$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft File: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json) Hash identifier: 22L/5qx4iK3WUwjlNpkf1jct2txVdFF/sWZcdMznFtQ= Subject key identifier: CC:5F:25:FB:DB:F6:C7:51:BD:7A:94:F4:58:AE:E1:28:AE:87:29:EA Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft Manifest number: 32 Signing time: Mon 03 Nov 2025 07:43:13 +0000 Manifest this update: Mon 03 Nov 2025 07:43:13 +0000 Manifest next update: Mon 10 Nov 2025 07:43:13 +0000 Files and hashes: 1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: sQujEX4g7cEtmuMZ4Ra2NqTSgA6YHqi3EG5YPqBFGDQ=) 2: EABC58AC9AE911F091103146C4F9AE02.roa (hash: JMJ4tMD2yKnGlkUeo4o3VFgeqaBuupZ+4i0kIiz7kAA=) 3: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: I0RVpIxu3FJSWG6c9nRYnbbSBrKB3qOukimW1QY+X3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Validity Not Before: Nov 3 07:43:13 2025 GMT Not After : Nov 10 07:43:13 2025 GMT Subject: CN=69085d11-b229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:ab:59:76:71:86:b6:85:78:6c:e1:8f:f0: 23:5b:da:4e:ff:16:e6:33:e1:e7:90:07:0b:c7:0c: 43:56:70:bc:5f:82:25:58:7c:4f:f2:ca:84:29:96: 6f:5e:3f:27:75:fc:48:b1:b9:43:96:44:32:44:59: 98:21:d4:7f:b3:ca:5c:3a:2f:ef:02:64:df:a8:1b: 90:20:d2:a3:2b:3b:57:96:92:f9:db:4d:48:57:60: e4:80:82:a4:07:81:ec:39:3e:be:35:cf:b1:77:2c: 11:a1:c4:2a:8c:c3:e4:0a:4a:b1:b6:52:7a:65:d0: f7:74:4a:46:f3:0c:32:67:dd:ad:c0:13:20:08:50: 77:fc:72:3c:a3:ab:a0:37:e7:bc:1d:94:90:d1:67: 3b:0d:af:01:ff:6a:45:df:f1:5d:86:31:98:33:9c: 2f:22:ed:ef:de:84:bc:d9:66:fc:1a:1b:0e:ae:1a: e0:29:0c:6c:19:fb:4a:df:e6:76:d6:4c:90:ce:b6: d8:b3:b7:8c:63:a5:b7:53:04:dd:52:7e:46:be:6d: c0:e5:9a:f1:f1:2b:53:46:cd:6c:4a:77:bc:d6:48: 0c:1e:ef:da:5d:55:73:32:39:27:94:0b:2c:c4:16: 43:e0:14:9b:39:7a:6d:bd:29:20:0b:ca:fa:d4:1f: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5F:25:FB:DB:F6:C7:51:BD:7A:94:F4:58:AE:E1:28:AE:87:29:EA X509v3 Authority Key Identifier: keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fb:24:b7:a7:cd:f5:c4:d1:f2:78:df:6e:0d:b1:e1:4f:fe: dd:df:f4:f2:8e:06:05:96:52:57:51:6c:3b:30:3a:4a:fb:f6: c2:83:35:53:e7:c5:3b:55:15:95:3f:85:90:57:c6:39:8f:8d: b4:6f:6d:9d:6c:c6:98:df:71:a4:6b:fb:99:3c:f6:ab:8e:81: 8b:01:58:e7:ad:1e:72:20:b9:16:05:32:7b:d0:22:f4:be:51: b8:fc:a1:39:4e:80:64:71:43:39:09:d6:15:05:b7:91:c1:10: a5:44:42:0b:8d:55:72:bc:80:22:9d:fc:a1:71:bf:e5:63:5d: 46:7d:6f:d4:76:c9:f3:53:28:ce:71:37:db:2b:a5:0c:8d:24: 7d:b5:8e:2d:3d:31:5a:ef:63:bd:a3:8c:c3:27:10:90:28:b3: 18:21:b2:f4:84:b9:13:8d:be:68:a6:2e:8f:2e:04:c3:df:7b: aa:39:24:1d:39:36:ba:2b:08:bb:d9:31:b6:d1:08:54:fb:5a: 9d:4d:03:2a:30:93:e8:39:32:a9:1c:8b:6a:28:f6:ba:02:27: c9:a9:91:5c:0b:c2:26:1a:11:88:7e:35:be:53:64:52:08:e8: d1:a4:a2:0c:b5:65:77:59:e5:54:d7:c6:63:e6:07:f7:b8:d8: a1:72:d1:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzA2NTExMC8GA1UEBRMoNjU0QkNGRDcwQUJDNjBCNTQxMzkyODUzMDVFRkQwRTMx NUMzMzY4RTAeFw0yNTExMDMwNzQzMTNaFw0yNTExMTAwNzQzMTNaMBgxFjAUBgNV BAMTDTY5MDg1ZDExLWIyMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg7atZdnGGtoV4bOGP8CNb2k7/FuYz4eeQBwvHDENWcLxfgiVYfE/yyoQplm9e Pyd1/EixuUOWRDJEWZgh1H+zylw6L+8CZN+oG5Ag0qMrO1eWkvnbTUhXYOSAgqQH gew5Pr41z7F3LBGhxCqMw+QKSrG2Unpl0Pd0SkbzDDJn3a3AEyAIUHf8cjyjq6A3 57wdlJDRZzsNrwH/akXf8V2GMZgznC8i7e/ehLzZZvwaGw6uGuApDGwZ+0rf5nbW TJDOttizt4xjpbdTBN1Sfka+bcDlmvHxK1NGzWxKd7zWSAwe79pdVXMyOSeUCyzE FkPgFJs5em29KSALyvrUH4JDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzF8l+9v2 x1G9epT0WK7hKK6HKeowHwYDVR0jBBgwFoAUZUvP1wq8YLVBOShTBe/Q4xXDNo4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMDY1L0RCMzUxNEIwODIz MzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5v NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlV2UDF3cThZTFZCT1NoVEJlX1E0eFhETm80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MDY1L0RCMzUxNEIwODIzMzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxW Qk9TaFRCZV9RNHhYRE5vNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKX7JLenzfXE0fJ4324NseFP/t3f9PKOBgWWUldRbDswOkr79sKDNVPn xTtVFZU/hZBXxjmPjbRvbZ1sxpjfcaRr+5k89quOgYsBWOetHnIguRYFMnvQIvS+ Ubj8oTlOgGRxQzkJ1hUFt5HBEKVEQguNVXK8gCKd/KFxv+VjXUZ9b9R2yfNTKM5x N9srpQyNJH21ji09MVrvY72jjMMnEJAosxghsvSEuRONvmimLo8uBMPfe6o5JB05 NrorCLvZMbbRCFT7Wp1NAyowk+g5Mqkci2oo9roCJ8mpkVwLwiYaEYh+Nb5TZFII 6NGkogy1ZXdZ5VTXxmPmB/e42KFy0ew= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:28 2025 by rpki-client