$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: Bjdu/apbS6QPDSaSJcMftHyVc+4WacDX1fvmoKqdb0Y= Subject key identifier: CB:E2:8A:85:CA:21:1E:0E:E5:21:1C:01:17:A1:17:E6:E3:84:F9:DE Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 02CF Signing time: Mon 03 Nov 2025 01:19:25 +0000 Manifest this update: Mon 03 Nov 2025 01:19:25 +0000 Manifest next update: Mon 10 Nov 2025 01:19:25 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: 0nHijt82yFNJYpx6mW9MSIw7Y4tD9xav9fNAFm8w29g=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: nnR9EPSyG4Kq21NgPkJ1y+q1NVNPyw5fBJX9VgzqqTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Nov 3 01:19:25 2025 GMT Not After : Nov 10 01:19:25 2025 GMT Subject: CN=6908031d-6e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:a6:6b:8c:89:d7:38:d8:45:80:9d:8f:cc: 99:4e:cd:c3:8b:25:bf:14:a2:7b:2d:d7:88:af:12: 19:6c:7f:3a:bf:47:98:30:8d:95:7a:77:75:b1:90: 82:13:95:08:2e:ab:70:78:fb:9f:e8:dc:9d:58:8f: a7:7a:ba:ae:52:52:3f:1d:7f:cf:71:2b:ca:f0:4a: 76:f5:eb:c8:df:bd:de:5a:80:3d:0a:5b:94:fd:b1: 21:d7:1d:45:04:40:6c:5d:38:7b:2a:16:cb:b6:a6: c0:64:81:e7:33:0c:77:f0:ac:0a:ab:d2:3f:2c:81: f5:f2:1c:6e:52:92:16:f8:45:a8:2d:fe:e0:0c:52: ad:bb:fc:da:53:4f:59:31:9e:7e:ba:21:7c:3a:01: dd:f4:72:87:1f:38:6a:3f:cf:10:d4:ff:7a:ed:e7: f3:6f:37:cc:c5:75:52:6d:c2:63:13:bb:96:87:16: 2f:1b:76:78:ca:51:93:fd:fd:6d:ac:73:06:88:1c: a1:aa:c5:79:65:10:11:0c:a8:7d:65:9b:e9:bc:7c: f4:4d:21:0c:31:a0:08:71:fd:8f:7a:b8:25:c9:e9: 7a:bd:0c:15:ce:04:c4:b0:67:d2:7f:d3:72:bf:9b: ce:af:6c:78:f4:b7:3d:24:ef:bd:a2:d1:db:a5:86: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:8A:85:CA:21:1E:0E:E5:21:1C:01:17:A1:17:E6:E3:84:F9:DE X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4f:85:fc:4e:02:3e:78:26:1b:28:99:4a:ac:b8:29:a1:a1: 53:4f:19:d4:dc:e2:de:25:36:fa:93:9a:d8:43:c6:67:53:8b: 0d:e6:d9:b0:24:65:3d:dd:d0:f1:c5:d2:83:41:57:ab:df:67: 46:d0:4c:94:bd:36:4e:01:1c:97:c0:ef:ca:93:9e:b9:76:32: d8:72:86:91:9f:0e:46:e1:14:67:c2:e5:9b:aa:f4:8c:54:41: e6:60:a8:46:4a:67:ad:bb:15:81:f7:c0:82:96:88:39:43:db: 8f:67:a6:c1:cc:c4:07:e5:73:84:9a:c7:f0:06:dd:d7:29:a6: 44:fe:87:13:a6:d2:9c:c4:22:1d:96:4c:9f:25:b1:a1:45:98: 49:4b:03:e6:e0:4b:4e:0f:e5:4d:b2:20:e0:86:38:56:ad:1b: 78:d7:93:d1:85:db:1d:d7:28:16:0b:7a:88:88:b1:8f:b0:3a: 4f:f6:bc:89:27:97:72:8b:ba:72:be:a5:a9:98:e5:6f:43:83: 31:f4:65:86:d9:a5:2d:86:ee:70:5c:d7:3b:fe:14:4b:fc:ff: 79:c8:35:b1:03:5e:08:c8:c7:29:9c:76:51:dd:a5:e4:55:92: 42:93:40:a0:dd:d8:6f:b8:93:fa:f9:b3:5e:98:00:fe:13:12: b8:d3:01:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUxMTAzMDExOTI1WhcNMjUxMTEwMDExOTI1WjAYMRYwFAYD VQQDEw02OTA4MDMxZC02ZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLKma4yJ1zjYRYCdj8yZTs3DiyW/FKJ7LdeIrxIZbH86v0eYMI2Vend1sZCC E5UILqtwePuf6NydWI+nerquUlI/HX/PcSvK8Ep29evI373eWoA9CluU/bEh1x1F BEBsXTh7KhbLtqbAZIHnMwx38KwKq9I/LIH18hxuUpIW+EWoLf7gDFKtu/zaU09Z MZ5+uiF8OgHd9HKHHzhqP88Q1P967efzbzfMxXVSbcJjE7uWhxYvG3Z4ylGT/f1t rHMGiByhqsV5ZRARDKh9ZZvpvHz0TSEMMaAIcf2Perglyel6vQwVzgTEsGfSf9Ny v5vOr2x49Lc9JO+9otHbpYarbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMviioXK IR4O5SEcARehF+bjhPneMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuT4X8TgI+eCYbKJlKrLgpoaFTTxnU3OLeJTb6k5rYQ8ZnU4sN5tmw JGU93dDxxdKDQVer32dG0EyUvTZOARyXwO/Kk565djLYcoaRnw5G4RRnwuWbqvSM VEHmYKhGSmetuxWB98CClog5Q9uPZ6bBzMQH5XOEmsfwBt3XKaZE/ocTptKcxCId lkyfJbGhRZhJSwPm4EtOD+VNsiDghjhWrRt415PRhdsd1ygWC3qIiLGPsDpP9ryJ J5dyi7pyvqWpmOVvQ4Mx9GWG2aUthu5wXNc7/hRL/P95yDWxA14IyMcpnHZR3aXk VZJCk0Cg3dhvuJP6+bNemAD+ExK40wHr -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:02 2025 by rpki-client