$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: 5Ph+N5O8sGDFw585E7jHShXiiojGp3l9ya0o3hcqHVE= Subject key identifier: 5C:3D:88:A8:DF:07:FD:EA:CE:3A:68:DD:28:E6:D6:D9:21:2D:AD:9B Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 02 Signing time: Tue 04 Nov 2025 02:15:50 +0000 Manifest this update: Tue 04 Nov 2025 02:15:49 +0000 Manifest next update: Tue 11 Nov 2025 02:15:49 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: eRAtkbkQYPTkuX4CuLYtbVwKX4dg8pqt0BdOQD15SAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 02:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Nov 4 02:15:49 2025 GMT Not After : Nov 11 02:15:49 2025 GMT Subject: CN=690961d5-9f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:54:ee:f3:45:45:ba:f5:5e:cd:a6:55:c1: 6e:c5:02:bb:fe:a7:89:a0:26:dd:a3:f5:67:e2:59: 00:10:c8:b6:bd:3f:4e:ee:e7:a3:88:bf:8c:9a:5f: f8:cc:7b:b9:04:34:d5:b2:4a:33:19:23:b9:c4:fa: f4:12:0f:fb:08:bd:d0:60:26:3e:f8:c6:3a:15:64: 8d:1c:18:aa:ac:18:60:55:e1:15:c9:78:00:11:e3: e6:da:41:ed:87:45:e8:79:f6:f3:72:11:d9:0e:4b: fa:81:50:12:36:a1:23:2b:3e:d4:c0:04:42:a0:33: e1:e9:fd:1e:4a:9c:d9:4a:9b:88:86:50:e5:00:24: 87:e8:d3:f7:ad:18:75:ed:26:5d:67:29:db:7b:27: 05:c6:a9:85:2f:4d:95:dc:2b:4e:76:da:bd:d5:e3: 6d:b1:6f:de:b5:15:71:24:bf:b6:35:30:20:d2:31: ae:04:6a:a3:bc:5b:ca:d3:54:5e:73:b8:7c:4c:cc: dc:cc:0d:60:df:3c:39:7c:2d:e5:ae:2e:f3:36:e2: ba:43:95:e7:30:9b:9f:3f:8a:2d:8a:eb:b9:35:4a: d3:02:44:e7:15:88:02:ce:32:82:93:08:a2:97:5c: 93:b8:b3:03:45:dd:4c:04:1b:cc:45:86:8e:39:37: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3D:88:A8:DF:07:FD:EA:CE:3A:68:DD:28:E6:D6:D9:21:2D:AD:9B X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:41:e6:62:3d:f3:9e:bf:42:e9:29:fc:94:b1:09:9a:5c:92: 0b:1a:54:d0:80:5b:a9:fe:5e:65:1e:14:c1:da:dd:f8:16:db: c9:0d:4b:fc:a6:99:08:dc:8e:60:fa:4b:ab:9b:ea:29:4f:5a: c0:0e:2b:e3:26:a8:71:17:be:b6:c5:1e:66:d4:c2:08:61:9d: 38:c5:09:0a:3d:73:21:4f:e1:03:9d:f2:4d:fe:a2:d6:28:b4: b4:37:09:35:5b:fe:d4:d8:03:17:f7:3d:ed:75:98:6c:99:b7: 0d:82:1c:ab:63:b6:24:57:c6:99:59:48:b7:94:01:a1:6e:a6: 0c:7d:75:9b:ee:98:39:f3:b0:51:82:31:96:af:0d:38:2a:aa: 4b:cd:0f:6c:13:6e:df:e8:ca:fa:f3:97:b7:89:75:e2:23:98: a4:76:94:8a:d7:2b:2c:1d:5c:1f:5a:25:28:01:0e:de:cf:38: 53:a2:79:f4:61:ba:7a:9f:47:c4:c4:05:f5:e2:bb:8f:86:2a: aa:83:2d:d3:98:e3:08:9f:3a:84:82:cf:8d:ab:0a:ed:06:66: 8b:43:0d:8b:fe:7b:82:f7:59:88:d5:96:19:12:f7:24:b8:eb: d5:21:69:b7:33:df:38:45:39:28:b1:27:2f:a1:5e:bf:0d:09: bc:07:aa:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNTExMDQwMjE1NDlaFw0yNTExMTEwMjE1NDlaMBgxFjAUBgNV BAMTDTY5MDk2MWQ1LTlmMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0ZFTu80VFuvVezaZVwW7FArv+p4mgJt2j9WfiWQAQyLa9P07u56OIv4yaX/jM e7kENNWySjMZI7nE+vQSD/sIvdBgJj74xjoVZI0cGKqsGGBV4RXJeAAR4+baQe2H Reh59vNyEdkOS/qBUBI2oSMrPtTABEKgM+Hp/R5KnNlKm4iGUOUAJIfo0/etGHXt Jl1nKdt7JwXGqYUvTZXcK0522r3V422xb961FXEkv7Y1MCDSMa4EaqO8W8rTVF5z uHxMzNzMDWDfPDl8LeWuLvM24rpDlecwm58/ii2K67k1StMCROcViALOMoKTCKKX XJO4swNF3UwEG8xFho45N79PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXD2IqN8H /erOOmjdKObW2SEtrZswHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAtB5mI9856/Qukp/JSxCZpckgsaVNCAW6n+XmUeFMHa3fgW28kNS/ym mQjcjmD6S6ub6ilPWsAOK+MmqHEXvrbFHmbUwghhnTjFCQo9cyFP4QOd8k3+otYo tLQ3CTVb/tTYAxf3Pe11mGyZtw2CHKtjtiRXxplZSLeUAaFupgx9dZvumDnzsFGC MZavDTgqqkvND2wTbt/oyvrzl7eJdeIjmKR2lIrXKywdXB9aJSgBDt7POFOiefRh unqfR8TEBfXiu4+GKqqDLdOY4wifOoSCz42rCu0GZotDDYv+e4L3WYjVlhkS9yS4 69Uhabcz3zhFOSixJy+hXr8NCbwHqgs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:54 2025 by rpki-client