$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: yyS0jmMyp9zL5UtBamFtaLo1A+1qvOLispgdrc/oMpQ= Subject key identifier: 27:CA:BA:F3:86:0B:23:28:D4:0A:7D:1B:B2:98:B7:E1:99:E1:45:70 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: E7 Signing time: Mon 03 Nov 2025 05:37:22 +0000 Manifest this update: Mon 03 Nov 2025 05:37:21 +0000 Manifest next update: Mon 10 Nov 2025 05:37:21 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: JcwsV9weURwlYrRKGLPTaLK2n9yMWiZ1N4bdkAP+q7w=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: m3GeVlgQwLSASq7XBSa8f1Uvp0nte9cJZ6MnwsMfEFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Nov 3 05:37:21 2025 GMT Not After : Nov 10 05:37:21 2025 GMT Subject: CN=69083f92-569e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:89:68:10:0e:d6:3f:4a:93:3c:35:f9:cf: 3c:86:f3:45:f2:0a:60:9d:f0:8f:b1:8a:5e:63:4f: dd:88:80:a3:7a:f5:97:f3:7d:6c:4a:ac:3f:6f:72: 54:37:f4:42:2e:7f:50:ac:57:94:96:46:f9:67:5b: 00:1d:99:9f:1a:ef:65:69:21:13:a1:ca:95:74:b0: 09:0d:2d:a8:4d:4b:35:3e:ed:af:7f:32:d9:93:44: 66:8c:04:20:13:7d:b8:bc:5b:33:29:1f:e5:f6:d0: 02:7a:c1:e9:7e:95:01:23:0e:e0:22:2a:20:4d:b3: 38:54:cb:ec:6f:e1:f4:81:e1:03:49:78:26:57:43: fb:1f:a3:26:ac:0b:63:40:70:b0:7b:c3:a5:8d:1f: d2:63:c4:22:7d:32:94:83:08:ff:d8:0f:61:76:a5: 0d:f6:e2:60:66:8e:f0:76:7e:e8:0e:4c:89:81:7a: 70:58:cd:21:3c:43:01:74:55:db:1b:3d:cd:ce:c9: dc:51:51:19:a6:7c:8d:12:55:d3:69:5b:e5:b7:f6: f8:08:38:e5:9b:40:0c:30:46:70:61:d7:f2:dc:eb: a9:72:03:b3:86:22:7f:15:2b:6a:69:62:2b:ca:f1: ff:d1:80:6a:27:82:7e:42:8b:33:82:3b:cc:56:85: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CA:BA:F3:86:0B:23:28:D4:0A:7D:1B:B2:98:B7:E1:99:E1:45:70 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:53:4a:50:7b:18:27:cc:d4:68:1e:fd:90:90:04:c6:8b:c9: 54:86:bf:66:74:f6:f6:5a:cd:34:8a:38:bd:ee:99:34:64:87: 56:1c:1c:16:5b:36:c5:70:37:64:55:ea:4e:a2:b8:d8:ba:41: 84:80:c7:73:61:5f:5b:15:a0:dc:3a:8f:b4:1f:d0:87:92:71: e8:15:0c:84:ce:da:5a:24:8f:c7:c2:d9:a3:45:24:9c:27:ee: d1:45:05:ff:c6:24:9a:e2:7f:11:d5:43:0c:cc:21:63:fd:5f: 4d:eb:8f:04:dd:4c:36:cc:8d:0c:04:ae:db:1f:81:d3:5e:21: 01:f1:f2:3a:f5:5f:0b:0d:d4:82:bd:f1:f2:ca:51:03:66:eb: 27:1c:d4:4b:7a:48:a0:03:dc:52:f3:b8:47:e6:72:4f:62:b2: 9e:0e:b6:32:49:05:a9:de:a6:54:e6:ed:26:cd:ac:fc:42:35: c3:21:fc:f4:89:c1:37:6d:07:56:7c:8e:17:62:9e:ca:cb:f5: a4:89:cc:3a:6d:a1:07:68:5b:82:1e:dc:ee:2d:72:c2:d8:9a: aa:f7:db:dd:1b:82:83:f3:e4:13:06:85:40:67:61:e5:1a:aa: 17:49:60:6f:1f:24:99:94:59:44:46:66:20:42:cf:f8:0b:b9: 45:01:54:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUxMTAzMDUzNzIxWhcNMjUxMTEwMDUzNzIxWjAYMRYwFAYD VQQDEw02OTA4M2Y5Mi01NjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oOJaBAO1j9Kkzw1+c88hvNF8gpgnfCPsYpeY0/diICjevWX831sSqw/b3JU N/RCLn9QrFeUlkb5Z1sAHZmfGu9laSETocqVdLAJDS2oTUs1Pu2vfzLZk0RmjAQg E324vFszKR/l9tACesHpfpUBIw7gIiogTbM4VMvsb+H0geEDSXgmV0P7H6MmrAtj QHCwe8OljR/SY8QifTKUgwj/2A9hdqUN9uJgZo7wdn7oDkyJgXpwWM0hPEMBdFXb Gz3NzsncUVEZpnyNElXTaVvlt/b4CDjlm0AMMEZwYdfy3OupcgOzhiJ/FStqaWIr yvH/0YBqJ4J+QoszgjvMVoXjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfKuvOG CyMo1Ap9G7KYt+GZ4UVwMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4U0pQexgnzNRoHv2QkATGi8lUhr9mdPb2Ws00iji97pk0ZIdWHBwW WzbFcDdkVepOorjYukGEgMdzYV9bFaDcOo+0H9CHknHoFQyEztpaJI/HwtmjRSSc J+7RRQX/xiSa4n8R1UMMzCFj/V9N648E3Uw2zI0MBK7bH4HTXiEB8fI69V8LDdSC vfHyylEDZusnHNRLekigA9xS87hH5nJPYrKeDrYySQWp3qZU5u0mzaz8QjXDIfz0 icE3bQdWfI4XYp7Ky/Wkicw6baEHaFuCHtzuLXLC2Jqq99vdG4KD8+QTBoVAZ2Hl GqoXSWBvHySZlFlERmYgQs/4C7lFAVQd -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:31 2025 by rpki-client