$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: KRNnMixJbxAlcipiQKWwrUs9/dlGDbLg3mvq4DZyekI= Subject key identifier: 6A:06:91:3A:68:20:24:09:EE:B8:36:24:F5:27:A0:00:B6:08:C5:F2 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 086D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 06F2 Signing time: Tue 04 Nov 2025 23:03:15 +0000 Manifest this update: Tue 04 Nov 2025 23:03:15 +0000 Manifest next update: Tue 11 Nov 2025 23:03:15 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: jyBzDqzh/dXVJFO7Iz/GB/thQr/6p8t4v1y4hSP4tBQ=) 2: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM=) 3: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: o6TrwidKO00UNfXuzel+2emRHvmY5gCcZTOKQTqPke8=) 4: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: 5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=) 5: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: S9Kc7cmkHRN82YJ6h3SdiY4GOfSfzom8HWLIg8mqYfQ=) 6: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: c4tmYlMY5sWJ0DujxCTdR6nU4mhqfELo+RFUBYJRcIg=) 7: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: nRgNkr+gTw6R30CcNPn7HUQ4QG5gUabxLibffFcQE4k=) 8: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE=) 9: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: eba0IhMDMP+niOYOsrZEeGYf5cPaLzt3Lu9IJlIWIVg=) 10: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68=) 11: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: teH8eTJSZtTBOVkhDhcUYpV1hXlakeK+9NJ0LKbAUag=) 12: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: x7DJdFRsn2uvip24+58sYGOPQUkDpJjhzraS1Xt2eqo=) 13: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc=) 14: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8=) 15: 2C928134155711F099BFE331C4F9AE02.roa (hash: sMLrfF2AkKSL1KelOYTfplFvI+YPoVFza1qb4eVxf6o=) 16: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: 5Mvy92G8mRS3CTQLDDmTnthjwJqei5x2L9QEw+wkDv8=) 17: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 5ANX4i+xHd73YVIL+MJht9tnmiSuKsVd8JB7ZR2nfCI=) 18: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: ZPy83X+llb5TX5qPVKAkiJ8agApzyoWgfAKhXe3bcmU=) 19: 72DF94424A8611F08884C659C4F9AE02.roa (hash: 6Q5hxC3u92cNVFOzzPPEq/U2hdgGHeB2kCxpkP2ihE0=) 20: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: tNL62qhE8vecNFJ8x8ufDRWVMLKpuaHL77dnrKR14ps=) 21: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: 9NhxgmeB9d3FvwHBDgCqKyQC9U/lReRo4/VWdoQQNcM=) 22: 757D79F84A8611F08884C659C4F9AE02.roa (hash: F1EBgEiUdYzV2e+yWXrqhHhe+wUROhuQQWSgIujXFuM=) 23: 7744CE40691111F0B8610780C4F9AE02.roa (hash: Q0fWC3bPxRyRi5oWpOG3gRLSwXCGSgzCMGGkM6gBWnQ=) 24: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 1cmDcY6sz+LunwCiA396UQFs5SUmwLc8yoDOnxtHNM8=) 25: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo=) 26: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: A3YSpdpMsFqyTGlHs/WDWrhzGpf2svgvrhesgE6eJ8g=) 27: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: a7vmKZvCu8S/erkjZsq11zTLNIuhXy/S24utD8S9yHk=) 28: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: