4:7a:36:8d:80:a9:8c:63:d1:9b:b4:5e:8d:1a:33:9f: 29:3d:18:64:55:6e:8c:d3:f7:16:51:3a:3e:e5:a3:41:26:9a: 71:a6:a8:1a:07:d0:c5:64:c3:ca:d1:98:d0:2c:e5:99:60:19: 0b:5f:bd:84:dc:b2:09:92:40:1d:80:cb:2a:0e:d9:73:0f:f8: 29:35:4f:79:4b:99:2f:f0:13:8a:a0:d9:cb:27:db:1d:f5:a7: 39:30:67:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUwODIyMjIzMzQ3WhcNMjUwODI5MjIzMzQ3WjAYMRYwFAYD VQQDEw02OGE4ZjA0Yy1kNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx56UInwJ3xWeFtZuffvsKWodt0WljWOHnn85yin2hVDIpBy80ZvJvK1UQXVh +9GamW/HZSpVEN+ZDAOdJwzOLUTAeNCchnh7+Ro17Og0+ssFtrbrsVv2Ry5fQWED 3Cb582j1bAOsr/PlaJjB0HHA+mQNh/52TBb7YyKZ7myRmoR79qaJQR8cwfAjf1jK kJkD/tM8X/iHan+yG7bIDr7yE0YgE8mMiASOC4DR7wWgnu2ccLc1BTJzod9g/qyG pLtlXr0LmTG24h4HG/so4dz10n1ohJZ/1vG1KKJ8qpsN8Y+NG/Uz4rK6P3bgd39D lNxM7dKL+ydXvwiztILw46z2qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE4Yt+A cx7MeWa6sx7tEc4aaH8XMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVgsomEtos3vZVoFKjLN6Ks6dwXyrivzOj1PW3JafiBREbNnb6/VRT 1y53yQ7FPFiyaBNy0WyBbTHCX67G33CHrKD1H1NU55lVMvNj68M/PYWyqiuplcan A6CNv9eQbf4WfhZclPZKHag5hqatsth16fCSW1ssnOrjxPn+nDkXDg7r+P2Ju7u2 oiYRzLl3l2kWoUXT7tPfXlnk4EsL1a4PPRBnSrR6No2AqYxj0Zu0Xo0aM58pPRhk VW6M0/cWUTo+5aNBJppxpqgaB9DFZMPK0ZjQLOWZYBkLX72E3LIJkkAdgMsqDtlz D/gpNU95S5kv8BOKoNnLJ9sd9ac5MGf5 -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:15 2025 by rpki-client