$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: esMRSOwSNxNpiSkfUA1901CpTjR/+7jGV7nbVxdywas= Subject key identifier: 7D:2F:CF:A5:CC:F7:C2:94:72:74:72:FE:7B:3F:07:77:3F:E3:83:C7 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0962 Signing time: Fri 31 Oct 2025 20:18:13 +0000 Manifest this update: Fri 31 Oct 2025 20:18:12 +0000 Manifest next update: Fri 07 Nov 2025 20:18:12 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: VE8YNaYq7CgCfEeF+yhlxUHnrVOYQfbA9Z4xwTJcj3Y=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Oct 31 20:18:12 2025 GMT Not After : Nov 7 20:18:12 2025 GMT Subject: CN=69051984-7d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:97:dc:c6:45:07:2c:ef:73:a6:32:c8:09: d2:ae:fe:7f:05:23:c5:b8:e5:ba:3e:0b:1b:2d:e6: 82:ed:d5:9b:bc:e9:8a:a2:46:26:05:c3:f3:d8:d8: 58:95:ed:b7:b5:be:22:3b:b9:4d:68:4f:3f:87:d2: 16:a9:f6:a8:52:6c:7d:bf:fe:23:24:7d:f0:63:60: ca:91:f0:30:02:dd:43:58:dd:47:54:50:f6:c8:0f: 7d:b2:ca:1b:ff:d8:0f:0e:c3:81:b6:1c:7d:a2:74: 4e:ad:ae:83:5f:b4:e0:27:9a:bf:9e:0d:94:5b:fe: 09:d3:2b:96:40:bc:b3:71:f0:e6:2b:9d:2c:b8:d2: 09:05:6c:0a:0b:fe:bc:94:fd:9a:45:50:17:d5:c9: 86:6d:cf:6e:2c:71:d1:23:ed:dc:6c:d2:68:27:60: 8f:85:69:4e:8b:ab:1b:ed:22:a6:f9:ef:a6:1d:a2: 0f:5e:f8:7e:16:8c:39:00:52:a3:64:29:0e:57:04: 49:05:72:f3:98:7e:85:f6:05:53:ff:3e:66:af:ce: 41:2d:f0:ec:c3:03:c7:ae:08:c5:d4:7d:08:ad:5b: 81:d8:51:f7:96:2e:a0:21:5a:f9:a4:05:89:53:78: a0:71:00:04:30:df:66:f4:74:4a:ba:08:e8:dc:49: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:CF:A5:CC:F7:C2:94:72:74:72:FE:7B:3F:07:77:3F:E3:83:C7 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:07:be:97:41:61:2b:27:a9:0b:f0:4e:1e:91:7f:51:60:ab: 7e:14:d7:df:1f:93:25:2e:5b:db:72:9b:9f:07:2f:56:84:4c: 64:8e:8c:54:93:63:8a:b6:4f:bd:61:82:fc:bb:24:a5:22:fc: f3:93:14:6f:ee:0b:bb:b8:38:ef:49:dd:cd:fc:06:90:68:69: aa:4d:7f:fb:9d:72:64:3f:63:a5:ca:08:db:aa:c2:90:a3:8f: dc:22:7a:11:8b:1e:96:dd:62:c0:97:27:df:0c:4b:20:04:e6: 2d:20:ec:99:60:42:aa:79:ce:f1:61:79:af:e2:16:95:58:d4: ec:26:0e:93:6f:f5:4b:57:12:1a:36:9c:c9:52:a4:8b:16:68: af:26:a2:3d:fc:60:d0:1f:85:2c:a2:d0:96:df:01:c4:f3:60: 11:b6:29:12:6b:4c:b1:3f:35:7e:b4:50:c2:20:63:99:f1:03: ec:21:b7:07:49:fd:b3:86:3e:6e:f9:84:3d:cc:f4:db:9b:ed: bb:65:4d:e2:79:d7:cd:00:55:1d:47:f2:4a:89:5c:d6:c1:2a: ae:f1:b3:5f:45:df:20:a0:30:ad:ce:e5:19:93:a3:be:8d:6b: b0:4a:1b:1b:43:f7:77:c1:eb:91:7a:64:1a:1a:ae:ee:cd:ea: b3:74:6a:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUxMDMxMjAxODEyWhcNMjUxMTA3MjAxODEyWjAYMRYwFAYD VQQDEw02OTA1MTk4NC03ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxOX3MZFByzvc6YyyAnSrv5/BSPFuOW6PgsbLeaC7dWbvOmKokYmBcPz2NhY le23tb4iO7lNaE8/h9IWqfaoUmx9v/4jJH3wY2DKkfAwAt1DWN1HVFD2yA99ssob /9gPDsOBthx9onROra6DX7TgJ5q/ng2UW/4J0yuWQLyzcfDmK50suNIJBWwKC/68 lP2aRVAX1cmGbc9uLHHRI+3cbNJoJ2CPhWlOi6sb7SKm+e+mHaIPXvh+Fow5AFKj ZCkOVwRJBXLzmH6F9gVT/z5mr85BLfDswwPHrgjF1H0IrVuB2FH3li6gIVr5pAWJ U3igcQAEMN9m9HRKugjo3EkW7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0vz6XM 98KUcnRy/ns/B3c/44PHMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnB76XQWErJ6kL8E4ekX9RYKt+FNffH5MlLlvbcpufBy9WhExkjoxU k2OKtk+9YYL8uySlIvzzkxRv7gu7uDjvSd3N/AaQaGmqTX/7nXJkP2OlygjbqsKQ o4/cInoRix6W3WLAlyffDEsgBOYtIOyZYEKqec7xYXmv4haVWNTsJg6Tb/VLVxIa NpzJUqSLFmivJqI9/GDQH4UsotCW3wHE82ARtikSa0yxPzV+tFDCIGOZ8QPsIbcH Sf2zhj5u+YQ9zPTbm+27ZU3iedfNAFUdR/JKiVzWwSqu8bNfRd8goDCtzuUZk6O+ jWuwShsbQ/d3weuRemQaGq7uzeqzdGoo -----END CERTIFICATE-----Generated at Sat Nov 1 14:09:32 2025 by rpki-client