$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: +OUG725y7s5+dKTemuzW52REcFZf8cN7+TDOEEg492A= Subject key identifier: 93:21:37:E8:AD:AB:40:6D:A2:84:E2:BE:B9:B5:90:6E:E6:B3:20:79 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 0490 Signing time: Wed 05 Nov 2025 00:10:59 +0000 Manifest this update: Wed 05 Nov 2025 00:10:59 +0000 Manifest next update: Wed 12 Nov 2025 00:10:59 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: 1JubNkGrOJ3r8mqSz0WDNxfp8yCzMzI+gZEW4/0ERyM=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Nov 5 00:10:59 2025 GMT Not After : Nov 12 00:10:59 2025 GMT Subject: CN=690a9613-231b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:fc:a0:6e:42:3c:86:45:19:ca:6b:31:81: 45:a9:b1:fd:8c:2a:87:11:bc:c9:e5:07:71:ea:c4: d7:8a:04:e6:40:97:04:81:dd:9f:fe:e5:88:43:74: e5:d1:9e:89:f3:98:5e:ae:93:29:4a:62:42:96:46: 87:40:90:46:b4:b5:62:04:24:e3:df:c9:19:50:39: c7:80:ef:68:1c:de:c9:38:68:79:08:31:8d:cc:0f: 0b:97:28:15:4a:f5:18:18:81:ed:40:ad:2d:6c:e9: 81:48:ea:81:bc:d8:6b:87:18:2b:24:8d:fb:ab:f2: fe:6d:2b:c7:ed:86:f1:55:2f:74:c7:58:83:09:ba: 33:4e:bd:6e:fd:e5:33:5b:26:2b:eb:cc:46:24:e8: 9c:59:8e:66:78:67:cb:61:02:b1:b4:96:d0:22:a7: d7:c3:cf:13:da:35:c7:f8:c2:f7:1d:71:bd:01:f8: 39:85:c0:ba:e1:27:28:ff:1f:84:5b:8c:94:a3:01: 95:aa:a3:35:3e:31:4d:f1:1a:64:3b:e1:35:39:1d: 20:f7:c0:21:2e:9c:58:09:e0:bb:4c:f4:40:81:1a: 0f:a1:ec:5f:ce:e4:b3:4a:32:f0:8d:d6:e7:8d:39: bb:12:73:48:f2:f0:ce:85:ad:37:bb:62:6e:28:55: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:37:E8:AD:AB:40:6D:A2:84:E2:BE:B9:B5:90:6E:E6:B3:20:79 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9b:87:46:a9:34:64:8f:b7:28:ff:7e:89:63:c4:f3:fa:c0: ea:d8:37:8e:54:7c:12:25:8c:09:31:7c:66:eb:d2:6e:73:d2: 46:47:47:41:c7:7b:1f:ae:1e:aa:f7:b0:79:34:26:ac:b7:5d: 20:0c:4d:73:52:0f:d5:9c:1d:e7:60:fc:6d:18:d8:11:f4:08: 46:ca:17:21:0f:0b:3a:77:e4:b5:f9:9a:03:ca:93:3e:f3:4f: 1d:f6:35:b8:eb:22:3c:1c:88:03:41:a6:29:f0:c0:c3:e3:85: ca:24:11:f1:9a:ab:0b:2a:12:92:ed:20:30:14:9c:8a:e7:10: de:f3:f9:3e:4a:a8:4b:6f:1d:83:a5:34:dc:17:8a:8c:cd:69: ff:3f:70:03:e9:93:b9:93:85:3e:85:1d:e3:eb:d7:f7:75:ec: fd:71:06:19:9e:7d:1b:1c:8b:f4:68:30:13:94:0c:a2:3a:68: 5e:10:ae:d2:06:a6:e1:c3:e5:5e:49:81:19:d5:88:de:d4:89: 6d:0c:f5:f8:0e:50:a7:2c:fe:2b:98:7b:5f:3b:83:99:91:0f: ac:ee:17:fb:50:4c:9b:de:2c:ab:ba:c2:1c:26:71:d1:94:bc: 91:c0:7a:a8:0c:0f:96:0d:1a:d0:75:fe:07:2e:30:a9:8d:35: 33:25:2a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUxMTA1MDAxMDU5WhcNMjUxMTEyMDAxMDU5WjAYMRYwFAYD VQQDEw02OTBhOTYxMy0yMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+r8oG5CPIZFGcprMYFFqbH9jCqHEbzJ5Qdx6sTXigTmQJcEgd2f/uWIQ3Tl 0Z6J85herpMpSmJClkaHQJBGtLViBCTj38kZUDnHgO9oHN7JOGh5CDGNzA8LlygV SvUYGIHtQK0tbOmBSOqBvNhrhxgrJI37q/L+bSvH7YbxVS90x1iDCbozTr1u/eUz WyYr68xGJOicWY5meGfLYQKxtJbQIqfXw88T2jXH+ML3HXG9Afg5hcC64Sco/x+E W4yUowGVqqM1PjFN8RpkO+E1OR0g98AhLpxYCeC7TPRAgRoPoexfzuSzSjLwjdbn jTm7EnNI8vDOha03u2JuKFUnpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMhN+it q0BtooTivrm1kG7msyB5MB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3m4dGqTRkj7co/36JY8Tz+sDq2DeOVHwSJYwJMXxm69Juc9JGR0dB x3sfrh6q97B5NCast10gDE1zUg/VnB3nYPxtGNgR9AhGyhchDws6d+S1+ZoDypM+ 808d9jW46yI8HIgDQaYp8MDD44XKJBHxmqsLKhKS7SAwFJyK5xDe8/k+SqhLbx2D pTTcF4qMzWn/P3AD6ZO5k4U+hR3j69f3dez9cQYZnn0bHIv0aDATlAyiOmheEK7S Bqbhw+VeSYEZ1Yje1IltDPX4DlCnLP4rmHtfO4OZkQ+s7hf7UEyb3iyrusIcJnHR lLyRwHqoDA+WDRrQdf4HLjCpjTUzJSoX -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:51 2025 by rpki-client