$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: pS+GEZoILN1vZ19JP2KXaeMBwjHLY4v9Gt8IFVOpFqc= Subject key identifier: A4:DF:0C:EE:DA:4B:B5:64:BE:68:3C:29:46:EB:A9:8E:1F:AB:4A:0E Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 026A Signing time: Mon 03 Nov 2025 01:37:38 +0000 Manifest this update: Mon 03 Nov 2025 01:37:38 +0000 Manifest next update: Mon 10 Nov 2025 01:37:38 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: FY3UQHdZSfuAW3E4VII/6qMd1g+OMeSh33UpaUy6fqk=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Nov 3 01:37:38 2025 GMT Not After : Nov 10 01:37:38 2025 GMT Subject: CN=69080762-9fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:97:41:30:1e:a7:fb:46:3c:a8:48:50:81: 3c:90:71:d3:46:8d:82:87:c7:b3:ef:90:7d:2b:59: b9:8d:02:a4:e1:d7:34:3d:0f:29:76:78:a6:bf:0c: 33:47:aa:f4:b1:a9:b7:5a:6f:49:13:3a:c7:58:1c: dd:97:26:e9:0f:de:29:2f:f6:b2:53:5b:29:e4:36: 2b:bf:b1:f5:ff:72:9c:ba:0f:5f:56:01:fb:db:b9: 62:ab:8f:75:9f:60:54:da:c7:d9:52:a0:8d:5f:2a: 71:50:55:23:dd:ff:41:6d:fc:f1:1a:12:0e:40:ae: 6b:7a:b0:1a:aa:db:8e:7f:f5:8d:95:5f:c9:0d:c0: a4:76:95:23:4a:cb:f0:58:79:40:2b:b4:b2:9b:2f: 51:32:4f:9d:0a:a8:f0:6e:92:7c:79:b9:b9:ca:9a: ee:a2:da:a9:06:6b:14:ac:b2:c9:7e:2f:3a:55:f8: e0:8a:34:c7:ad:85:33:d0:84:4f:49:cd:88:2d:53: d7:4d:55:7d:f3:f7:27:ca:24:17:f6:f9:c0:fc:44: 21:d6:93:60:bf:cf:0a:4c:32:2e:24:f6:f9:66:3c: 1f:46:9e:0a:c7:2e:a7:15:17:04:ef:87:da:54:4e: a0:f7:ac:e1:1f:08:ec:f4:5b:82:32:47:f0:16:4a: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:0C:EE:DA:4B:B5:64:BE:68:3C:29:46:EB:A9:8E:1F:AB:4A:0E X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:04:f5:8c:07:9a:a2:9f:52:4e:7d:0b:0b:3a:08:09:76:42: c8:6e:f9:e5:26:2a:9e:44:85:aa:94:8d:ea:f5:5f:2f:d1:5b: e9:19:5a:b8:8c:3c:33:5b:19:56:01:d3:a2:86:fa:76:f7:aa: ba:5e:f4:76:2d:a8:34:d4:5c:c9:8d:9f:5c:58:81:1c:ca:ab: 01:b3:94:13:60:a9:89:ca:38:30:2a:ed:6e:d9:64:86:ca:79: 32:de:df:95:40:39:3d:01:3d:74:a6:54:7c:2c:ee:f9:5f:cc: 5e:16:73:e1:96:19:80:a9:05:b2:07:9a:c0:e2:e5:9a:97:6d: aa:10:7e:19:92:9c:46:44:52:70:ac:ea:b9:b5:da:90:2a:0a: 79:9f:bd:8c:95:e7:10:0e:a1:e4:9e:1a:18:22:85:d8:4b:bb: 83:f1:bf:c4:7b:a1:91:72:63:1e:42:52:05:3d:06:71:5a:c4: 31:16:ae:14:e2:5c:c5:e6:fa:6a:49:32:10:16:d1:dd:0c:d4: 5c:a8:46:fa:63:19:b8:75:4e:10:f2:d9:ee:e3:88:23:1e:d8: 98:3e:98:d9:d8:14:1f:a3:c6:ae:fc:86:44:4d:81:52:cf:09: 9a:9f:55:5b:bf:d6:e1:da:cb:6f:62:71:30:d4:97:b9:eb:c9: da:05:c2:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUxMTAzMDEzNzM4WhcNMjUxMTEwMDEzNzM4WjAYMRYwFAYD VQQDEw02OTA4MDc2Mi05ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyGXQTAep/tGPKhIUIE8kHHTRo2Ch8ez75B9K1m5jQKk4dc0PQ8pdnimvwwz R6r0sam3Wm9JEzrHWBzdlybpD94pL/ayU1sp5DYrv7H1/3Kcug9fVgH727liq491 n2BU2sfZUqCNXypxUFUj3f9BbfzxGhIOQK5rerAaqtuOf/WNlV/JDcCkdpUjSsvw WHlAK7Symy9RMk+dCqjwbpJ8ebm5ypruotqpBmsUrLLJfi86VfjgijTHrYUz0IRP Sc2ILVPXTVV98/cnyiQX9vnA/EQh1pNgv88KTDIuJPb5ZjwfRp4Kxy6nFRcE74fa VE6g96zhHwjs9FuCMkfwFkrlgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTfDO7a S7Vkvmg8KUbrqY4fq0oOMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApBPWMB5qin1JOfQsLOggJdkLIbvnlJiqeRIWqlI3q9V8v0VvpGVq4 jDwzWxlWAdOihvp296q6XvR2Lag01FzJjZ9cWIEcyqsBs5QTYKmJyjgwKu1u2WSG ynky3t+VQDk9AT10plR8LO75X8xeFnPhlhmAqQWyB5rA4uWal22qEH4ZkpxGRFJw rOq5tdqQKgp5n72MlecQDqHknhoYIoXYS7uD8b/Ee6GRcmMeQlIFPQZxWsQxFq4U 4lzF5vpqSTIQFtHdDNRcqEb6Yxm4dU4Q8tnu44gjHtiYPpjZ2BQfo8au/IZETYFS zwman1Vbv9bh2stvYnEw1Je568naBcIm -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:35 2025 by rpki-client