$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: bqB+KnUqZ+k6ZgjpcVNQgFzcXg58VzO7Kq3lzYLLD+M= Subject key identifier: DF:48:05:76:A0:99:17:20:EA:2D:EA:D9:D3:DA:C0:3A:49:CE:D3:CE Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0CFB Signing time: Sun 02 Nov 2025 18:03:44 +0000 Manifest this update: Sun 02 Nov 2025 18:03:44 +0000 Manifest next update: Sun 09 Nov 2025 18:03:44 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: OvBndFZuH5R12CDjxmfvgynd70J/1ayQIKn+0rj1CQE=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Nov 2 18:03:44 2025 GMT Not After : Nov 9 18:03:44 2025 GMT Subject: CN=69079d00-7a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:58:b3:48:1e:5f:91:12:d3:96:fa:ea:34: aa:dd:44:6e:38:b9:dc:44:0a:b3:67:c1:e8:7e:e1: 52:4a:f0:8a:4b:8d:ae:60:66:76:4a:3b:59:cb:db: 73:25:61:26:18:b0:8f:e1:1c:27:2f:fa:7a:d0:ea: 1d:bc:31:5b:84:34:fe:aa:11:d1:a2:61:80:8c:b2: ba:aa:f6:31:26:ef:e1:64:da:f5:30:b1:8d:02:d8: ec:cc:c2:80:ef:29:a6:02:ad:07:69:87:f4:c1:70: 20:76:fc:e1:0f:bb:4a:95:19:f6:0b:39:07:f9:2f: 8d:8e:9d:64:0e:7e:f3:9d:b1:63:4e:52:9b:19:0b: 7c:35:62:0a:0d:b5:36:71:95:d0:23:84:aa:14:17: 38:55:34:9f:9a:a7:b9:69:0c:a1:e8:db:6f:1e:57: f4:88:6c:a3:59:df:89:ce:67:b4:ff:e7:4b:72:e3: b0:60:23:d8:4a:65:4b:b5:90:80:39:1d:be:14:aa: 45:ab:43:5e:5b:2d:32:52:e8:a2:83:96:d2:d9:bd: 72:b7:99:4e:5d:f1:a8:0e:bf:77:1c:7e:19:a4:d1: d3:83:8a:00:fe:b5:57:f1:a5:36:f6:df:73:11:19: 19:fe:a2:22:db:8f:ff:1f:4c:45:69:25:d8:e3:ad: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:48:05:76:A0:99:17:20:EA:2D:EA:D9:D3:DA:C0:3A:49:CE:D3:CE X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:15:a0:ca:4e:3a:83:33:da:fa:cb:fa:ad:7d:e1:e7:62:3c: 71:24:62:34:7e:fd:a8:71:51:d8:5d:d7:62:54:fd:92:22:06: c5:02:c2:7b:b6:75:76:47:12:7b:70:5a:77:f9:13:22:76:02: 94:2c:a7:c1:b3:41:6f:89:68:d1:e7:a3:74:44:06:0f:40:73: 06:a8:10:1a:25:1b:a2:c2:31:48:50:9b:e5:1d:f4:3b:b9:2c: 2d:af:74:a9:10:e2:19:03:58:c3:93:55:e5:ce:c5:ab:87:a7: 6f:5f:a2:7f:29:22:2b:ad:89:91:59:b5:6e:56:69:82:4c:10: 02:16:c3:e6:03:57:ce:fc:02:8e:99:d2:3b:bc:fb:d9:f1:7e: 21:fa:66:ea:c4:22:f8:a4:3b:ea:2f:c5:52:05:ed:52:b0:cc: aa:e8:5f:25:64:69:83:41:d8:7a:70:09:36:25:08:bb:5e:d3: be:89:31:d7:b6:c8:79:c4:02:c2:01:54:fc:e2:d2:67:40:00: ea:e5:a3:30:27:a4:e9:d7:18:f8:bd:8b:a7:fa:1d:bc:f3:05: ce:3d:0c:fc:14:d7:44:91:6a:39:88:71:17:1e:8a:7a:ef:2f: 0f:d4:d5:53:16:15:6c:6d:5b:1a:4f:5c:2b:05:57:df:41:36: b9:45:83:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUxMTAyMTgwMzQ0WhcNMjUxMTA5MTgwMzQ0WjAYMRYwFAYD VQQDEw02OTA3OWQwMC03YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZNYs0geX5ES05b66jSq3URuOLncRAqzZ8HofuFSSvCKS42uYGZ2SjtZy9tz JWEmGLCP4RwnL/p60OodvDFbhDT+qhHRomGAjLK6qvYxJu/hZNr1MLGNAtjszMKA 7ymmAq0HaYf0wXAgdvzhD7tKlRn2CzkH+S+Njp1kDn7znbFjTlKbGQt8NWIKDbU2 cZXQI4SqFBc4VTSfmqe5aQyh6NtvHlf0iGyjWd+Jzme0/+dLcuOwYCPYSmVLtZCA OR2+FKpFq0NeWy0yUuiig5bS2b1yt5lOXfGoDr93HH4ZpNHTg4oA/rVX8aU29t9z ERkZ/qIi24//H0xFaSXY462+DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9IBXag mRcg6i3q2dPawDpJztPOMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMFaDKTjqDM9r6y/qtfeHnYjxxJGI0fv2ocVHYXddiVP2SIgbFAsJ7 tnV2RxJ7cFp3+RMidgKULKfBs0FviWjR56N0RAYPQHMGqBAaJRuiwjFIUJvlHfQ7 uSwtr3SpEOIZA1jDk1XlzsWrh6dvX6J/KSIrrYmRWbVuVmmCTBACFsPmA1fO/AKO mdI7vPvZ8X4h+mbqxCL4pDvqL8VSBe1SsMyq6F8lZGmDQdh6cAk2JQi7XtO+iTHX tsh5xALCAVT84tJnQADq5aMwJ6Tp1xj4vYun+h288wXOPQz8FNdEkWo5iHEXHop6 7y8P1NVTFhVsbVsaT1wrBVffQTa5RYOL -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:10 2025 by rpki-client