$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json) Hash identifier: mj/Usl9puUOU8mGGokOW/jHL8tl9iFYqsDLDf9qTWls= Subject key identifier: 00:E5:1A:75:21:36:0E:89:7F:E0:1A:80:50:07:30:3B:EE:E8:60:2D Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft Manifest number: 40 Signing time: Wed 05 Nov 2025 07:38:45 +0000 Manifest this update: Wed 05 Nov 2025 07:38:44 +0000 Manifest next update: Wed 12 Nov 2025 07:38:44 +0000 Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: l6UqglqB13gQpqni2va1FDTsvJoTV+YJD6s1rJwlWhk=) 2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: tlZH4+U+/czJd2gewk6CoHNSlqFgULLAe9q38ySSPEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Validity Not Before: Nov 5 07:38:44 2025 GMT Not After : Nov 12 07:38:44 2025 GMT Subject: CN=690aff05-c7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:46:84:60:6e:f4:a7:c6:7c:06:e7:84:06: 06:01:dc:82:c3:00:7f:05:ee:fb:bd:b7:d0:5a:18: 38:21:62:ec:73:99:56:c5:c1:6b:2d:41:e6:4e:a5: a6:5a:44:64:dc:68:75:82:d2:9a:48:40:15:1f:8a: 89:b4:bc:a3:2d:bf:b2:db:98:0e:3f:00:f5:3e:0e: f3:6b:0e:1e:e3:e4:12:20:f3:ce:0c:04:e6:c3:94: fd:39:c8:dc:e5:2e:bc:a6:a0:7e:8e:b7:b6:fa:2f: a9:7d:30:59:35:93:56:b3:64:fe:88:9e:a1:9d:03: 9d:ed:4b:20:39:df:00:5a:dc:ab:14:42:14:2e:2c: 72:7d:ab:0c:76:5c:0f:87:0f:30:f5:34:52:81:3b: fb:fb:93:58:63:37:e5:f3:cf:a5:ce:42:99:08:30: da:c3:25:84:a3:c9:45:0c:33:f2:ef:e2:2f:df:25: f6:68:d6:f2:97:47:8f:11:45:7b:e0:06:29:7d:c2: 65:41:d3:88:80:b5:2c:c9:00:da:8a:e6:b0:7d:16: 23:08:28:63:71:9f:fa:2c:f3:9a:39:6d:18:58:f1: 68:a2:0b:83:38:72:ec:84:28:ec:21:31:c8:02:a5: 2f:c3:93:9f:a5:d5:80:9c:28:c1:d9:85:75:22:47: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E5:1A:75:21:36:0E:89:7F:E0:1A:80:50:07:30:3B:EE:E8:60:2D X509v3 Authority Key Identifier: keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:46:69:36:11:48:1f:16:fc:a7:cb:40:91:a4:45:f4:21:5c: 24:b7:4f:31:06:54:80:ff:29:44:44:b2:7c:a8:02:8f:11:ca: df:56:a0:7c:83:82:6a:b7:74:8e:40:e3:3f:76:e7:f4:6c:2e: 9b:fb:7c:e7:62:95:ed:2d:01:64:ad:10:bf:4a:7c:66:4a:c9: 0f:a5:3d:23:08:85:76:ef:92:af:de:86:0c:34:c1:07:45:bd: c4:5d:4e:ba:1a:93:8b:59:20:25:49:27:fa:d2:83:a9:4b:d6: e6:79:bb:07:27:40:38:c5:35:a5:ed:db:23:59:31:fc:ac:42: 5b:58:87:93:b9:b0:de:ff:8e:77:be:36:28:61:bf:6c:1b:14: 84:e4:60:0e:d8:41:d2:e3:dc:55:5e:bc:7b:6b:7b:58:4f:4f: d6:ed:be:74:c8:ba:47:4d:75:ba:61:0f:15:8b:5b:bb:c2:cc: 6d:97:5e:15:e0:93:6e:06:d0:8c:33:19:3a:d4:05:7d:7a:fd: 7a:40:95:74:b0:7f:52:bc:fe:b0:a7:47:55:57:f5:7e:13:b2: 51:fb:ef:01:c5:4e:5e:7b:2a:cd:d5:63:7c:c1:79:76:ab:9b: 16:96:16:f6:a8:43:25:c6:ea:53:62:5a:d1:dd:f0:f5:d0:cd: 05:db:ce:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw NjI2NTQwNTAeFw0yNTExMDUwNzM4NDRaFw0yNTExMTIwNzM4NDRaMBgxFjAUBgNV BAMTDTY5MGFmZjA1LWM3ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf5EaEYG70p8Z8BueEBgYB3ILDAH8F7vu9t9BaGDghYuxzmVbFwWstQeZOpaZa RGTcaHWC0ppIQBUfiom0vKMtv7LbmA4/APU+DvNrDh7j5BIg884MBObDlP05yNzl LrymoH6Ot7b6L6l9MFk1k1azZP6InqGdA53tSyA53wBa3KsUQhQuLHJ9qwx2XA+H DzD1NFKBO/v7k1hjN+Xzz6XOQpkIMNrDJYSjyUUMM/Lv4i/fJfZo1vKXR48RRXvg Bil9wmVB04iAtSzJANqK5rB9FiMIKGNxn/os85o5bRhY8WiiC4M4cuyEKOwhMcgC pS/Dk5+l1YCcKMHZhXUiR15fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAOUadSE2 Dol/4BqAUAcwO+7oYC0wHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2Lzc2RjgyMDUwNUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hr RXZIVXFxT1NqUXdZbVZBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1GaTYRSB8W/KfLQJGkRfQhXCS3TzEGVID/KUREsnyoAo8Ryt9WoHyD gmq3dI5A4z925/RsLpv7fOdile0tAWStEL9KfGZKyQ+lPSMIhXbvkq/ehgw0wQdF vcRdTroak4tZICVJJ/rSg6lL1uZ5uwcnQDjFNaXt2yNZMfysQltYh5O5sN7/jne+ Nihhv2wbFITkYA7YQdLj3FVevHtre1hPT9btvnTIukdNdbphDxWLW7vCzG2XXhXg k24G0IwzGTrUBX16/XpAlXSwf1K8/rCnR1VX9X4TslH77wHFTl57Ks3VY3zBeXar mxaWFvaoQyXG6lNiWtHd8PXQzQXbzjc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:51 2025 by rpki-client