$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: dZ/iwexa6hFTxHjlUqMoIFvj6AaJyZ1qjK7+aKWf70s= Subject key identifier: BD:F9:5C:45:EB:3F:F3:B3:7C:16:98:72:6F:E1:2E:63:EF:75:AD:B6 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 87 Signing time: Thu 23 Oct 2025 08:51:38 +0000 Manifest this update: Thu 23 Oct 2025 08:51:37 +0000 Manifest next update: Thu 30 Oct 2025 08:51:37 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: 9Zb5LmVnj1vA/d6KKn91yIa497Sn8o8cCdc8HrC4J44=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 08:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Oct 23 08:51:37 2025 GMT Not After : Oct 30 08:51:37 2025 GMT Subject: CN=68f9ec99-edff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:f6:f4:3d:9c:20:cd:42:2f:2e:c6:45:a7: 72:6d:06:5d:18:4c:4e:f8:10:fe:9e:f2:06:cd:05: 0c:47:bd:46:77:35:85:bf:1b:4d:05:ec:25:dc:ca: ac:fd:8a:42:05:7a:f9:1e:67:12:17:83:20:f6:01: b0:e4:00:73:9a:6c:e0:33:d8:29:78:28:81:89:6a: a7:69:18:0d:a1:ec:a1:b0:95:3e:8d:46:2d:23:f7: 5f:b5:6a:e4:a5:22:ff:92:e7:bb:b1:ab:55:f4:f2: b4:76:c8:a6:5a:6a:5d:ae:ff:a5:2f:4d:61:65:f9: 7c:e1:4a:ad:e7:c0:b8:16:81:11:83:9f:12:f0:68: 7d:0d:46:05:7f:7d:e8:5f:b5:7a:3d:42:5e:07:ef: 32:f7:29:a2:93:55:cd:1f:e0:8d:61:e3:3c:27:bd: b6:02:1d:85:33:b9:bb:50:4c:c7:b6:ab:29:88:fe: bd:48:fd:8b:bc:e0:53:ca:23:8c:77:77:fe:59:da: 27:63:5e:0a:90:83:71:34:de:13:4e:2b:90:b6:d1: 14:9f:84:6b:d3:35:c9:60:ed:86:45:3a:e5:29:12: 04:90:5a:1c:0b:cb:39:1d:c6:77:e7:65:c3:e0:a2: ff:7f:57:84:03:e6:0e:91:35:01:64:d4:db:fc:0d: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:5C:45:EB:3F:F3:B3:7C:16:98:72:6F:E1:2E:63:EF:75:AD:B6 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:db:80:f6:bc:d2:ee:af:46:92:2a:04:7d:ba:6b:e3:9a:c7: f3:70:d7:4f:e5:3e:5c:ce:ca:10:9d:59:cd:2e:c2:ea:93:be: f7:91:97:9b:eb:33:0e:7a:7e:43:06:2d:1f:82:4d:e0:32:03: e8:7d:f8:e4:e5:77:9b:72:e4:90:6f:58:90:d0:e6:10:9a:e4: 8c:af:ad:79:6c:66:ab:2c:a9:1f:55:d3:b6:5f:2a:d0:19:3a: 5e:73:13:b1:d8:d4:78:a4:58:73:da:93:f1:a3:49:ff:e3:45: 41:dc:b2:00:f0:21:2a:c0:38:b6:a5:93:35:b0:0d:b5:3f:2d: 35:5b:d8:ef:00:83:4d:02:b6:cc:88:91:6e:fb:1f:f8:8f:3f: ac:3d:33:56:6c:01:1f:fb:6c:12:49:e6:14:e2:a7:8a:6e:de: 5f:e5:ee:4f:19:17:36:e4:56:1d:8a:13:f2:22:5d:54:3c:1f: 46:97:22:a5:4b:08:44:45:ef:7a:3d:d7:f8:4f:25:b7:b8:8c: 3b:af:09:7a:09:39:06:f2:bc:3f:7c:6a:66:d3:bd:1c:72:2e: 18:96:cc:65:6c:0e:cd:1d:7e:1b:80:4e:6b:1f:41:76:07:64: c6:26:5b:a4:99:86:45:c7:e7:44:d3:f7:bf:3d:0a:83:c6:5e: 3a:77:08:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjUxMDIzMDg1MTM3WhcNMjUxMDMwMDg1MTM3WjAYMRYwFAYD VQQDEw02OGY5ZWM5OS1lZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcz29D2cIM1CLy7GRadybQZdGExO+BD+nvIGzQUMR71GdzWFvxtNBewl3Mqs /YpCBXr5HmcSF4Mg9gGw5ABzmmzgM9gpeCiBiWqnaRgNoeyhsJU+jUYtI/dftWrk pSL/kue7satV9PK0dsimWmpdrv+lL01hZfl84Uqt58C4FoERg58S8Gh9DUYFf33o X7V6PUJeB+8y9ymik1XNH+CNYeM8J722Ah2FM7m7UEzHtqspiP69SP2LvOBTyiOM d3f+WdonY14KkINxNN4TTiuQttEUn4Rr0zXJYO2GRTrlKRIEkFocC8s5HcZ352XD 4KL/f1eEA+YOkTUBZNTb/A3XHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL35XEXr P/OzfBaYcm/hLmPvda22MB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi24D2vNLur0aSKgR9umvjmsfzcNdP5T5czsoQnVnNLsLqk773kZeb 6zMOen5DBi0fgk3gMgPoffjk5XebcuSQb1iQ0OYQmuSMr615bGarLKkfVdO2XyrQ GTpecxOx2NR4pFhz2pPxo0n/40VB3LIA8CEqwDi2pZM1sA21Py01W9jvAINNArbM iJFu+x/4jz+sPTNWbAEf+2wSSeYU4qeKbt5f5e5PGRc25FYdihPyIl1UPB9GlyKl SwhERe96Pdf4TyW3uIw7rwl6CTkG8rw/fGpm070cci4YlsxlbA7NHX4bgE5rH0F2 B2TGJlukmYZFx+dE0/e/PQqDxl46dwjD -----END CERTIFICATE-----Generated at Fri Oct 24 08:07:02 2025 by rpki-client