$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: KliKwwkUnsBOTmk+lej3Ouv4lT5X8luQTadY9dM+SAw= Subject key identifier: CD:5A:BD:34:5D:CE:D4:13:08:FC:2A:57:32:30:81:5E:34:02:20:65 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 6B Signing time: Mon 03 Nov 2025 06:57:23 +0000 Manifest this update: Mon 03 Nov 2025 06:57:22 +0000 Manifest next update: Mon 10 Nov 2025 06:57:22 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: UkqvAWd/54mjx8s0UaUNPD6bpOioc9XPG4BDW6o8QSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Nov 3 06:57:22 2025 GMT Not After : Nov 10 06:57:22 2025 GMT Subject: CN=69085253-61bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:65:27:8d:2e:dc:32:52:9a:b7:76:d9:b8: b4:d0:5b:bb:21:50:7e:88:27:c8:0d:c5:c1:b2:f6: 25:1f:43:9a:cd:08:fd:0d:6c:0c:d7:f0:95:0e:92: 3c:4b:23:01:41:4d:83:21:73:5b:71:23:c6:24:9b: 5a:b9:a7:77:69:4b:e2:1c:8e:d2:ed:5f:17:29:05: 8b:47:44:18:d1:1e:fd:5e:8f:44:8b:4d:88:91:ca: cf:d4:95:3d:c4:b1:a3:26:29:ce:48:7c:76:3f:9b: f8:10:20:b1:91:86:0e:22:e2:9a:47:23:67:e1:04: ec:6b:59:4c:b3:69:45:0a:fe:6e:a7:ac:80:74:89: 66:6b:d4:ba:06:e8:c2:d3:06:14:d8:29:cf:39:fe: 6a:c9:77:80:6c:6c:ba:af:76:6c:5a:bd:26:56:a1: 18:85:75:0c:cd:15:97:1f:0a:44:8e:e8:48:8e:32: 3b:63:5f:e9:62:76:50:29:3e:43:67:23:0c:6a:f5: fe:0d:be:ee:4b:61:27:4d:ae:c3:b1:02:fe:3d:28: 25:9a:7f:9a:54:b1:78:72:a6:57:02:33:01:a5:d0: 60:8a:b7:58:c6:38:e1:7d:ec:4f:7e:1f:84:34:78: 85:d4:a8:3a:ba:d2:88:d9:80:f0:17:e4:fa:2b:ef: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:BD:34:5D:CE:D4:13:08:FC:2A:57:32:30:81:5E:34:02:20:65 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e0:e1:d6:92:95:be:80:3d:0f:2c:bf:40:6a:4c:5a:12:f9: d3:de:2e:f3:98:aa:a6:3c:8a:04:ce:17:ad:c0:52:46:a2:6c: 5f:cf:83:81:a9:50:6f:77:e7:c0:0b:16:34:63:7d:02:56:c6: 89:32:30:59:30:9d:17:87:a6:96:80:7e:94:f5:8f:2a:21:67: b4:a8:41:0f:5e:92:88:6d:53:93:ad:d5:30:fc:07:92:04:70: 0d:dc:ac:26:ac:ff:7f:7d:25:04:f6:5f:c7:1a:57:fc:bb:b7: 38:2c:02:27:eb:a8:65:56:8a:a4:b4:da:00:d7:8b:c1:04:e5: 0f:e3:0a:fe:3e:a5:75:1e:c1:dc:c4:65:42:ff:4d:a4:15:3c: 65:8a:a8:17:64:a9:20:12:fb:d9:4e:3d:b7:f5:df:9a:6b:6a: b5:67:99:c5:a3:aa:4d:79:ae:1a:b8:ef:46:7d:a6:3f:d8:0c: f3:35:58:0a:96:e9:17:76:6f:01:a1:bd:80:21:96:70:e7:93: e5:f2:cf:f2:43:a9:d2:d4:c1:fa:a4:be:3f:59:13:f5:5a:9f: 1d:46:7a:35:16:47:c2:9a:30:63:11:b4:0e:59:17:94:42:4f: 89:b8:25:e3:3b:df:36:eb:90:3a:3a:6c:dc:3d:9e:97:bb:aa: 6b:58:d4:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTExMDMwNjU3MjJaFw0yNTExMTAwNjU3MjJaMBgxFjAUBgNV BAMTDTY5MDg1MjUzLTYxYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPRWUnjS7cMlKat3bZuLTQW7shUH6IJ8gNxcGy9iUfQ5rNCP0NbAzX8JUOkjxL IwFBTYMhc1txI8Ykm1q5p3dpS+IcjtLtXxcpBYtHRBjRHv1ej0SLTYiRys/UlT3E saMmKc5IfHY/m/gQILGRhg4i4ppHI2fhBOxrWUyzaUUK/m6nrIB0iWZr1LoG6MLT BhTYKc85/mrJd4BsbLqvdmxavSZWoRiFdQzNFZcfCkSO6EiOMjtjX+lidlApPkNn Iwxq9f4Nvu5LYSdNrsOxAv49KCWaf5pUsXhyplcCMwGl0GCKt1jGOOF97E9+H4Q0 eIXUqDq60ojZgPAX5Por78l5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzVq9NF3O 1BMI/CpXMjCBXjQCIGUwHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHg4daSlb6APQ8sv0BqTFoS+dPeLvOYqqY8igTOF63AUkaibF/Pg4Gp UG9358ALFjRjfQJWxokyMFkwnReHppaAfpT1jyohZ7SoQQ9ekohtU5Ot1TD8B5IE cA3crCas/399JQT2X8caV/y7tzgsAifrqGVWiqS02gDXi8EE5Q/jCv4+pXUewdzE ZUL/TaQVPGWKqBdkqSAS+9lOPbf135prarVnmcWjqk15rhq470Z9pj/YDPM1WAqW 6Rd2bwGhvYAhlnDnk+Xyz/JDqdLUwfqkvj9ZE/Vanx1GejUWR8KaMGMRtA5ZF5RC T4m4JeM73zbrkDo6bNw9npe7qmtY1Mg= -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:06 2025 by rpki-client