$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: LW6HBP1fcMTyzAmP/CbgsyK392s58Hv4jqOp6wAFMsM= Subject key identifier: 34:BF:00:2E:61:FA:FB:3B:1F:1E:30:59:12:CC:F7:00:27:4B:04:90 Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: 8D Signing time: Mon 03 Nov 2025 06:35:31 +0000 Manifest this update: Mon 03 Nov 2025 06:35:30 +0000 Manifest next update: Mon 10 Nov 2025 06:35:30 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: nuoBalICFI0LQw53SNmXF43Owkbv0H/cv6LKAYPfqC0=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 8xExEFAiYA/8lFGHuqLYzWCAWTLUpOx+eEmK9KK5c0M=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: 2GRtPqItvUjTSj4+s6HmnNB8Os7tS39gLre6A6tNJzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Nov 3 06:35:30 2025 GMT Not After : Nov 10 06:35:30 2025 GMT Subject: CN=69084d33-56cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:f5:3f:f3:31:d6:fd:49:c0:01:d1:63:6f: e5:5f:68:79:b6:6f:42:0b:38:ea:01:98:b1:c2:22: ba:09:de:c5:d2:9e:57:c7:b9:8b:72:28:1b:13:a6: 61:46:1a:22:69:a0:05:9e:09:85:23:a0:d0:f6:f3: 8e:91:df:c7:20:aa:98:7b:92:00:c3:32:ab:4a:3a: 46:b9:3e:7b:06:04:f4:e9:9f:05:f8:64:ee:18:27: b9:4b:9e:80:dd:f8:ab:83:2c:21:ae:cf:06:2a:ef: 7f:f5:50:47:e0:8f:69:5c:48:4b:9b:1b:a7:8e:c3: 95:72:60:02:25:e9:50:d9:d9:df:b9:8e:57:44:5c: 56:92:1c:93:ed:dd:5d:81:2d:f9:61:2d:29:7a:8f: ea:c5:6c:1e:cc:2f:1c:1d:56:34:1b:c7:de:17:62: 7f:ee:d6:d1:f8:e0:3f:e1:ba:d1:f0:e1:54:f3:e7: 64:0c:36:dd:e8:15:3b:5e:67:19:81:17:06:8c:85: 89:57:8f:47:13:1b:a0:4a:4c:b3:8a:d6:ab:f0:b8: 10:77:b1:ab:b7:1d:2e:7c:42:e2:92:71:76:1e:45: 93:0a:ab:8a:48:76:1d:f7:e0:c6:f1:0d:14:7a:93: ff:3d:b4:5d:4c:71:f8:ea:4f:87:4b:29:7a:f0:4a: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BF:00:2E:61:FA:FB:3B:1F:1E:30:59:12:CC:F7:00:27:4B:04:90 X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:42:c3:be:13:a1:86:9e:d9:76:c0:0c:b8:ca:0b:93:a8:16: 71:4b:26:96:33:dc:9a:78:00:fa:04:24:b0:37:fc:05:6c:04: 7c:74:41:82:67:db:d2:53:c0:ac:1e:cc:c0:2c:9f:bf:ae:f1: 5a:ac:38:58:32:61:9b:07:da:49:c4:e1:41:d0:1d:83:ae:1f: 43:d5:79:d7:3d:b0:29:00:16:5e:01:a6:6f:c8:20:a3:2e:1a: e2:56:4e:69:87:12:34:3e:6a:35:eb:71:e4:07:1a:30:9e:0a: 12:56:1e:a9:1a:b3:08:88:07:44:11:6e:e1:49:1a:32:94:dd: 5f:34:4c:9b:06:74:20:3b:68:0b:31:14:f0:09:3d:e7:5a:ce: 8b:9f:cd:1b:03:32:28:37:87:de:e3:b7:7c:33:80:93:5f:07: c1:ec:b5:5c:36:96:13:bd:75:13:c7:37:61:be:f8:4d:7b:d6: 1b:4c:94:92:78:f1:18:c2:14:c5:97:f2:b1:f0:ff:d4:90:b4: 90:46:8c:03:82:48:81:db:a9:16:4b:88:fb:7e:05:45:b7:56: 04:cf:a0:04:48:51:d1:48:d8:d6:28:5e:7a:50:e5:04:d8:4f: 6f:1a:c9:f4:57:83:27:f9:12:40:51:64:b0:f3:3b:df:95:06: 80:83:ab:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjUxMTAzMDYzNTMwWhcNMjUxMTEwMDYzNTMwWjAYMRYwFAYD VQQDEw02OTA4NGQzMy01NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5P1P/Mx1v1JwAHRY2/lX2h5tm9CCzjqAZixwiK6Cd7F0p5Xx7mLcigbE6Zh RhoiaaAFngmFI6DQ9vOOkd/HIKqYe5IAwzKrSjpGuT57BgT06Z8F+GTuGCe5S56A 3firgywhrs8GKu9/9VBH4I9pXEhLmxunjsOVcmACJelQ2dnfuY5XRFxWkhyT7d1d gS35YS0peo/qxWwezC8cHVY0G8feF2J/7tbR+OA/4brR8OFU8+dkDDbd6BU7XmcZ gRcGjIWJV49HExugSkyzitar8LgQd7Grtx0ufELiknF2HkWTCquKSHYd9+DG8Q0U epP/PbRdTHH46k+HSyl68EoG9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS/AC5h +vs7Hx4wWRLM9wAnSwSQMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4 M19tek9VMHpWWFpvSVlvVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6QsO+E6GGntl2wAy4yguTqBZxSyaWM9yaeAD6BCSwN/wFbAR8dEGC Z9vSU8CsHszALJ+/rvFarDhYMmGbB9pJxOFB0B2Drh9D1XnXPbApABZeAaZvyCCj LhriVk5phxI0Pmo163HkBxowngoSVh6pGrMIiAdEEW7hSRoylN1fNEybBnQgO2gL MRTwCT3nWs6Ln80bAzIoN4fe47d8M4CTXwfB7LVcNpYTvXUTxzdhvvhNe9YbTJSS ePEYwhTFl/Kx8P/UkLSQRowDgkiB26kWS4j7fgVFt1YEz6AESFHRSNjWKF56UOUE 2E9vGsn0V4Mn+RJAUWSw8zvflQaAg6v9 -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:08 2025 by rpki-client