$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: yjoX1dCZ3fCdD1txHH3mMEaaJyVLDWFtwmMSAxlWIlw= Subject key identifier: 0F:19:20:8F:16:A5:87:AD:9B:47:F6:3E:68:78:F2:AD:CC:6E:8D:30 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 028F Signing time: Mon 03 Nov 2025 01:32:01 +0000 Manifest this update: Mon 03 Nov 2025 01:32:01 +0000 Manifest next update: Mon 10 Nov 2025 01:32:01 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: dg3ZVWn0KvK/9VWfTmDeg80/DEQ7TIJo735vkVMvWQI=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Nov 3 01:32:01 2025 GMT Not After : Nov 10 01:32:01 2025 GMT Subject: CN=69080611-4413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:a8:ed:76:2c:8a:20:6a:05:e7:9e:ef:be: d8:ef:59:dc:d2:d8:e5:61:56:86:32:81:45:49:4b: d1:13:1f:7c:cc:02:c5:c2:24:f8:58:b4:27:db:6f: 9e:c1:e2:7e:14:bb:ed:81:24:91:9c:a0:d9:fa:6c: 83:db:73:c1:eb:ce:ef:f8:e2:75:8e:48:f5:85:45: ef:5d:fd:c5:77:ea:ec:99:3c:eb:6a:fc:90:c5:b8: 73:ce:d4:f2:08:34:bc:81:2a:2c:f9:3e:c6:2c:77: 51:ff:1c:a0:df:5e:e2:d0:74:d4:ec:5e:7c:de:8f: 2f:d5:3e:f7:51:22:0e:71:f1:92:98:9e:77:cb:fd: 0f:17:a9:3e:41:f6:f9:57:f6:b5:67:b9:f7:8a:5f: a9:90:61:f4:c8:9b:6f:37:ad:2d:17:8b:d2:cd:f0: 4d:74:3e:20:1f:b4:4f:11:42:c7:bd:42:ec:70:21: 9c:b7:81:97:df:2a:e8:a6:45:ef:57:c7:f5:5a:d1: fd:b7:06:27:38:75:6b:53:b8:16:e0:08:b3:4f:45: 73:cd:2e:c9:53:48:9b:a5:42:3a:fe:b4:ec:20:21: bc:3d:f4:d8:d8:8c:c4:2a:fc:39:dd:20:6d:6c:d9: f2:7a:62:c0:72:a5:57:c2:38:6c:ae:19:47:59:b0: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:19:20:8F:16:A5:87:AD:9B:47:F6:3E:68:78:F2:AD:CC:6E:8D:30 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:9d:a2:83:ed:d9:5c:16:32:8d:66:05:5b:2b:68:af:20:20: 4b:4c:9c:db:8c:73:18:ba:cd:7f:4c:91:a8:5d:f3:09:b3:6b: 3b:81:df:fb:58:87:f6:5a:99:2d:0f:13:8a:c2:89:1d:bc:15: 57:16:05:53:a7:9c:75:b6:c2:06:6c:b5:2b:df:d2:fe:1f:df: 1c:80:63:a5:00:86:08:35:fc:42:be:6e:da:1c:81:8c:ef:79: 1c:7f:24:13:b4:31:e7:0a:99:a5:1c:ea:66:c2:1d:32:99:33: c3:99:08:80:8d:99:ec:1e:a3:5f:cc:44:76:3b:7e:6a:3b:0c: 31:c3:cf:34:9a:bb:11:8a:6f:a8:52:af:70:07:0e:c6:47:5a: fd:8a:55:c9:a5:28:b8:dc:b0:09:20:16:4b:7d:a8:f6:26:4e: 26:2a:a1:28:4e:37:2e:12:a8:79:22:f5:9e:27:f1:ae:b2:b4: f3:a4:29:da:08:c6:20:d9:5a:fb:f7:54:46:8e:1a:19:17:19: b3:a0:92:4f:53:8c:96:45:43:e7:fb:3e:fb:7e:ff:36:e7:34: a7:fa:fd:dd:54:0f:bb:93:65:0e:a4:85:81:30:09:7a:11:36: c0:58:98:19:0d:32:19:58:b5:a4:63:86:4e:d5:59:93:39:33: 70:a8:cd:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUxMTAzMDEzMjAxWhcNMjUxMTEwMDEzMjAxWjAYMRYwFAYD VQQDEw02OTA4MDYxMS00NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6yo7XYsiiBqBeee777Y71nc0tjlYVaGMoFFSUvREx98zALFwiT4WLQn22+e weJ+FLvtgSSRnKDZ+myD23PB687v+OJ1jkj1hUXvXf3Fd+rsmTzravyQxbhzztTy CDS8gSos+T7GLHdR/xyg317i0HTU7F583o8v1T73USIOcfGSmJ53y/0PF6k+Qfb5 V/a1Z7n3il+pkGH0yJtvN60tF4vSzfBNdD4gH7RPEULHvULscCGct4GX3yropkXv V8f1WtH9twYnOHVrU7gW4AizT0VzzS7JU0ibpUI6/rTsICG8PfTY2IzEKvw53SBt bNnyemLAcqVXwjhsrhlHWbAf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8ZII8W pYetm0f2Pmh48q3Mbo0wMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChnaKD7dlcFjKNZgVbK2ivICBLTJzbjHMYus1/TJGoXfMJs2s7gd/7 WIf2WpktDxOKwokdvBVXFgVTp5x1tsIGbLUr39L+H98cgGOlAIYINfxCvm7aHIGM 73kcfyQTtDHnCpmlHOpmwh0ymTPDmQiAjZnsHqNfzER2O35qOwwxw880mrsRim+o Uq9wBw7GR1r9ilXJpSi43LAJIBZLfaj2Jk4mKqEoTjcuEqh5IvWeJ/GusrTzpCna CMYg2Vr791RGjhoZFxmzoJJPU4yWRUPn+z77fv825zSn+v3dVA+7k2UOpIWBMAl6 ETbAWJgZDTIZWLWkY4ZO1VmTOTNwqM22 -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:12 2025 by rpki-client