$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: wxYzik8F+n4DYjK3b+C6MJXZOnnsYdpLea9L//mXYwM= Subject key identifier: 7B:B1:B7:10:5A:E2:08:E2:66:04:6B:86:98:E7:0E:C6:2B:57:89:EC Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 01A9 Signing time: Mon 03 Nov 2025 03:14:24 +0000 Manifest this update: Mon 03 Nov 2025 03:14:24 +0000 Manifest next update: Mon 10 Nov 2025 03:14:24 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: lGE9KXl8kxcUXXfkU1yukLtPBfmhj0sjOPCj+azgc8Q=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: SRP91sfnLKgHs2VY7WFFGrHVKBCFl0+7NYfhfkLyZBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Nov 3 03:14:24 2025 GMT Not After : Nov 10 03:14:24 2025 GMT Subject: CN=69081e10-1e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:4e:66:4c:ba:b0:67:27:47:a4:25:d4:de: 71:5d:63:3f:4b:75:69:ef:d1:6e:87:80:bf:bb:66: 76:83:b7:b9:c0:ac:84:1a:19:58:b5:ac:47:fd:8e: 3a:a7:b8:0f:a0:a9:15:f9:66:af:3b:c8:7c:59:28: 8c:a7:8f:32:da:aa:96:b0:fc:bc:29:6c:e0:5c:c2: ff:61:ce:25:5c:a2:af:15:49:c0:9e:a4:b9:58:be: 0d:7b:33:25:63:ed:05:63:e2:39:71:29:76:05:19: 13:1a:e7:90:04:b8:15:45:9c:25:fe:9b:60:a9:bc: 05:aa:8c:1b:56:27:0a:c3:0b:f0:42:bf:95:c8:a5: 2b:29:c4:12:30:0e:3f:d4:21:05:0f:71:e4:4a:b2: 5f:b7:f1:b6:43:e3:80:12:eb:d3:52:4e:e8:cd:6b: 86:00:4c:21:d1:3a:26:83:95:be:43:ea:2b:26:bc: 01:f6:2f:27:51:84:ce:23:3c:91:08:55:81:29:e5: 3d:0a:90:d5:43:cb:57:f9:89:33:c7:fe:15:67:75: 44:f8:76:51:2f:47:9b:26:34:cd:5f:12:15:ce:1c: ad:a2:d4:9b:0c:47:db:a9:3e:85:cf:80:5b:eb:b7: b6:f2:94:96:1f:55:41:53:82:34:14:b7:cf:ce:b4: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:B7:10:5A:E2:08:E2:66:04:6B:86:98:E7:0E:C6:2B:57:89:EC X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:5c:86:c0:8d:aa:f8:72:17:2f:5f:e6:ed:5a:78:d6:7a:92: 2c:c4:1d:b7:a7:52:5b:65:ac:6b:87:79:0c:9d:c0:13:bd:ea: 90:ca:73:d7:31:a9:db:76:5a:a7:0a:d4:0c:55:06:2e:f1:8e: c9:8a:cd:17:3c:b4:ea:a7:9c:40:c5:91:f2:4d:92:8e:ab:4f: a6:87:74:83:f9:5b:6f:2b:4f:aa:c3:6d:67:eb:29:66:b4:24: a3:4c:1f:1c:f1:51:b4:62:19:06:47:72:10:a0:ed:21:54:3e: 08:5d:a0:77:ae:c7:b8:41:28:4e:c1:b5:9f:27:62:9e:4f:70: a9:ed:4d:c1:4a:d8:41:cd:00:58:b2:3f:67:d8:6a:80:fc:3c: 29:4b:8f:0f:e1:4f:bd:88:1e:32:ed:04:a7:39:dc:29:5b:b4: 5b:1e:dc:99:e8:36:45:5f:85:fb:8a:c3:95:aa:63:dc:ae:43: db:fc:16:4c:33:34:1c:f3:6d:38:65:bf:af:44:95:35:92:64: e0:0c:f8:ac:0c:5a:45:01:34:31:5c:17:2b:f6:48:51:0e:24: 70:e7:da:4f:85:7a:cc:07:cd:b8:7a:c8:36:32:87:39:af:35: 99:6f:df:0c:d9:e0:b9:fd:f5:73:7f:6c:55:12:6a:f0:24:ff: 39:fa:1b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUxMTAzMDMxNDI0WhcNMjUxMTEwMDMxNDI0WjAYMRYwFAYD VQQDEw02OTA4MWUxMC0xZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYpOZky6sGcnR6Ql1N5xXWM/S3Vp79Fuh4C/u2Z2g7e5wKyEGhlYtaxH/Y46 p7gPoKkV+WavO8h8WSiMp48y2qqWsPy8KWzgXML/Yc4lXKKvFUnAnqS5WL4NezMl Y+0FY+I5cSl2BRkTGueQBLgVRZwl/ptgqbwFqowbVicKwwvwQr+VyKUrKcQSMA4/ 1CEFD3HkSrJft/G2Q+OAEuvTUk7ozWuGAEwh0Tomg5W+Q+orJrwB9i8nUYTOIzyR CFWBKeU9CpDVQ8tX+Ykzx/4VZ3VE+HZRL0ebJjTNXxIVzhytotSbDEfbqT6Fz4Bb 67e28pSWH1VBU4I0FLfPzrRXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuxtxBa 4gjiZgRrhpjnDsYrV4nsMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxXIbAjar4chcvX+btWnjWepIsxB23p1JbZaxrh3kMncATveqQynPX ManbdlqnCtQMVQYu8Y7Jis0XPLTqp5xAxZHyTZKOq0+mh3SD+VtvK0+qw21n6ylm tCSjTB8c8VG0YhkGR3IQoO0hVD4IXaB3rse4QShOwbWfJ2KeT3Cp7U3BSthBzQBY sj9n2GqA/DwpS48P4U+9iB4y7QSnOdwpW7RbHtyZ6DZFX4X7isOVqmPcrkPb/BZM MzQc8204Zb+vRJU1kmTgDPisDFpFATQxXBcr9khRDiRw59pPhXrMB824esg2Moc5 rzWZb98M2eC5/fVzf2xVEmrwJP85+hu6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:08 2025 by rpki-client