$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: HyRkubMi2icWnaH/rkZtvu4CXq6qUuCseMjcoded3Mo= Subject key identifier: 86:2A:83:66:6A:5F:61:2D:57:69:0B:13:68:C0:FD:4C:05:59:1C:5D Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 13C5 Signing time: Wed 22 Oct 2025 17:20:29 +0000 Manifest this update: Wed 22 Oct 2025 17:20:29 +0000 Manifest next update: Wed 29 Oct 2025 17:20:29 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: 9mpTwvd2RZ14xpl0HSbUStGwT4XM2ECOJqcMM5J/4UY=) 2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=) 3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=) 4: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5112 (0x13f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Oct 22 17:20:29 2025 GMT Not After : Oct 29 17:20:29 2025 GMT Subject: CN=68f9125d-060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:ef:7c:f6:0a:f1:d8:06:50:d8:ef:96:6e: ea:2e:23:b7:c9:a6:4a:cc:b5:59:03:1b:96:2b:30: d2:9a:90:b9:5b:e8:89:e6:c2:3e:81:dd:19:34:be: 4b:c8:a1:b1:a0:23:56:bd:c8:06:63:2c:3f:cd:06: 0e:a0:64:36:a6:80:ff:81:2d:87:d4:20:bf:12:15: b9:10:c4:a7:f2:da:45:3b:c8:71:3a:1f:ee:80:5d: de:ff:0d:98:ce:d5:73:3d:51:ba:62:51:2d:b3:58: fb:79:2f:4a:3b:64:60:b5:f0:39:a3:bf:7c:2f:c8: 98:bc:05:0f:7e:f6:c1:c6:be:e4:74:67:7c:41:4e: aa:c7:bd:2a:f2:8e:bd:69:5a:44:2d:69:7a:ae:6e: f5:c1:ab:fd:e6:37:8d:32:7f:76:7d:1c:f1:26:5e: ff:b3:7a:c7:95:06:60:b5:82:0d:af:a6:8e:df:31: 78:96:86:fb:7c:df:bc:8d:e7:d3:3e:6f:22:3b:89: e3:eb:ab:e8:72:75:16:db:0b:1d:fc:fc:95:ec:06: 4a:04:6f:1a:f5:a4:75:7b:b1:f9:94:ab:12:f7:70: 36:57:3d:97:96:d2:9c:0e:62:52:70:23:0a:67:a3: 84:6a:e3:f5:57:e6:54:f4:48:97:7d:b8:fb:72:37: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2A:83:66:6A:5F:61:2D:57:69:0B:13:68:C0:FD:4C:05:59:1C:5D X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fa:19:18:94:71:05:8b:37:7d:d8:92:82:ed:48:f3:b8:c7: b2:31:c6:17:02:f4:51:14:eb:57:a3:b8:ef:b9:e1:ed:f0:d0: 4d:4c:12:24:4c:68:8d:b2:9e:86:a0:fd:1d:ff:36:2d:14:ad: e7:12:84:bf:73:19:8f:5c:78:48:bb:22:bf:c6:04:74:cd:72: a6:76:5d:91:ed:6c:18:37:a6:b9:41:81:66:d5:8a:08:97:aa: 08:88:ad:47:63:3a:43:54:5f:5e:1e:45:4a:98:bf:92:c4:8a: 40:8b:db:2e:25:b6:a8:05:c4:1d:b8:59:d2:2d:12:6c:1a:76: 97:d5:91:ad:1b:4e:41:f4:64:8f:18:d2:7e:e7:a3:43:f7:5e: 71:ba:aa:2a:9c:20:fd:3b:ae:b7:56:2a:cf:5e:6b:9f:02:ac: 8e:33:44:e1:3a:5e:1e:bc:b8:1c:75:91:dd:2e:3c:d1:91:1d: fa:d7:0a:ae:87:a9:24:46:6f:7b:d4:80:92:f1:95:7c:b1:a0: a7:33:27:06:b4:6a:77:cb:06:b6:16:6c:ac:13:92:09:c0:e4: 4a:5f:5d:bf:75:6f:a5:3e:71:51:1a:de:d4:df:49:3b:d5:a9: 1a:5b:1c:3c:70:68:0f:30:62:02:72:b4:36:de:25:73:c9:80: 1e:32:25:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUxMDIyMTcyMDI5WhcNMjUxMDI5MTcyMDI5WjAYMRYwFAYD VQQDEw02OGY5MTI1ZC0wNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfTvfPYK8dgGUNjvlm7qLiO3yaZKzLVZAxuWKzDSmpC5W+iJ5sI+gd0ZNL5L yKGxoCNWvcgGYyw/zQYOoGQ2poD/gS2H1CC/EhW5EMSn8tpFO8hxOh/ugF3e/w2Y ztVzPVG6YlEts1j7eS9KO2RgtfA5o798L8iYvAUPfvbBxr7kdGd8QU6qx70q8o69 aVpELWl6rm71wav95jeNMn92fRzxJl7/s3rHlQZgtYINr6aO3zF4lob7fN+8jefT Pm8iO4nj66vocnUW2wsd/PyV7AZKBG8a9aR1e7H5lKsS93A2Vz2XltKcDmJScCMK Z6OEauP1V+ZU9EiXfbj7cjfs7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYqg2Zq X2EtV2kLE2jA/UwFWRxdMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+hkYlHEFizd92JKC7UjzuMeyMcYXAvRRFOtXo7jvueHt8NBNTBIk TGiNsp6GoP0d/zYtFK3nEoS/cxmPXHhIuyK/xgR0zXKmdl2R7WwYN6a5QYFm1YoI l6oIiK1HYzpDVF9eHkVKmL+SxIpAi9suJbaoBcQduFnSLRJsGnaX1ZGtG05B9GSP GNJ+56ND915xuqoqnCD9O663VirPXmufAqyOM0ThOl4evLgcdZHdLjzRkR361wqu h6kkRm971ICS8ZV8saCnMycGtGp3ywa2FmysE5IJwORKX12/dW+lPnFRGt7U30k7 1akaWxw8cGgPMGICcrQ23iVzyYAeMiVR -----END CERTIFICATE-----Generated at Thu Oct 23 10:00:51 2025 by rpki-client