$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: FzFUbgj81Yy8IpsdL2J6fU15eIWUU1wxEYX/vFG7b1s= Subject key identifier: A0:AA:67:FD:96:60:8F:78:88:BF:64:6B:5F:1C:07:21:80:E7:04:BE Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 0232 Signing time: Mon 03 Nov 2025 01:51:31 +0000 Manifest this update: Mon 03 Nov 2025 01:51:30 +0000 Manifest next update: Mon 10 Nov 2025 01:51:30 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: sWmzWk2KEYOGhpEor3XyQ5KcAKhSQ6eesqD645rk904=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: X2hAsppM/jRjKRsLmyjCzm5Ax50DSNDAipyDKhugtZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893, serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Nov 3 01:51:30 2025 GMT Not After : Nov 10 01:51:30 2025 GMT Subject: CN=69080aa3-ca87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:c1:13:eb:cd:47:59:d1:6a:62:38:d2:59: 2c:83:e6:29:63:df:f2:d0:ae:01:a5:0c:d9:18:a1: cc:1a:6e:39:30:d8:b3:70:0a:fe:43:c5:5c:ca:29: bf:4f:47:fc:81:0c:b9:62:7e:dc:05:95:ab:33:bc: 16:df:de:91:0c:a3:03:f6:a4:04:26:bc:08:27:52: 3e:2a:c0:9d:86:3f:0e:fe:d0:08:41:e1:44:3a:8f: 93:35:d3:ce:a1:49:72:6e:48:22:e4:f9:b1:84:e0: 7e:35:22:d9:26:77:bc:1e:5c:58:e0:68:5f:ae:2f: ba:6b:94:3a:b7:10:cb:c9:f8:0b:1f:08:a9:8c:98: 87:b0:79:c9:68:15:a4:1c:ad:50:76:c6:15:20:d5: ea:21:91:f6:d1:c3:f3:03:64:2c:d0:51:1a:27:84: 0e:c1:a2:c1:6a:0d:3b:15:45:53:50:9a:0e:47:0b: a3:6f:45:21:6e:33:be:57:55:d0:92:ae:a5:68:0b: 39:a7:c6:a4:67:f6:09:ae:ed:e4:f8:f1:39:f2:15: 18:be:4a:e7:fe:ea:7c:c4:38:03:99:42:b6:07:30: 6b:d6:aa:a0:95:7a:77:f2:ab:00:78:ad:34:54:d1: bf:13:9d:01:e1:7a:26:47:b0:7b:ee:64:a6:0f:d7: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AA:67:FD:96:60:8F:78:88:BF:64:6B:5F:1C:07:21:80:E7:04:BE X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0d:40:e4:1f:29:92:91:7e:dc:be:6b:46:a8:3f:aa:7a:85: a7:c4:d4:32:5a:12:10:e1:a1:f2:20:42:b1:dd:55:47:63:0e: 8a:2d:f0:fb:d6:bd:db:55:d5:00:39:9e:2b:d4:7a:63:df:46: ac:72:84:4c:0f:60:12:25:d6:85:74:6e:85:c7:45:3c:e7:88: 26:b4:91:f3:e4:10:cf:14:e9:ec:76:4f:d6:ad:f1:f7:7f:6a: 5b:76:b8:14:f2:61:92:95:ab:74:e7:aa:c8:72:d0:54:69:06: 65:b8:d9:05:d6:69:08:82:4b:f8:6f:2b:2a:ba:07:0e:c6:61: 33:53:70:c4:9a:03:e4:71:e1:c2:6c:e7:75:f0:17:eb:4c:48: e1:a1:38:2e:bc:5b:f0:ba:79:2a:9a:6a:d3:0f:39:ed:b7:e0: f3:bc:03:c4:4b:01:64:05:a4:07:1f:17:05:0d:8d:b4:38:03: ee:fe:b7:5f:27:52:44:fb:1d:6c:ac:10:e9:21:ea:7e:2d:70: 77:22:89:1f:89:1e:2b:f3:31:00:81:3d:c3:24:58:b7:ea:22: a2:ff:ed:e1:d7:87:93:33:19:f1:59:f0:8c:c4:f9:8a:61:e3: bd:e2:f9:f5:e1:74:31:a1:d0:6e:68:16:fc:4e:15:bc:bc:32: 37:8e:8f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjUxMTAzMDE1MTMwWhcNMjUxMTEwMDE1MTMwWjAYMRYwFAYD VQQDEw02OTA4MGFhMy1jYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk3BE+vNR1nRamI40lksg+YpY9/y0K4BpQzZGKHMGm45MNizcAr+Q8Vcyim/ T0f8gQy5Yn7cBZWrM7wW396RDKMD9qQEJrwIJ1I+KsCdhj8O/tAIQeFEOo+TNdPO oUlybkgi5PmxhOB+NSLZJne8HlxY4Ghfri+6a5Q6txDLyfgLHwipjJiHsHnJaBWk HK1QdsYVINXqIZH20cPzA2Qs0FEaJ4QOwaLBag07FUVTUJoORwujb0UhbjO+V1XQ kq6laAs5p8akZ/YJru3k+PE58hUYvkrn/up8xDgDmUK2BzBr1qqglXp38qsAeK00 VNG/E50B4XomR7B77mSmD9eMtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCqZ/2W YI94iL9ka18cByGA5wS+MB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9DUDkHymSkX7cvmtGqD+qeoWnxNQyWhIQ4aHyIEKx3VVHYw6KLfD7 1r3bVdUAOZ4r1Hpj30ascoRMD2ASJdaFdG6Fx0U854gmtJHz5BDPFOnsdk/WrfH3 f2pbdrgU8mGSlat056rIctBUaQZluNkF1mkIgkv4bysqugcOxmEzU3DEmgPkceHC bOd18BfrTEjhoTguvFvwunkqmmrTDzntt+DzvAPESwFkBaQHHxcFDY20OAPu/rdf J1JE+x1srBDpIep+LXB3IokfiR4r8zEAgT3DJFi36iKi/+3h14eTMxnxWfCMxPmK YeO94vn14XQxodBuaBb8ThW8vDI3jo9n -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:12 2025 by rpki-client