$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: C/K9dQEb5Od5/Ez/hbzpdT6IYwR0UOZPG8FOdCYpJsU= Subject key identifier: 82:BE:A5:AB:DE:0C:8A:98:99:7F:60:57:44:36:6B:53:F7:E6:28:14 Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 063D Signing time: Thu 06 Nov 2025 20:21:19 +0000 Manifest this update: Thu 06 Nov 2025 20:21:18 +0000 Manifest next update: Thu 13 Nov 2025 20:21:18 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: UqLWuIC4cFZU3abt+38KUEXZ6elM2ZNCe4XtOv0sRg4=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 20:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Nov 6 20:21:18 2025 GMT Not After : Nov 13 20:21:18 2025 GMT Subject: CN=690d033f-32aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:2e:5d:d1:b3:73:ad:3a:5f:40:c0:ce:5a: e5:ac:57:34:13:1f:ed:c7:95:31:e2:b3:af:c4:75: a7:15:9a:79:ca:a4:40:ca:f9:9c:bb:91:4b:7c:f5: c2:1c:9f:62:d5:c1:5a:b9:7b:7e:3a:5f:56:23:b2: 72:77:71:31:de:60:3f:d3:9a:c8:e7:b8:f1:33:ae: 4c:48:43:33:4c:0e:14:ea:af:2e:eb:10:9d:c5:d2: 2c:02:4e:46:5d:a3:d6:6a:44:85:c8:75:a1:22:25: 13:ac:3c:52:b3:e4:3b:df:b5:a3:f1:b4:3e:cb:c0: 9f:29:7c:5d:6a:3b:45:63:00:d8:5d:1a:00:e0:b7: 67:d3:c8:94:6f:35:96:95:14:19:f4:dc:42:e4:2f: 16:e8:2f:8a:fc:98:35:10:29:ca:03:17:9a:c0:98: 38:17:7b:51:df:99:56:88:96:81:38:5b:da:29:34: 7e:5f:cb:76:83:d8:1f:f1:e0:c9:b4:97:3a:1a:8a: 26:95:23:d2:8a:24:49:23:7d:14:b9:01:80:ba:9a: b0:1a:b8:27:cc:89:24:d8:a6:13:1e:25:72:d1:13: 08:3a:da:28:8e:5a:e8:f2:e6:ee:00:42:17:82:0f: 54:5b:ba:9c:54:99:e2:e4:e6:94:ba:46:b6:9f:1c: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:A5:AB:DE:0C:8A:98:99:7F:60:57:44:36:6B:53:F7:E6:28:14 X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:20:c5:02:aa:66:8c:48:01:89:b2:b0:81:dd:b0:bf:dd:c2: 55:ad:60:0a:8b:b2:9c:89:8f:00:c5:5f:2b:b1:a1:9a:ac:c6: 49:e8:5b:99:59:7c:ef:e7:ed:79:8c:2b:4c:9b:2b:52:e1:6d: 90:b0:04:ce:2a:85:1d:a8:fa:1a:54:a7:b8:99:28:e3:f7:0c: 5c:cc:43:38:00:69:ef:12:04:51:5a:6f:e6:5a:f0:98:c4:23: 8d:25:27:ad:c1:b4:a4:50:65:91:7d:fd:d8:8d:a7:eb:9f:94: b9:67:80:b2:6c:c3:fc:d7:83:bf:a9:82:84:a9:2c:6a:54:15: d4:46:85:6d:dd:e5:16:7f:90:5c:c4:96:9d:26:fe:d6:e9:4e: 9a:79:f5:73:0e:62:b0:07:43:f5:ab:66:52:15:4e:e5:44:b8: 54:54:95:cc:9a:ca:57:da:be:4a:6a:e2:7b:e0:ff:d4:7a:d5: 6a:1e:ba:6b:d6:62:b4:89:95:5f:9d:88:f8:96:1b:69:98:1a: 48:1c:19:19:b3:6f:64:61:3b:e5:24:4e:bc:e5:a5:69:ad:e7: 27:cc:21:00:10:0c:fb:db:e8:ed:81:31:b0:45:b3:4e:e6:bf: 55:5f:90:01:49:3c:c4:d7:5c:bd:f6:cc:6d:23:fc:e1:97:41: bf:91:98:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUxMTA2MjAyMTE4WhcNMjUxMTEzMjAyMTE4WjAYMRYwFAYD VQQDEw02OTBkMDMzZi0zMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA190uXdGzc606X0DAzlrlrFc0Ex/tx5Ux4rOvxHWnFZp5yqRAyvmcu5FLfPXC HJ9i1cFauXt+Ol9WI7Jyd3Ex3mA/05rI57jxM65MSEMzTA4U6q8u6xCdxdIsAk5G XaPWakSFyHWhIiUTrDxSs+Q737Wj8bQ+y8CfKXxdajtFYwDYXRoA4Ldn08iUbzWW lRQZ9NxC5C8W6C+K/Jg1ECnKAxeawJg4F3tR35lWiJaBOFvaKTR+X8t2g9gf8eDJ tJc6GoomlSPSiiRJI30UuQGAupqwGrgnzIkk2KYTHiVy0RMIOtoojlro8ubuAEIX gg9UW7qcVJni5OaUuka2nxzCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK+pave DIqYmX9gV0Q2a1P35igUMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsIMUCqmaMSAGJsrCB3bC/3cJVrWAKi7KciY8AxV8rsaGarMZJ6FuZ WXzv5+15jCtMmytS4W2QsATOKoUdqPoaVKe4mSjj9wxczEM4AGnvEgRRWm/mWvCY xCONJSetwbSkUGWRff3Yjafrn5S5Z4CybMP814O/qYKEqSxqVBXURoVt3eUWf5Bc xJadJv7W6U6aefVzDmKwB0P1q2ZSFU7lRLhUVJXMmspX2r5KauJ74P/UetVqHrpr 1mK0iZVfnYj4lhtpmBpIHBkZs29kYTvlJE685aVprecnzCEAEAz72+jtgTGwRbNO 5r9VX5ABSTzE11y99sxtI/zhl0G/kZi3 -----END CERTIFICATE-----Generated at Fri Nov 7 12:43:28 2025 by rpki-client