$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: He9jveI+WkcaW8NLv3n2rpgwp8QaXZFfSCAy4nHqyJw= Subject key identifier: E3:E0:27:4F:3B:61:79:F0:B3:BA:A9:8C:1A:9F:B9:78:F8:09:17:BE Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 6A Signing time: Mon 03 Nov 2025 06:59:14 +0000 Manifest this update: Mon 03 Nov 2025 06:59:14 +0000 Manifest next update: Mon 10 Nov 2025 06:59:14 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: +eOLLz9ImS6NrmX7MHshRaJJETZxEOONgmZtwDGEqSY=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Nov 3 06:59:14 2025 GMT Not After : Nov 10 06:59:14 2025 GMT Subject: CN=690852c2-273e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:37:2d:06:5d:24:95:12:ea:4f:e9:3c:42: f7:0f:28:f0:b5:7a:f4:e1:55:af:6b:50:07:24:bf: ca:6c:69:11:d3:49:64:b3:55:b2:a7:a0:e4:d2:cc: 69:03:8f:5f:e3:95:71:eb:94:fa:34:27:3b:11:6e: 7a:7e:45:a4:71:ea:a8:7a:72:01:33:5c:d3:51:a0: 21:90:79:c8:f0:e6:77:01:ef:8d:99:6a:51:42:f0: 8a:ed:88:f4:72:75:cf:0c:a6:42:44:3e:4d:75:d5: 6f:d2:66:67:9f:5c:7d:4d:7a:66:3b:bf:52:90:66: 01:ae:39:4a:b8:1a:57:59:80:93:dc:57:c2:60:b0: ad:b6:25:34:39:f2:48:c2:cc:39:3c:6c:cc:bf:3a: 36:6a:c5:3d:5e:2f:41:ca:b1:3f:7f:83:51:49:99: 33:64:b7:a6:65:55:96:87:f9:b6:d1:e6:8c:9e:cc: 10:8a:1c:3e:0c:08:74:4e:8e:19:b7:e4:a0:04:9f: 58:a6:9b:e4:35:06:f5:92:f2:70:23:b7:98:33:53: 51:d7:f1:b1:6c:6c:d6:80:5e:00:03:91:c4:c8:9e: 39:0f:e0:ca:79:ee:6a:d2:69:74:c0:1b:c8:63:63: 4b:bd:41:a4:5d:e2:ab:16:23:f2:96:c9:db:e0:3a: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:27:4F:3B:61:79:F0:B3:BA:A9:8C:1A:9F:B9:78:F8:09:17:BE X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:0d:99:dc:b5:e4:f2:59:c5:e3:3c:74:c3:12:e7:21:b5:2d: ab:dd:63:b0:90:25:87:6e:a3:68:4e:89:49:28:41:52:61:7a: 85:31:34:87:05:0a:6d:bd:95:01:43:b0:14:06:73:f3:33:80: af:2c:62:68:f7:4c:9e:e7:83:eb:b1:60:e2:aa:57:31:62:69: 47:a2:2d:0c:81:eb:ed:65:6e:6f:74:c4:7c:e1:df:ae:03:05: 04:db:96:66:13:26:6c:17:ca:48:7d:b2:b6:0a:52:d4:51:3d: e1:67:13:4f:2b:28:09:27:3e:af:c9:05:1e:75:f7:de:ab:1a: 8a:b6:f5:c6:8e:17:90:43:90:76:4d:1a:29:da:c8:df:49:9c: 60:bd:c3:f2:49:0c:9d:ca:04:9d:10:e5:7f:06:98:59:8c:25: 97:f9:55:a1:e6:6c:f5:62:fb:b8:f1:a5:de:b8:35:ef:c3:a2: a6:7a:d5:80:de:38:15:c4:38:4f:db:74:a0:17:59:f6:57:62: b7:57:5f:60:78:7c:b4:99:05:53:74:fb:49:70:b3:30:4a:4f: f6:39:46:95:78:4a:ec:b3:df:22:34:cd:6a:30:62:af:b6:f5: 19:6e:75:a1:85:47:9a:5d:59:a4:2f:16:8d:4f:c0:35:e5:01: 55:27:9a:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTExMDMwNjU5MTRaFw0yNTExMTAwNjU5MTRaMBgxFjAUBgNV BAMTDTY5MDg1MmMyLTI3M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8njctBl0klRLqT+k8QvcPKPC1evThVa9rUAckv8psaRHTSWSzVbKnoOTSzGkD j1/jlXHrlPo0JzsRbnp+RaRx6qh6cgEzXNNRoCGQecjw5ncB742ZalFC8IrtiPRy dc8MpkJEPk111W/SZmefXH1NemY7v1KQZgGuOUq4GldZgJPcV8JgsK22JTQ58kjC zDk8bMy/OjZqxT1eL0HKsT9/g1FJmTNkt6ZlVZaH+bbR5oyezBCKHD4MCHROjhm3 5KAEn1imm+Q1BvWS8nAjt5gzU1HX8bFsbNaAXgADkcTInjkP4Mp57mrSaXTAG8hj Y0u9QaRd4qsWI/KWydvgOn7tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+AnTzth efCzuqmMGp+5ePgJF74wHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEENmdy15PJZxeM8dMMS5yG1LavdY7CQJYduo2hOiUkoQVJheoUxNIcF Cm29lQFDsBQGc/MzgK8sYmj3TJ7ng+uxYOKqVzFiaUeiLQyB6+1lbm90xHzh364D BQTblmYTJmwXykh9srYKUtRRPeFnE08rKAknPq/JBR51996rGoq29caOF5BDkHZN GinayN9JnGC9w/JJDJ3KBJ0Q5X8GmFmMJZf5VaHmbPVi+7jxpd64Ne/DoqZ61YDe OBXEOE/bdKAXWfZXYrdXX2B4fLSZBVN0+0lwszBKT/Y5RpV4Suyz3yI0zWowYq+2 9RludaGFR5pdWaQvFo1PwDXlAVUnmi0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:34 2025 by rpki-client