$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: buauQb6XVZ3PPwlKoNy5OEOlbZP071T2gU8tTfV4mdM= Subject key identifier: 52:69:CE:50:17:32:03:F0:06:0D:82:37:DD:B2:F0:11:12:8D:C9:26 Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 0198 Signing time: Wed 05 Nov 2025 03:38:01 +0000 Manifest this update: Wed 05 Nov 2025 03:38:01 +0000 Manifest next update: Wed 12 Nov 2025 03:38:01 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: 1TwZXe5/kAtY+IgdoNAjyDcPScqBm3wJM4HX1o15OzY=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: g6wCJDrtHyuCox1Dak/0D/0mdLei/24CwRHwHNh/Oi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Nov 5 03:38:01 2025 GMT Not After : Nov 12 03:38:01 2025 GMT Subject: CN=690ac699-40a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d1:d6:dd:55:0d:1e:49:b6:28:09:05:59:96: 81:6a:d5:5f:46:ff:d9:d2:2d:33:65:c4:05:12:61: 90:45:22:3a:c2:1e:2a:63:14:c4:84:26:0b:dc:62: e3:e3:d9:15:e2:24:51:09:33:e8:d3:15:ee:8c:db: 71:8d:0b:28:7d:cd:7a:34:82:f0:b2:09:d4:74:0d: 90:4b:60:54:e7:ad:05:76:3f:df:c4:c7:fb:7f:d7: 3f:e1:94:28:78:12:4b:5d:c5:3c:b1:ac:68:e0:a0: be:5c:02:81:e1:aa:2d:62:e3:aa:ea:ea:08:fa:f0: 8a:e3:2f:ad:89:06:cc:5a:8e:89:22:b5:d0:0b:36: 2d:ed:ec:d5:08:a8:97:01:57:bb:30:c4:22:a2:23: 2b:2c:f0:31:ec:56:dd:12:c1:76:98:83:17:bc:ed: df:78:ad:8d:85:34:b4:6e:e0:7e:6c:a5:92:32:e8: be:06:c2:55:00:0e:bb:61:78:4a:f2:f2:02:c2:5c: 14:8f:18:8a:40:ad:a0:66:21:1b:90:e8:c6:17:3b: a3:7a:52:7d:8c:2d:24:e0:69:fc:ef:a6:b8:db:8e: aa:d1:bc:9b:86:5c:d7:ae:d7:f0:4e:63:49:c9:53: 1e:cb:06:cf:e3:17:60:ac:17:85:10:e6:fb:48:51: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:69:CE:50:17:32:03:F0:06:0D:82:37:DD:B2:F0:11:12:8D:C9:26 X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f0:20:1f:19:5f:f3:dd:7e:61:54:a4:85:51:61:e5:7d:a8: dc:34:1d:ae:b0:1a:0a:65:8b:03:c9:7a:50:d4:d5:f2:d0:2f: 8a:58:37:47:e3:cc:22:34:56:af:a4:bc:77:b5:b6:79:d7:bc: 92:34:55:a9:3e:dd:7f:bf:e8:97:68:6c:f4:73:1e:e2:ff:51: 2d:7f:7e:08:b5:9f:4a:2a:04:3c:2c:78:86:b0:fc:6f:8a:f1: 44:88:52:bb:6b:ff:0a:d3:35:38:05:b5:42:7e:be:aa:b5:9e: de:63:66:40:ad:01:6a:cb:29:44:db:a1:53:77:9a:0a:fd:1c: fa:ca:09:87:0c:bd:6d:46:40:9f:2e:31:8f:17:b3:ea:31:0d: d6:8d:cf:85:99:25:34:20:d7:61:42:4c:7e:23:60:44:9c:b1: fb:48:0e:b2:8b:f1:78:01:56:8d:2e:90:2f:7d:7a:d8:cd:2f: 8d:6f:cd:32:e4:b9:42:38:c4:a5:6a:3f:c3:fb:18:f3:15:79: 4a:56:9e:c1:a4:3d:3f:61:e8:fe:dd:7f:c2:da:84:7e:78:ab: 8d:87:9c:2c:90:1a:ea:ab:03:df:96:64:12:c8:ac:e0:6d:ff: ff:5b:3c:6c:c8:98:05:9d:bb:6e:d0:73:54:33:58:fc:44:82: 2f:a3:3c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjUxMTA1MDMzODAxWhcNMjUxMTEyMDMzODAxWjAYMRYwFAYD VQQDEw02OTBhYzY5OS00MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tHW3VUNHkm2KAkFWZaBatVfRv/Z0i0zZcQFEmGQRSI6wh4qYxTEhCYL3GLj 49kV4iRRCTPo0xXujNtxjQsofc16NILwsgnUdA2QS2BU560Fdj/fxMf7f9c/4ZQo eBJLXcU8saxo4KC+XAKB4aotYuOq6uoI+vCK4y+tiQbMWo6JIrXQCzYt7ezVCKiX AVe7MMQioiMrLPAx7FbdEsF2mIMXvO3feK2NhTS0buB+bKWSMui+BsJVAA67YXhK 8vICwlwUjxiKQK2gZiEbkOjGFzujelJ9jC0k4Gn876a4246q0bybhlzXrtfwTmNJ yVMeywbP4xdgrBeFEOb7SFEwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJpzlAX MgPwBg2CN92y8BESjckmMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo8CAfGV/z3X5hVKSFUWHlfajcNB2usBoKZYsDyXpQ1NXy0C+KWDdH 48wiNFavpLx3tbZ517ySNFWpPt1/v+iXaGz0cx7i/1Etf34ItZ9KKgQ8LHiGsPxv ivFEiFK7a/8K0zU4BbVCfr6qtZ7eY2ZArQFqyylE26FTd5oK/Rz6ygmHDL1tRkCf LjGPF7PqMQ3Wjc+FmSU0INdhQkx+I2BEnLH7SA6yi/F4AVaNLpAvfXrYzS+Nb80y 5LlCOMSlaj/D+xjzFXlKVp7BpD0/Yej+3X/C2oR+eKuNh5wskBrqqwPflmQSyKzg bf//WzxsyJgFnbtu0HNUM1j8RIIvozwH -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:43 2025 by rpki-client