Xm6BtJp1Xv982dNe+cH86+8Hl8aLCGaqau9syDHGkl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Nov 4 23:03:15 2025 GMT Not After : Nov 11 23:03:15 2025 GMT Subject: CN=690a8633-69df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:32:4a:b5:b6:00:ca:57:fa:4f:60:af:00: f4:79:0b:c1:1d:3f:eb:f4:f7:da:3c:2e:d5:a0:1c: 3e:94:1e:2f:f4:75:d9:5f:c9:4e:4c:c0:ba:07:45: cc:5a:75:6f:61:fa:a5:f5:05:db:3c:8b:09:93:b9: 41:0f:d2:b0:d0:3a:d0:f3:2e:e7:29:82:e8:8c:d4: 7f:c1:10:8f:89:4b:db:da:f0:ac:67:99:fc:3a:d6: d4:b0:f5:b7:75:0d:fc:c4:d5:f4:82:7e:b6:4b:7d: 08:84:50:b4:65:3e:cf:e3:c8:e8:eb:8c:56:33:2c: 95:da:6e:db:00:ea:e4:62:1f:65:6a:40:79:30:7f: 8d:49:c6:4a:4d:f4:76:c6:70:11:c1:cc:32:c2:d9: 40:97:7e:a7:08:0a:51:cc:e9:b8:b4:62:b7:7f:4a: 92:2a:83:d1:23:c1:58:3c:e6:f6:28:be:e1:b2:fb: a3:4c:93:8f:ba:8d:67:a3:f6:a7:ba:d1:5e:59:1b: 9e:34:ab:6a:52:81:27:a3:04:fd:43:76:7c:89:31: 7b:09:eb:79:be:74:bc:25:6e:1c:50:e2:36:e4:6e: 2a:3f:f3:2f:f5:22:51:a6:e4:44:cf:b3:49:db:80: 6c:34:26:bf:0d:30:9b:51:f0:a3:0b:07:38:7d:81: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:06:91:3A:68:20:24:09:EE:B8:36:24:F5:27:A0:00:B6:08:C5:F2 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:32:ec:8b:c7:0c:0c:22:52:36:df:b2:aa:3f:57:58:3a:de: 79:30:57:bd:2d:a6:12:62:37:a3:5e:15:6d:8a:ba:f5:9d:b2: 89:e4:54:37:9c:af:5c:52:48:38:95:57:97:de:60:39:50:9f: 7e:8c:71:26:ed:38:37:63:ab:07:61:45:b3:a9:1e:fc:e9:fc: 01:8d:23:1b:69:f7:8f:1e:f3:aa:a8:e2:00:9d:02:93:0d:7a: 50:d7:de:c1:f5:79:fc:8a:e4:a9:22:b8:36:b7:a8:79:e5:51: fc:51:84:87:f1:03:8e:e3:dd:ea:c7:ca:bd:5c:39:d7:f5:27: fd:43:2b:72:91:5e:ac:94:74:bd:6c:10:c2:ac:b5:57:64:87: 8c:72:a3:75:77:68:0a:63:6c:c3:3d:03:51:8a:08:8a:2c:55: 90:66:a6:20:43:e8:78:2e:04:c6:69:37:23:58:9d:4d:64:c1: e8:ed:26:16:2e:e5:82:18:a5:6d:9d:31:56:66:40:99:d5:5e: 3a:6e:52:57:e9:a1:fc:34:72:39:93:a0:57:8e:4c:26:d3:68: cb:36:a5:84:40:1a:de:c4:f4:1c:5d:00:84:2a:25:4b:f3:01: 65:e7:06:1a:c9:23:34:03:99:a2:4b:4a:37:a5:54:50:16:ab: 02:8f:bb:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMTA0MjMwMzE1WhcNMjUxMTExMjMwMzE1WjAYMRYwFAYD VQQDEw02OTBhODYzMy02OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/0ySrW2AMpX+k9grwD0eQvBHT/r9PfaPC7VoBw+lB4v9HXZX8lOTMC6B0XM WnVvYfql9QXbPIsJk7lBD9Kw0DrQ8y7nKYLojNR/wRCPiUvb2vCsZ5n8OtbUsPW3 dQ38xNX0gn62S30IhFC0ZT7P48jo64xWMyyV2m7bAOrkYh9lakB5MH+NScZKTfR2 xnARwcwywtlAl36nCApRzOm4tGK3f0qSKoPRI8FYPOb2KL7hsvujTJOPuo1no/an utFeWRueNKtqUoEnowT9Q3Z8iTF7Cet5vnS8JW4cUOI25G4qP/Mv9SJRpuREz7NJ 24BsNCa/DTCbUfCjCwc4fYFcXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoGkTpo ICQJ7rg2JPUnoAC2CMXyMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmMuyLxwwMIlI237KqP1dYOt55MFe9LaYSYjejXhVtirr1nbKJ5FQ3 nK9cUkg4lVeX3mA5UJ9+jHEm7Tg3Y6sHYUWzqR786fwBjSMbafePHvOqqOIAnQKT DXpQ197B9Xn8iuSpIrg2t6h55VH8UYSH8QOO493qx8q9XDnX9Sf9QytykV6slHS9 bBDCrLVXZIeMcqN1d2gKY2zDPQNRigiKLFWQZqYgQ+h4LgTGaTcjWJ1NZMHo7SYW LuWCGKVtnTFWZkCZ1V46blJX6aH8NHI5k6BXjkwm02jLNqWEQBrexPQcXQCEKiVL 8wFl5wYaySM0A5miS0o3pVRQFqsCj7sq -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:27 2025 by rpki-client