$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json) Hash identifier: OCHRdQ8At8PJZae50X5LY393URxgbNAihWfCTFjyWTA= Subject key identifier: 41:EE:B7:33:DD:FD:38:7B:B7:ED:91:D6:41:8A:B6:C4:6C:40:1B:56 Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft Manifest number: 062D Signing time: Tue 04 Nov 2025 22:48:42 +0000 Manifest this update: Tue 04 Nov 2025 22:48:41 +0000 Manifest next update: Tue 11 Nov 2025 22:48:41 +0000 Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: Hwy+Umw0WY7CUsvKfy+lsyL6GHxl2qWS9X6yvTrLPsE=) 2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Validity Not Before: Nov 4 22:48:41 2025 GMT Not After : Nov 11 22:48:41 2025 GMT Subject: CN=690a82c9-acbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:bf:08:de:03:47:5a:34:89:c2:b6:73:ed: 52:af:f0:c1:58:6e:85:84:60:e8:f8:75:a9:77:31: e1:5a:88:35:e7:5c:51:51:7a:c3:97:29:59:c7:1e: 5b:54:1f:5b:16:cb:5d:58:2f:35:a3:44:5a:f6:7f: 0a:bc:93:a9:d9:e7:15:82:e1:e9:9c:8f:92:79:97: a7:b3:14:8d:5a:0a:36:98:03:17:c1:1c:8b:7f:e0: f5:fc:91:05:16:c3:1c:a2:36:6f:b3:50:f5:c1:df: 18:c1:16:1a:ca:50:b3:47:fc:bf:6d:b0:60:d7:b0: ce:6b:89:ed:b5:50:5c:2f:09:3c:cd:66:0b:1a:19: 1f:b0:68:1d:9f:bf:c5:2a:7f:34:e6:c4:1d:7f:6b: ea:e9:84:df:cb:0f:db:b2:92:7b:38:8f:fa:94:e5: 64:63:8f:e0:18:34:3f:85:74:05:f4:2f:9a:ea:f5: 2f:51:35:45:e5:38:c9:b5:de:8d:d9:6f:a7:74:a1: 44:01:68:7f:a3:9d:70:2f:c3:43:21:ef:bf:a6:6e: 88:5e:7c:03:00:52:cf:a5:8e:74:0e:bc:1a:ce:dd: 64:03:fa:9e:61:4f:8a:92:73:6e:fc:46:8a:d9:1c: 3c:35:c1:74:02:43:db:b3:94:c5:22:be:c6:0d:71: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EE:B7:33:DD:FD:38:7B:B7:ED:91:D6:41:8A:B6:C4:6C:40:1B:56 X509v3 Authority Key Identifier: keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ec:db:6d:c4:38:cd:a9:ed:ec:4e:63:c2:bd:f7:12:7a:c4: dc:69:af:37:3a:1d:eb:c3:ff:91:69:02:1c:c5:2f:78:f0:bd: 4e:58:47:1c:b7:6d:85:97:de:d1:ee:6c:38:dd:45:db:a1:20: 01:a7:c0:25:9a:76:06:9c:95:d8:60:06:5f:89:f4:8b:fa:64: 00:93:5d:0d:8f:65:f5:9b:1f:0b:ca:70:0b:eb:2c:fb:c9:c2: dd:a1:83:56:96:14:0e:df:dd:8a:94:d3:37:34:dd:f1:2f:8d: d6:55:de:83:8e:79:84:a7:53:2d:b0:b1:af:46:5d:28:0a:46: 7d:79:60:99:8c:87:89:9d:3c:70:ca:23:46:44:76:5b:fd:87: b9:57:12:71:d8:bf:70:03:52:29:2d:0c:00:95:49:0e:e4:fa: f2:4c:4c:28:2d:c7:ea:ae:02:13:e1:fc:c2:d7:ce:fa:36:1e: ac:33:ad:9f:a5:72:22:78:5e:bd:f6:6e:73:a4:83:d6:6a:24: 9e:51:b9:a1:74:bb:69:c2:27:4e:8c:4e:ec:70:7d:fe:ed:4e: 1c:91:45:f3:fd:85:c3:f6:ce:6b:83:c2:32:a8:22:e8:8c:2c: d4:f7:c0:d4:e3:a0:09:5d:f3:0b:21:2a:0f:2a:cd:45:d7:c3: fb:71:d2:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF RjBFNjlBODYwHhcNMjUxMTA0MjI0ODQxWhcNMjUxMTExMjI0ODQxWjAYMRYwFAYD VQQDEw02OTBhODJjOS1hY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA656/CN4DR1o0icK2c+1Sr/DBWG6FhGDo+HWpdzHhWog151xRUXrDlylZxx5b VB9bFstdWC81o0Ra9n8KvJOp2ecVguHpnI+SeZensxSNWgo2mAMXwRyLf+D1/JEF FsMcojZvs1D1wd8YwRYaylCzR/y/bbBg17DOa4nttVBcLwk8zWYLGhkfsGgdn7/F Kn805sQdf2vq6YTfyw/bspJ7OI/6lOVkY4/gGDQ/hXQF9C+a6vUvUTVF5TjJtd6N 2W+ndKFEAWh/o51wL8NDIe+/pm6IXnwDAFLPpY50Drwazt1kA/qeYU+KknNu/EaK 2Rw8NcF0AkPbs5TFIr7GDXG5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHutzPd /Th7t+2R1kGKtsRsQBtWMB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2 MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT TlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf7NttxDjNqe3sTmPCvfcSesTcaa83Oh3rw/+RaQIcxS948L1OWEcc t22Fl97R7mw43UXboSABp8AlmnYGnJXYYAZfifSL+mQAk10Nj2X1mx8LynAL6yz7 ycLdoYNWlhQO392KlNM3NN3xL43WVd6DjnmEp1MtsLGvRl0oCkZ9eWCZjIeJnTxw yiNGRHZb/Ye5VxJx2L9wA1IpLQwAlUkO5PryTEwoLcfqrgIT4fzC1876Nh6sM62f pXIieF699m5zpIPWaiSeUbmhdLtpwidOjE7scH3+7U4ckUXz/YXD9s5rg8IyqCLo jCzU98DU46AJXfMLISoPKs1F18P7cdIq -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:46 2025 by rpki-client