$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: b3uTFXnKs4IrGckmhhtGAw0+goIuF9fZyoFDwKgAS0Q= Subject key identifier: 7C:6D:ED:04:B6:56:CE:1B:04:CC:D2:92:8E:83:F1:70:90:20:1F:F6 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 6B Signing time: Wed 05 Nov 2025 07:10:31 +0000 Manifest this update: Wed 05 Nov 2025 07:10:30 +0000 Manifest next update: Wed 12 Nov 2025 07:10:30 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: P4njsxugyKWl3W8TZ8aqrFmukQvAzWEFLUCuD1SJkbY=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Nov 5 07:10:30 2025 GMT Not After : Nov 12 07:10:30 2025 GMT Subject: CN=690af866-9de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:cd:3a:f3:be:eb:d3:35:98:1e:b2:09:96: d2:46:09:7d:b9:56:7d:ba:ba:46:4f:29:ae:07:3c: e0:31:0c:02:30:7b:05:80:79:db:0b:6e:18:d4:34: 57:a7:80:f9:63:c8:a0:37:82:e8:59:35:43:8d:e3: 15:60:e9:5d:04:c1:e0:cb:fe:d1:37:28:f8:8a:4c: ea:ee:4f:92:e2:13:24:71:90:8b:88:94:4f:2a:bc: ac:5d:19:6c:e0:61:2a:de:10:ed:63:c1:78:a8:d6: 4f:e0:61:09:54:b0:ab:e3:e9:22:7f:a5:f4:b8:72: a2:aa:f1:f9:62:d0:93:5a:9a:d7:4e:56:53:36:05: be:b1:20:99:41:8a:a8:15:e8:f6:59:72:e9:ed:37: a8:bd:4b:32:40:54:2d:00:86:5b:d8:b5:35:25:62: 39:a4:dd:48:e3:d0:9c:fa:90:31:59:fb:44:c4:e1: f6:02:1c:29:98:7a:2d:f4:74:d2:f8:05:d6:86:16: 94:79:bd:51:15:be:cf:62:a4:f2:3e:a4:88:b8:42: 60:17:d2:bf:89:fd:40:8e:dc:39:97:3f:43:92:57: a6:d5:de:26:a4:57:3f:a7:a7:2d:ed:e2:cc:96:d0: aa:19:d4:96:a4:4c:50:8e:1c:ec:ae:03:be:00:24: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6D:ED:04:B6:56:CE:1B:04:CC:D2:92:8E:83:F1:70:90:20:1F:F6 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:90:91:2a:6f:f5:81:9a:9c:2f:f5:d6:91:f8:3f:eb:d2:a0: 0c:6a:a8:93:ac:80:c3:45:45:e4:00:7d:fe:28:fe:38:1f:4b: 08:c1:e1:f6:67:e0:2a:26:1b:f9:d3:ac:80:ce:79:3f:98:9c: d8:44:7e:44:93:bb:51:60:41:d0:32:0f:e4:fe:37:d1:d0:99: 25:d9:17:ef:f1:bd:41:1d:bf:57:21:9f:37:e9:c6:0a:74:21: ea:6f:2c:38:ce:18:37:d4:2a:99:c9:59:76:61:6a:4f:09:3a: e9:3f:73:e2:c3:46:50:77:fd:f7:26:a2:f5:ad:98:7d:56:bf: 55:dc:51:9c:c6:59:45:9f:ea:09:21:a7:18:4f:c1:f9:53:3a: 01:c9:45:07:65:d4:69:8d:85:fd:b4:c3:1b:2c:3f:ad:81:91: 96:7d:65:91:eb:f7:74:13:c9:16:90:eb:1c:5c:6e:0e:a7:f0: b4:a2:69:68:39:71:ab:b3:e7:f7:ef:1b:8b:19:65:08:a3:a7: 0f:e4:c5:70:da:15:b4:50:8c:53:2c:51:4f:d7:2c:38:50:5f: 91:e1:ec:23:65:ba:b9:a2:ec:a5:d1:54:53:27:e8:e9:3b:6e: 21:5b:04:6b:16:d1:0f:ce:05:60:21:59:12:79:b5:41:da:1c: 6c:d1:48:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTExMDUwNzEwMzBaFw0yNTExMTIwNzEwMzBaMBgxFjAUBgNV BAMTDTY5MGFmODY2LTlkZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC48s06877r0zWYHrIJltJGCX25Vn26ukZPKa4HPOAxDAIwewWAedsLbhjUNFen gPljyKA3guhZNUON4xVg6V0EweDL/tE3KPiKTOruT5LiEyRxkIuIlE8qvKxdGWzg YSreEO1jwXio1k/gYQlUsKvj6SJ/pfS4cqKq8fli0JNamtdOVlM2Bb6xIJlBiqgV 6PZZcuntN6i9SzJAVC0AhlvYtTUlYjmk3Ujj0Jz6kDFZ+0TE4fYCHCmYei30dNL4 BdaGFpR5vVEVvs9ipPI+pIi4QmAX0r+J/UCO3DmXP0OSV6bV3iakVz+npy3t4syW 0KoZ1JakTFCOHOyuA74AJPnNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfG3tBLZW zhsEzNKSjoPxcJAgH/YwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAuQkSpv9YGanC/11pH4P+vSoAxqqJOsgMNFReQAff4o/jgfSwjB4fZn 4ComG/nTrIDOeT+YnNhEfkSTu1FgQdAyD+T+N9HQmSXZF+/xvUEdv1chnzfpxgp0 IepvLDjOGDfUKpnJWXZhak8JOuk/c+LDRlB3/fcmovWtmH1Wv1XcUZzGWUWf6gkh pxhPwflTOgHJRQdl1GmNhf20wxssP62BkZZ9ZZHr93QTyRaQ6xxcbg6n8LSiaWg5 cauz5/fvG4sZZQijpw/kxXDaFbRQjFMsUU/XLDhQX5Hh7CNlurmi7KXRVFMn6Ok7 biFbBGsW0Q/OBWAhWRJ5tUHaHGzRSEk= -----END CERTIFICATE-----Generated at Wed Nov 5 23:46:45 2025 by rpki-client