$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: 1kal1418h8zTHzbRXq4z7idFV6OyGHXnNZTZaGic3pE= Subject key identifier: 54:75:27:2B:07:15:56:8C:34:0D:0C:F3:D6:CA:15:84:A8:28:FC:27 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 04D7 Signing time: Sun 02 Nov 2025 23:46:53 +0000 Manifest this update: Sun 02 Nov 2025 23:46:53 +0000 Manifest next update: Sun 09 Nov 2025 23:46:53 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: mnmuE1gcLKa4LmaTBMYOVtcRHgeb6/B7hh4Z/CF4oG8=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Nov 2 23:46:53 2025 GMT Not After : Nov 9 23:46:53 2025 GMT Subject: CN=6907ed6d-5394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:6d:fe:0b:af:2c:c8:82:99:8f:5a:8a:e0: 85:a1:23:05:6b:f2:3c:c1:87:cd:c6:e4:a3:75:1f: 7d:f8:33:49:10:ff:b3:2e:1d:85:22:22:7c:62:79: c7:11:e7:8c:b3:cb:f4:58:53:22:bf:a7:6d:11:97: 70:2d:64:18:c6:19:0b:9f:e3:07:90:29:6a:11:6b: 4b:53:f7:e7:5f:d6:c9:45:36:33:e5:ec:64:47:91: 1d:3d:71:08:52:73:9e:09:62:fc:9b:d2:9f:97:5f: c0:a2:ac:5d:95:c4:d9:e6:83:5c:d4:6b:45:89:a1: 86:22:97:a3:37:a0:25:8a:b1:7d:b4:61:3d:cd:09: 59:de:42:d9:4d:f7:2e:97:c9:c3:42:bc:7e:59:21: 11:cf:1b:81:6e:d3:d0:37:fb:da:59:90:cf:ea:7a: 4f:e3:9a:1f:b5:74:2e:20:5d:6f:8d:7c:a5:92:f7: bb:84:e5:83:1a:91:cc:04:c3:71:d7:b8:d0:01:81: 61:78:2e:7c:d2:6e:01:53:8f:48:77:3b:7e:6f:fd: 61:23:bc:7a:9c:20:55:f2:92:ca:d7:72:b2:8d:c7: 5c:5b:3e:fe:3c:52:c3:85:62:7b:28:fd:38:14:a6: a4:fe:97:8c:c4:a1:52:ee:a3:89:30:03:af:97:53: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:75:27:2B:07:15:56:8C:34:0D:0C:F3:D6:CA:15:84:A8:28:FC:27 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:60:44:20:43:7d:b2:f9:76:95:7f:2e:e9:ef:e7:44:92:20: a3:3d:a5:e6:f0:4c:94:a0:6b:04:e4:fa:ca:08:ba:2b:f8:21: e2:41:5f:62:38:73:aa:be:b9:2a:75:62:f1:89:e0:a5:3f:a0: 02:92:92:ca:26:a6:27:62:74:7a:4c:93:9b:ad:94:f8:c4:42: f8:04:33:20:d2:16:11:b7:7d:17:61:60:e9:86:ab:f1:17:9c: 3a:5f:ae:6d:bb:28:7b:cf:53:e2:ca:6b:d9:20:a8:1e:e7:d0: a0:23:20:85:3c:b8:5f:91:37:ff:c6:fa:12:bd:9f:57:b1:ff: f1:d7:12:b4:75:2b:7c:06:6c:95:42:3e:18:42:dd:be:00:b8: 07:af:b2:91:d6:29:8e:b5:01:4f:d3:bb:f0:0d:64:d3:50:8a: a0:12:01:10:58:c3:7b:34:46:50:42:0d:a4:f5:c3:7c:af:ee: 85:6b:31:f2:bf:74:23:25:82:8b:74:c9:22:b7:b6:23:fb:2d: 32:6c:03:ab:77:46:75:ee:18:9f:62:31:f7:d2:9a:a1:97:eb: bb:50:24:d4:1e:98:4f:19:6c:07:97:c6:30:07:6f:6f:dd:2b: 92:13:64:05:45:d2:48:93:7c:70:1f:67:c0:30:38:36:7f:66: 2c:a0:10:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjUxMTAyMjM0NjUzWhcNMjUxMTA5MjM0NjUzWjAYMRYwFAYD VQQDEw02OTA3ZWQ2ZC01Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoBt/guvLMiCmY9aiuCFoSMFa/I8wYfNxuSjdR99+DNJEP+zLh2FIiJ8YnnH EeeMs8v0WFMiv6dtEZdwLWQYxhkLn+MHkClqEWtLU/fnX9bJRTYz5exkR5EdPXEI UnOeCWL8m9Kfl1/AoqxdlcTZ5oNc1GtFiaGGIpejN6AlirF9tGE9zQlZ3kLZTfcu l8nDQrx+WSERzxuBbtPQN/vaWZDP6npP45oftXQuIF1vjXylkve7hOWDGpHMBMNx 17jQAYFheC580m4BU49Idzt+b/1hI7x6nCBV8pLK13KyjcdcWz7+PFLDhWJ7KP04 FKak/peMxKFS7qOJMAOvl1Od+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR1JysH FVaMNA0M89bKFYSoKPwnMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMYEQgQ32y+XaVfy7p7+dEkiCjPaXm8EyUoGsE5PrKCLor+CHiQV9i OHOqvrkqdWLxieClP6ACkpLKJqYnYnR6TJObrZT4xEL4BDMg0hYRt30XYWDphqvx F5w6X65tuyh7z1PiymvZIKge59CgIyCFPLhfkTf/xvoSvZ9Xsf/x1xK0dSt8BmyV Qj4YQt2+ALgHr7KR1imOtQFP07vwDWTTUIqgEgEQWMN7NEZQQg2k9cN8r+6FazHy v3QjJYKLdMkit7Yj+y0ybAOrd0Z17hifYjH30pqhl+u7UCTUHphPGWwHl8YwB29v 3SuSE2QFRdJIk3xwH2fAMDg2f2YsoBB2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:26 2025 by rpki-client