$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json) Hash identifier: RHqt4qT5hGm8btGdSK3lddB3PF2HGUAM+uo2Yy/XZeY= Subject key identifier: 5C:B6:3C:A0:CA:47:CE:E5:DD:59:A8:BF:7E:3A:B0:62:0D:FB:56:5F Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft Manifest number: 3E Signing time: Sat 01 Nov 2025 07:50:04 +0000 Manifest this update: Sat 01 Nov 2025 07:50:03 +0000 Manifest next update: Sat 08 Nov 2025 07:50:03 +0000 Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: VDwU2t4Kytx6QgGnsn0N7vT7xolbI0IN+CZrsSGlA2w=) 2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: tlZH4+U+/czJd2gewk6CoHNSlqFgULLAe9q38ySSPEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 07:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Validity Not Before: Nov 1 07:50:03 2025 GMT Not After : Nov 8 07:50:03 2025 GMT Subject: CN=6905bbab-3732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:d5:e0:07:a9:b7:64:07:5a:70:f9:c0:f3: fb:e3:73:9b:7f:03:3b:7c:6b:54:b7:b5:64:39:9d: 11:fd:69:b5:0a:b9:37:78:d2:c2:ef:a7:69:95:39: 94:de:38:7e:9f:11:b9:64:ac:cb:0f:63:74:22:1c: 7d:9f:b7:03:36:41:9b:fb:22:02:d0:5e:f4:9d:19: b9:c8:9e:4f:e3:e1:c8:b0:34:c3:3f:28:63:cf:06: e9:ba:25:5d:10:e2:8c:7e:f4:7d:7b:da:e4:57:f8: 3d:76:f4:40:f1:06:57:83:30:c6:81:db:0a:78:6e: 25:23:dc:e2:57:81:ad:c0:b0:26:64:2a:80:d8:08: de:40:a3:93:92:bb:b7:2f:c8:c6:3c:9a:20:76:cb: 74:bd:dc:c1:cf:1d:ae:2b:26:e5:40:04:fd:cd:df: 29:dd:43:e4:91:79:34:92:0c:21:ab:b2:00:5f:9e: c9:35:14:a6:95:a4:d9:10:a7:68:26:c2:83:bd:39: 53:c0:ab:ed:0d:d0:b7:2d:51:71:89:9a:20:cd:2b: 4e:85:16:cf:e0:2d:bc:30:66:5e:e8:4f:17:af:7a: 99:09:cc:34:73:0c:c8:11:07:35:13:b5:9b:a2:af: 4f:a7:44:e4:6c:12:3b:8f:a7:0b:47:b7:61:35:25: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B6:3C:A0:CA:47:CE:E5:DD:59:A8:BF:7E:3A:B0:62:0D:FB:56:5F X509v3 Authority Key Identifier: keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:72:39:1b:d2:89:0d:97:61:ec:20:74:1f:ce:9c:8b:3a:a0: cf:f7:05:80:49:23:46:94:38:cc:c4:c5:a0:30:74:6b:a4:a8: c9:39:8d:1e:2a:77:2b:25:60:5d:24:2c:4e:8f:80:48:4d:ac: 5c:1f:cc:4d:f8:1f:8c:2f:85:a9:83:fe:4c:5e:f2:fa:55:96: f5:b9:36:32:ca:f3:16:c5:04:29:fc:5b:05:f5:e8:5c:bb:10: b0:13:c0:ae:0e:d1:f6:d7:d6:bb:ba:b3:40:f0:b9:1e:e6:3e: da:ce:f7:72:96:37:9b:7b:60:c2:80:c3:69:06:6a:71:54:59: 9b:de:d8:27:c2:62:93:d6:4e:a0:5d:24:05:74:31:61:78:33: f2:92:00:e9:3b:b4:64:fe:10:11:9f:37:ba:fa:cf:0e:be:c8: df:cb:00:c3:24:9f:c6:b1:1b:d4:22:71:db:06:c8:76:fd:52: 83:f4:fc:9b:ba:3c:e3:d0:73:9b:6b:59:d7:2b:54:f4:ed:74: 2e:2a:0b:06:0b:a6:d3:cf:46:3f:cb:0b:f7:ca:e2:94:20:96: 8b:de:ab:68:e1:66:58:77:4a:d7:51:2a:84:d5:ce:98:fa:dc: d0:51:32:a8:f3:eb:70:83:16:af:d6:0d:f5:a3:da:c6:f4:38: 33:c4:d3:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw NjI2NTQwNTAeFw0yNTExMDEwNzUwMDNaFw0yNTExMDgwNzUwMDNaMBgxFjAUBgNV BAMTDTY5MDViYmFiLTM3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCS3NXgB6m3ZAdacPnA8/vjc5t/Azt8a1S3tWQ5nRH9abUKuTd40sLvp2mVOZTe OH6fEblkrMsPY3QiHH2ftwM2QZv7IgLQXvSdGbnInk/j4ciwNMM/KGPPBum6JV0Q 4ox+9H172uRX+D129EDxBleDMMaB2wp4biUj3OJXga3AsCZkKoDYCN5Ao5OSu7cv yMY8miB2y3S93MHPHa4rJuVABP3N3yndQ+SReTSSDCGrsgBfnsk1FKaVpNkQp2gm woO9OVPAq+0N0LctUXGJmiDNK06FFs/gLbwwZl7oTxevepkJzDRzDMgRBzUTtZui r0+nRORsEjuPpwtHt2E1JVw/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXLY8oMpH zuXdWai/fjqwYg37Vl8wHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2Lzc2RjgyMDUwNUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hr RXZIVXFxT1NqUXdZbVZBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACxyORvSiQ2XYewgdB/OnIs6oM/3BYBJI0aUOMzExaAwdGukqMk5jR4q dyslYF0kLE6PgEhNrFwfzE34H4wvhamD/kxe8vpVlvW5NjLK8xbFBCn8WwX16Fy7 ELATwK4O0fbX1ru6s0DwuR7mPtrO93KWN5t7YMKAw2kGanFUWZve2CfCYpPWTqBd JAV0MWF4M/KSAOk7tGT+EBGfN7r6zw6+yN/LAMMkn8axG9QicdsGyHb9UoP0/Ju6 POPQc5trWdcrVPTtdC4qCwYLptPPRj/LC/fK4pQgloveq2jhZlh3StdRKoTVzpj6 3NBRMqjz63CDFq/WDfWj2sb0ODPE01g= -----END CERTIFICATE-----Generated at Sun Nov 2 23:39:35 2025 by rpki-client