$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json) Hash identifier: WJT7WVCvkP2etyYxxrDwwTFkrvTBycZgUe1gvtzgfds= Subject key identifier: EB:63:4E:C6:F4:EE:FA:EF:44:02:A1:A5:3E:13:10:85:ED:69:0E:27 Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft Manifest number: 65 Signing time: Mon 03 Nov 2025 07:02:14 +0000 Manifest this update: Mon 03 Nov 2025 07:02:13 +0000 Manifest next update: Mon 10 Nov 2025 07:02:13 +0000 Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: FXJjTx9znsmU1jBR41nGXEA4WcpQwYBVGDpyJCOgnBo=) 2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: ziKAkTq8TDHqlAMGRhZZxal4YT5BAAI3FkEOnc8uPao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Validity Not Before: Nov 3 07:02:13 2025 GMT Not After : Nov 10 07:02:13 2025 GMT Subject: CN=69085375-818b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:b8:b6:8e:f4:74:e6:ab:f5:ac:5a:bc:a2: ec:5c:53:00:9f:12:af:13:6d:64:ed:9f:e8:59:79: 48:43:01:6e:81:05:42:16:85:0e:a6:c4:9f:a2:e9: 39:f7:a5:3f:b8:19:31:4a:2f:28:91:9d:46:fe:d4: 93:a7:87:a9:d5:12:7e:da:55:1d:8d:8a:cc:61:a5: ea:2d:56:e8:d2:66:ad:11:b2:84:33:1a:0f:b0:7c: b9:b9:0b:3d:13:d3:b6:9a:ce:56:30:bb:65:05:e1: 7d:21:13:2d:04:45:4d:a4:96:db:9e:56:51:a3:bf: 3b:3a:15:87:24:fc:5c:20:4e:52:f6:b9:cd:25:df: 2c:cd:a4:e4:81:93:4b:67:09:9f:81:05:84:aa:ca: fb:6f:5a:a6:f4:4c:6e:0a:7d:15:a9:76:ed:e2:ff: 7c:5b:21:ce:dc:c0:30:d7:81:72:0e:d3:b8:32:fe: 8e:fd:be:b4:00:87:d0:71:d9:71:d7:06:89:b0:f4: 50:43:b2:f0:b1:63:a0:4d:e3:0f:d7:2a:ce:ba:77: 45:67:6f:56:2e:ab:6e:19:3f:7e:87:f4:b4:6b:8f: 15:30:98:bb:ba:d0:21:01:c4:02:94:1d:9f:97:3d: fc:57:b7:fd:b3:c2:ca:24:28:62:9f:d3:da:84:47: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:63:4E:C6:F4:EE:FA:EF:44:02:A1:A5:3E:13:10:85:ED:69:0E:27 X509v3 Authority Key Identifier: keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:de:09:c0:35:35:59:71:f1:d8:f8:b6:d4:be:ae:71:61:95: 4b:57:24:3f:0d:3a:d4:b3:55:d6:4d:d5:91:ff:b7:a0:44:ce: ce:5d:bd:4e:3e:af:db:5a:a0:0b:a0:83:cf:42:8c:24:e1:b9: 51:87:7f:d7:18:a9:73:3f:19:6b:3c:63:24:14:e4:ec:0e:50: 69:f3:70:cb:86:bf:51:66:95:a6:73:17:85:1e:53:6d:ed:a6: bf:fa:c4:5b:3e:9d:a1:c5:37:3a:d3:55:03:69:4f:8f:ff:44: 23:55:d2:4b:90:68:f8:ea:ec:06:f8:9f:24:c1:26:e9:67:ab: 8f:58:d7:0b:95:c6:c9:5c:c4:5e:b6:91:09:e0:62:e2:6e:7d: 18:26:49:a3:9e:d6:4a:8b:a5:ae:75:78:22:d5:85:83:11:d0: ec:43:99:b1:34:6e:f2:98:5a:db:b6:14:05:6b:b5:5f:0a:97: 65:57:de:2c:4e:ef:51:ca:ef:b3:22:fd:71:32:c4:ae:5e:21: 20:59:99:6f:74:b9:db:9b:31:6a:f4:e2:19:80:f1:79:32:ad: ed:a1:cd:53:f2:a1:fe:75:74:5e:4a:23:96:fc:3f:68:06:cc: c5:8d:7b:24:c3:e9:10:02:50:7a:6c:29:c1:aa:97:85:e2:2c: cf:87:f9:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REE5RTExMC8GA1UEBRMoNjZDMzA2RDIzRjhCRkVBQUE0NENDQ0M1NTczOTY5NTFG OTg2QzZCRDAeFw0yNTExMDMwNzAyMTNaFw0yNTExMTAwNzAyMTNaMBgxFjAUBgNV BAMTDTY5MDg1Mzc1LTgxOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGi7i2jvR05qv1rFq8ouxcUwCfEq8TbWTtn+hZeUhDAW6BBUIWhQ6mxJ+i6Tn3 pT+4GTFKLyiRnUb+1JOnh6nVEn7aVR2NisxhpeotVujSZq0RsoQzGg+wfLm5Cz0T 07aazlYwu2UF4X0hEy0ERU2kltueVlGjvzs6FYck/FwgTlL2uc0l3yzNpOSBk0tn CZ+BBYSqyvtvWqb0TG4KfRWpdu3i/3xbIc7cwDDXgXIO07gy/o79vrQAh9Bx2XHX Bomw9FBDsvCxY6BN4w/XKs66d0Vnb1Yuq24ZP36H9LRrjxUwmLu60CEBxAKUHZ+X PfxXt/2zwsokKGKf09qERzvnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU62NOxvTu +u9EAqGlPhMQhe1pDicwHwYDVR0jBBgwFoAUZsMG0j+L/qqkTMzFVzlpUfmGxr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQTlFL0QxQkU4MDlDMUYz MjExRjBCRDIyQkE2OEM0RjlBRTAyL1pzTUcwai1MX3Fxa1RNekZWemxwVWZtR3hy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNNRzBqLUxfcXFrVE16RlZ6bHBVZm1HeHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QTlFL0QxQkU4MDlDMUYzMjExRjBCRDIyQkE2OEM0RjlBRTAyL1pzTUcwai1MX3Fx a1RNekZWemxwVWZtR3hyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAALeCcA1NVlx8dj4ttS+rnFhlUtXJD8NOtSzVdZN1ZH/t6BEzs5dvU4+ r9taoAugg89CjCThuVGHf9cYqXM/GWs8YyQU5OwOUGnzcMuGv1FmlaZzF4UeU23t pr/6xFs+naHFNzrTVQNpT4//RCNV0kuQaPjq7Ab4nyTBJulnq49Y1wuVxslcxF62 kQngYuJufRgmSaOe1kqLpa51eCLVhYMR0OxDmbE0bvKYWtu2FAVrtV8Kl2VX3ixO 71HK77Mi/XEyxK5eISBZmW90udubMWr04hmA8Xkyre2hzVPyof51dF5KI5b8P2gG zMWNeyTD6RACUHpsKcGql4XiLM+H+d8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:11 2025 by rpki-client