$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft File: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json) Hash identifier: wCwESDW6FL11vMy359kQPABdSlRdMcsSLwl1Bh2sO2g= Subject key identifier: A3:D2:BC:E4:40:76:DB:C0:5E:8A:E6:10:9C:CF:52:6D:5B:97:3C:2D Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft Manifest number: 0477 Signing time: Mon 03 Nov 2025 00:08:38 +0000 Manifest this update: Mon 03 Nov 2025 00:08:37 +0000 Manifest next update: Mon 10 Nov 2025 00:08:37 +0000 Files and hashes: 1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: GYLh/+21lEYZ/Cu0nVfbtgXaMTd8pXJr9DeiM/wVUaM=) 2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: qN4SUiNR7v9xxP/o2Fq/7o1FjEvOjysHOQYMeRV70PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Validity Not Before: Nov 3 00:08:37 2025 GMT Not After : Nov 10 00:08:37 2025 GMT Subject: CN=6907f286-0d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:ff:89:7d:63:e7:d6:ef:8e:db:92:38:f6: 13:57:16:e4:62:0d:85:e8:87:af:f9:a4:ed:aa:c3: ca:f2:96:92:c1:5a:c6:1c:e0:66:b3:67:cd:88:23: 6a:c5:9c:ab:f8:17:f1:89:70:8c:5d:59:66:16:e6: 5b:51:2b:fa:8c:8d:94:c8:ba:9f:c9:50:f1:46:86: 0f:af:b3:df:e3:58:9a:26:81:34:0e:cb:f8:e9:f5: 44:91:31:68:c9:6a:d4:48:8f:2b:f7:ef:d4:15:25: ee:85:e4:41:c5:97:59:d5:cd:65:9d:85:89:e2:d7: 75:e4:a4:94:95:b1:df:a3:cc:bb:12:49:b5:d7:4d: aa:c9:2f:23:d5:54:5a:f5:e2:39:bc:13:04:10:2d: 69:9d:3e:d2:de:35:28:c2:75:c2:43:e8:82:20:84: ba:cc:e9:f1:44:7a:ef:c4:06:43:e5:23:ea:80:52: a9:51:ef:71:3b:0e:98:f6:a8:29:53:84:13:71:aa: 99:c0:6b:bc:8a:49:2a:72:92:96:8e:f8:ec:d4:6e: 65:c9:88:64:db:34:fc:31:cf:f6:4b:6d:56:b2:a6: 9a:41:7e:6e:71:6f:74:06:ae:20:f5:bc:06:eb:27: 37:4a:73:98:b6:e5:9b:79:4d:90:dd:bd:c7:cc:17: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D2:BC:E4:40:76:DB:C0:5E:8A:E6:10:9C:CF:52:6D:5B:97:3C:2D X509v3 Authority Key Identifier: keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:78:b1:5d:0d:7f:18:59:eb:cc:c7:4d:a5:ed:af:16:6d:2d: bc:90:61:09:02:65:e0:be:10:2a:1a:9c:9a:b4:7a:d9:37:23: 96:c2:33:ba:47:9b:fc:c4:e6:9b:50:a2:26:7a:8c:31:dc:32: 70:5d:65:a9:db:5e:cb:c5:87:e0:f8:ba:e5:65:37:a0:b4:16: 96:21:1a:17:2b:7d:0e:a9:44:fb:7b:92:8b:52:23:89:0f:4d: e1:5c:21:c0:a5:81:03:ef:15:96:c5:78:0f:fd:00:7c:de:32: c1:34:e8:69:bf:a7:a6:e6:2b:f6:36:15:bc:95:d0:27:ea:f1: 57:b6:86:f9:a9:53:35:dc:e9:33:6f:ef:43:f6:49:77:c7:9a: 54:82:2c:97:50:eb:a0:42:e4:13:90:80:f6:e9:fe:2f:55:6f: f0:a0:26:60:33:d8:e3:65:f0:07:13:e1:a2:a4:f1:72:15:b2: 08:45:2c:83:ff:2c:a5:fc:02:16:7f:31:31:a7:37:5f:c6:69: 04:98:4e:c4:1f:ad:62:5a:3b:7d:8c:3c:15:5f:5e:25:39:8d: 99:9d:5c:35:f3:f3:0b:a5:ed:9f:a0:cd:6b:6b:8d:32:3d:c0: e1:b0:1e:1f:40:52:78:5b:10:d7:7e:24:37:8c:2c:54:f1:67: ae:6d:53:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0QkUxMTAvBgNVBAUTKENENDhGRUJGMjZGRTI0OUUwNTRCRkQ0NEFFOTRGQzU4 QzBFOEUwQTcwHhcNMjUxMTAzMDAwODM3WhcNMjUxMTEwMDAwODM3WjAYMRYwFAYD VQQDEw02OTA3ZjI4Ni0wZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquX/iX1j59bvjtuSOPYTVxbkYg2F6Iev+aTtqsPK8paSwVrGHOBms2fNiCNq xZyr+BfxiXCMXVlmFuZbUSv6jI2UyLqfyVDxRoYPr7Pf41iaJoE0Dsv46fVEkTFo yWrUSI8r9+/UFSXuheRBxZdZ1c1lnYWJ4td15KSUlbHfo8y7Ekm1102qyS8j1VRa 9eI5vBMEEC1pnT7S3jUownXCQ+iCIIS6zOnxRHrvxAZD5SPqgFKpUe9xOw6Y9qgp U4QTcaqZwGu8ikkqcpKWjvjs1G5lyYhk2zT8Mc/2S21WsqaaQX5ucW90Bq4g9bwG 6yc3SnOYtuWbeU2Q3b3HzBdLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPSvORA dtvAXormEJzPUm1blzwtMB8GA1UdIwQYMBaAFM1I/r8m/iSeBUv9RK6U/FjA6OCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDRCRS82QThGNzEzNjZE NEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpKNEZTXzFFcnBUOFdNRG80 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVai12eWItSko0RlNfMUVycFQ4V01EbzRLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDRCRS82QThGNzEzNjZENEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpK NEZTXzFFcnBUOFdNRG80S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIeLFdDX8YWevMx02l7a8WbS28kGEJAmXgvhAqGpyatHrZNyOWwjO6 R5v8xOabUKImeowx3DJwXWWp217LxYfg+LrlZTegtBaWIRoXK30OqUT7e5KLUiOJ D03hXCHApYED7xWWxXgP/QB83jLBNOhpv6em5iv2NhW8ldAn6vFXtob5qVM13Okz b+9D9kl3x5pUgiyXUOugQuQTkID26f4vVW/woCZgM9jjZfAHE+GipPFyFbIIRSyD /yyl/AIWfzExpzdfxmkEmE7EH61iWjt9jDwVX14lOY2ZnVw18/MLpe2foM1ra40y PcDhsB4fQFJ4WxDXfiQ3jCxU8WeubVPJ -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:23 2025 by rpki-client