$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: +TpSyvdCw+XSh8SYVvJ5QDZ9uiMPW0C8aRGQhL0JCXY= Subject key identifier: CF:59:9C:3B:DE:61:7A:C7:99:15:B4:55:2C:07:46:8F:9E:DE:F9:50 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0CC1 Signing time: Sun 02 Nov 2025 18:10:00 +0000 Manifest this update: Sun 02 Nov 2025 18:10:00 +0000 Manifest next update: Sun 09 Nov 2025 18:10:00 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: WbwRinL8hoJItwMXpd3vB4bctZEoWexQQSPk34gfqEQ=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Nov 2 18:10:00 2025 GMT Not After : Nov 9 18:10:00 2025 GMT Subject: CN=69079e78-d688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:1f:51:ec:a1:c6:90:a1:38:1b:cb:95:a0: c8:9f:3b:42:63:fe:93:49:d4:23:37:a6:d2:4f:78: 92:f9:5f:4c:1c:5f:00:e6:4f:3b:ae:85:43:db:b4: 46:ae:84:28:ed:ea:2a:b5:1e:a5:6c:26:ae:08:3f: cb:f5:7e:f8:91:d4:f4:f2:46:ff:bb:df:05:d5:51: 87:22:5d:b5:6b:2a:46:65:e8:ac:99:8d:5e:58:db: d3:bf:74:e0:58:4c:9f:84:7d:37:7a:d8:5a:a6:1a: 17:ab:d5:57:e0:19:06:ba:43:84:ee:47:62:5b:48: c5:f5:8a:4d:db:61:6e:52:80:44:4e:a0:d2:50:fd: 57:78:ae:37:8d:61:fc:7e:6b:4d:94:dc:bc:75:93: 6e:21:14:cf:04:98:ca:1c:a9:0c:bb:04:1b:70:31: a7:58:93:c3:6a:44:c3:28:f6:c3:43:14:d5:a0:bb: 99:48:f6:48:0b:ce:0b:b3:6f:90:69:c2:7f:68:36: 7b:a9:c9:e2:a5:d7:2c:8c:6c:df:de:37:59:cf:e3: f6:0d:d8:b8:a4:ca:33:3f:a0:7d:f0:1e:0a:d4:e0: 85:88:65:f9:a9:60:4a:37:3c:e4:d5:23:b9:89:28: 86:89:a4:be:18:ad:ce:68:bd:4c:aa:54:8e:61:aa: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:59:9C:3B:DE:61:7A:C7:99:15:B4:55:2C:07:46:8F:9E:DE:F9:50 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:67:2e:a9:c4:c8:9b:74:46:8c:33:57:77:9b:36:43:bf: 1d:76:83:9d:fa:41:37:09:62:4d:12:15:77:5b:56:51:eb:b6: aa:79:bb:d0:2e:cd:4b:4c:c3:4c:8b:e5:fa:0b:47:a9:c3:64: 29:54:a3:c5:64:93:9c:34:ed:7f:e2:6b:71:2d:48:ce:a5:f3: 15:74:76:fe:a3:90:cf:dd:ed:e2:ab:c0:7c:fe:3c:ef:8f:bd: b1:2f:82:1f:9e:7c:61:a1:10:12:a9:31:4c:1c:8f:19:1e:4e: bf:b2:2a:42:c9:e6:0c:a3:48:15:d6:72:52:12:53:63:98:b6: ff:3e:04:55:1f:c3:01:29:99:da:b1:d7:8b:5b:3a:7e:0b:d5: 3b:6a:fa:c7:b2:04:a8:eb:1e:14:2e:0e:3a:d5:5b:a4:ff:ff: e1:7d:b4:14:fc:ba:ae:a0:cd:a0:cb:4c:93:ce:12:83:58:58: a9:c8:c9:70:e8:c0:34:e8:a6:35:04:6a:08:36:6e:f3:f8:54: be:03:6a:f8:14:10:8c:47:ba:59:4f:05:7e:74:70:4b:fe:07: 3d:3e:33:b9:f3:05:fe:23:5a:f4:4d:ee:06:37:7e:4d:03:b9: ae:a2:e0:c0:1f:c4:d4:77:24:bb:96:1b:03:c3:f2:9a:28:2c: 58:f5:a1:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUxMTAyMTgxMDAwWhcNMjUxMTA5MTgxMDAwWjAYMRYwFAYD VQQDEw02OTA3OWU3OC1kNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8UfUeyhxpChOBvLlaDInztCY/6TSdQjN6bST3iS+V9MHF8A5k87roVD27RG roQo7eoqtR6lbCauCD/L9X74kdT08kb/u98F1VGHIl21aypGZeismY1eWNvTv3Tg WEyfhH03ethaphoXq9VX4BkGukOE7kdiW0jF9YpN22FuUoBETqDSUP1XeK43jWH8 fmtNlNy8dZNuIRTPBJjKHKkMuwQbcDGnWJPDakTDKPbDQxTVoLuZSPZIC84Ls2+Q acJ/aDZ7qcnipdcsjGzf3jdZz+P2Ddi4pMozP6B98B4K1OCFiGX5qWBKNzzk1SO5 iSiGiaS+GK3OaL1MqlSOYaq5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9ZnDve YXrHmRW0VSwHRo+e3vlQMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAewWcuqcTIm3RGjDNXd5s2Q78ddoOd+kE3CWJNEhV3W1ZR67aqebvQ Ls1LTMNMi+X6C0epw2QpVKPFZJOcNO1/4mtxLUjOpfMVdHb+o5DP3e3iq8B8/jzv j72xL4IfnnxhoRASqTFMHI8ZHk6/sipCyeYMo0gV1nJSElNjmLb/PgRVH8MBKZna sdeLWzp+C9U7avrHsgSo6x4ULg461Vuk///hfbQU/LquoM2gy0yTzhKDWFipyMlw 6MA06KY1BGoINm7z+FS+A2r4FBCMR7pZTwV+dHBL/gc9PjO58wX+I1r0Te4GN35N A7muouDAH8TUdyS7lhsDw/KaKCxY9aEn -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:12 2025 by rpki-client