$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: Y7LjI/lijOCQL5CzWfeIFOEy1y82W7zn+tIqV/cP8ig= Subject key identifier: CA:0E:97:4F:0B:B0:C2:19:90:86:5D:18:CC:85:5E:94:79:4E:99:D3 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 116A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1162 Signing time: Sun 02 Nov 2025 17:15:16 +0000 Manifest this update: Sun 02 Nov 2025 17:15:15 +0000 Manifest next update: Sun 09 Nov 2025 17:15:15 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: x/5Ag4Y8zQUiCzNqg7ERb2edfN60KV2C9ELrlMuTnz0=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4458 (0x116a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Nov 2 17:15:15 2025 GMT Not After : Nov 9 17:15:15 2025 GMT Subject: CN=690791a3-aa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:65:d0:f0:35:98:04:15:be:1e:10:76:3a: e9:d3:f9:79:3b:1b:53:37:6d:41:79:3b:e0:d1:c5: 90:f4:fd:4e:0b:b8:57:83:7f:54:de:0e:50:dc:53: ac:a5:ed:b5:65:19:2c:93:c3:18:ba:79:9a:b3:7d: e1:b8:79:0b:ce:d3:a6:1d:06:76:1d:44:1a:56:09: 13:95:80:74:83:65:ad:16:8c:5d:d2:0c:de:e8:c9: 00:cc:d0:7f:db:6a:b4:dd:57:d5:3d:64:c3:53:cf: 92:c6:03:f8:ac:7e:6e:9e:e5:7c:65:1f:f8:69:20: d8:cb:b5:9e:9f:77:7a:e3:0e:a3:63:1f:d1:67:91: 71:a0:17:16:11:5c:ba:d2:b9:80:ae:02:47:17:68: f1:22:d7:7b:91:b1:fb:28:c3:50:09:7a:fa:17:38: 01:6d:78:8d:0e:30:19:7b:f3:43:fa:f0:ea:d3:44: 3c:96:71:a4:db:bd:7f:f6:fc:97:07:bf:47:0f:79: cd:37:4d:e7:3b:88:f1:f6:34:6e:b3:9b:bd:72:7b: 20:d6:5a:38:e8:ac:45:f8:30:52:12:2c:96:b2:9e: 43:cc:cf:ef:71:cd:73:cd:ae:74:90:7d:26:2d:60: c7:e4:5d:67:57:76:88:44:27:a9:be:58:6b:f6:62: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0E:97:4F:0B:B0:C2:19:90:86:5D:18:CC:85:5E:94:79:4E:99:D3 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:99:6e:0c:29:dc:ac:a7:fd:d0:5c:e4:3d:c6:8f:00:c4:a7: 3c:fd:33:2c:46:2a:ae:25:63:e7:e7:09:cb:45:56:c3:c4:1a: 37:8b:e8:d2:ad:82:2a:61:a3:9d:23:ff:19:a5:74:3d:82:51: b6:90:b8:9e:cd:22:63:9d:64:3c:5f:67:7c:7f:04:5b:2e:19: 28:1a:ed:2a:bd:00:35:1d:4b:3a:03:5b:42:5f:41:e3:4e:60: 83:80:01:34:1b:34:a3:d4:3d:16:77:11:83:a0:5c:73:d2:46: 29:82:c4:13:c3:9f:4f:dd:71:06:51:31:56:93:68:1d:fb:15: 60:e4:1f:69:94:c4:07:95:53:73:37:00:ce:1a:b4:1c:9a:ef: ff:fe:af:13:86:cd:24:0b:66:93:0d:4c:c7:fa:11:0f:4c:ef: 3f:10:93:32:09:e7:89:01:4d:d3:14:6d:c6:5a:f2:b4:2f:61: e3:91:9a:09:13:9e:b8:2e:16:00:9d:ca:c0:06:77:9d:6b:bf: c5:9f:71:0d:b8:b3:1c:01:7f:b4:67:4f:70:f3:fb:8c:73:4b: bd:b6:d7:a9:3d:86:cf:ef:df:92:c4:c4:5d:0c:14:82:23:3e: c3:24:12:01:b2:be:61:8c:90:98:f9:c5:e0:67:7c:8b:35:39: 54:ce:d6:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUxMTAyMTcxNTE1WhcNMjUxMTA5MTcxNTE1WjAYMRYwFAYD VQQDEw02OTA3OTFhMy1hYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYNl0PA1mAQVvh4Qdjrp0/l5OxtTN21BeTvg0cWQ9P1OC7hXg39U3g5Q3FOs pe21ZRksk8MYunmas33huHkLztOmHQZ2HUQaVgkTlYB0g2WtFoxd0gze6MkAzNB/ 22q03VfVPWTDU8+SxgP4rH5unuV8ZR/4aSDYy7Wen3d64w6jYx/RZ5FxoBcWEVy6 0rmArgJHF2jxItd7kbH7KMNQCXr6FzgBbXiNDjAZe/ND+vDq00Q8lnGk271/9vyX B79HD3nNN03nO4jx9jRus5u9cnsg1lo46KxF+DBSEiyWsp5DzM/vcc1zza50kH0m LWDH5F1nV3aIRCepvlhr9mL3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoOl08L sMIZkIZdGMyFXpR5TpnTMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCimW4MKdysp/3QXOQ9xo8AxKc8/TMsRiquJWPn5wnLRVbDxBo3i+jS rYIqYaOdI/8ZpXQ9glG2kLiezSJjnWQ8X2d8fwRbLhkoGu0qvQA1HUs6A1tCX0Hj TmCDgAE0GzSj1D0WdxGDoFxz0kYpgsQTw59P3XEGUTFWk2gd+xVg5B9plMQHlVNz NwDOGrQcmu///q8Ths0kC2aTDUzH+hEPTO8/EJMyCeeJAU3TFG3GWvK0L2HjkZoJ E564LhYAncrABneda7/Fn3ENuLMcAX+0Z09w8/uMc0u9ttepPYbP79+SxMRdDBSC Iz7DJBIBsr5hjJCY+cXgZ3yLNTlUztY1 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:00 2025 by rpki-client