$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: yjtVZMEBwYiZT05Kar/ldKxL8oGPfoZmOu7JBg2GG+M= Subject key identifier: B3:AF:A1:57:3E:39:81:B2:93:0F:CA:52:7C:2C:17:7A:C4:44:76:45 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0964 Signing time: Tue 04 Nov 2025 20:12:20 +0000 Manifest this update: Tue 04 Nov 2025 20:12:20 +0000 Manifest next update: Tue 11 Nov 2025 20:12:20 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: fmSHJVhftVnKgO0mCmF2ihJyyQlNikuW8n+5ZTy8uRI=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Nov 4 20:12:20 2025 GMT Not After : Nov 11 20:12:20 2025 GMT Subject: CN=690a5e24-71b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:2e:81:ce:8f:9b:0e:9b:b0:4e:47:29:e6: ce:dc:5c:1f:51:87:20:af:6d:7c:03:09:7a:1a:b2: ec:a9:40:4d:20:a1:05:0f:0f:a9:cb:d1:b1:67:fa: fb:b5:a2:0e:ae:3e:5d:27:e4:11:df:8b:61:5f:ee: 57:40:1c:e1:f1:0c:7c:66:31:28:7d:e0:10:a7:13: 44:a9:d4:8b:4c:70:79:3c:f6:33:51:6c:4f:53:4e: ca:b0:b7:e3:9c:93:d6:7b:f4:fa:f4:37:52:8d:a8: a1:93:ec:c4:f3:40:ba:e4:8e:33:3d:1e:59:cb:9a: 87:d9:c9:b2:0b:cf:8b:e4:b4:ca:d6:d3:cb:fc:33: d9:08:cb:cc:1d:be:6d:35:90:03:69:53:b2:48:0c: ca:e6:b4:c0:95:67:8b:af:ee:71:c0:39:14:7b:2f: 80:cb:c2:bc:f7:5a:bb:ae:55:ca:ad:39:12:9f:7b: fa:9b:58:e4:ed:f5:aa:37:3a:b9:12:7b:6f:dd:94: 58:e8:a7:af:21:dd:93:06:59:9d:33:47:18:98:cb: ca:ae:89:b9:20:71:77:e4:eb:6e:be:53:d7:42:e2: 54:d3:f8:47:c4:02:e6:6b:98:57:63:1c:45:ed:57: 40:09:36:c7:ec:9e:e3:b2:49:7b:3c:55:10:85:a8: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:A1:57:3E:39:81:B2:93:0F:CA:52:7C:2C:17:7A:C4:44:76:45 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:3f:89:33:c2:13:1f:a9:7b:89:71:be:89:dd:5e:d7:04:14: 89:3e:4a:0d:f9:0b:0b:84:65:41:cd:60:49:7e:57:0a:b7:9b: 90:a7:7f:ec:df:1b:56:0a:74:ef:38:a1:77:ba:7a:7b:9b:f3: d6:a9:fa:e2:2d:14:5a:63:29:2e:fa:4c:49:e3:9f:62:66:72: 00:56:0a:54:d9:a0:e4:fa:03:f6:e2:3e:75:94:e1:89:c6:d2: 9e:4f:aa:a2:49:22:e6:1e:45:ca:72:4b:cd:a6:8c:c2:8b:54: 29:11:61:ab:9e:9b:04:47:cf:a0:60:a0:de:8d:f2:a9:99:a4: 74:b0:a6:9b:08:c0:a8:f7:6c:06:a2:e8:b3:51:68:1b:66:39: 66:74:15:4b:d4:2f:62:79:9b:27:bf:2d:8f:91:5c:39:82:d5: d1:b9:10:80:3d:00:81:3b:0b:a6:3f:e6:fa:f1:a4:7c:59:8c: f5:82:0f:ce:39:78:ac:bb:ca:72:a9:28:13:5d:d8:96:d6:15: 86:fb:93:f2:f1:14:3f:35:30:66:f4:d8:fd:a8:d1:6f:f0:1b: 4e:3c:74:49:71:b9:50:66:bd:69:df:c4:59:78:f9:0a:5f:75: 5d:81:0c:08:07:68:84:fd:3b:74:02:5d:f1:21:d3:25:c5:04: f1:95:c2:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUxMTA0MjAxMjIwWhcNMjUxMTExMjAxMjIwWjAYMRYwFAYD VQQDEw02OTBhNWUyNC03MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQUugc6Pmw6bsE5HKebO3FwfUYcgr218Awl6GrLsqUBNIKEFDw+py9GxZ/r7 taIOrj5dJ+QR34thX+5XQBzh8Qx8ZjEofeAQpxNEqdSLTHB5PPYzUWxPU07KsLfj nJPWe/T69DdSjaihk+zE80C65I4zPR5Zy5qH2cmyC8+L5LTK1tPL/DPZCMvMHb5t NZADaVOySAzK5rTAlWeLr+5xwDkUey+Ay8K891q7rlXKrTkSn3v6m1jk7fWqNzq5 Entv3ZRY6KevId2TBlmdM0cYmMvKrom5IHF35OtuvlPXQuJU0/hHxALma5hXYxxF 7VdACTbH7J7jskl7PFUQhaiYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOvoVc+ OYGykw/KUnwsF3rERHZFMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxP4kzwhMfqXuJcb6J3V7XBBSJPkoN+QsLhGVBzWBJflcKt5uQp3/s 3xtWCnTvOKF3unp7m/PWqfriLRRaYyku+kxJ459iZnIAVgpU2aDk+gP24j51lOGJ xtKeT6qiSSLmHkXKckvNpozCi1QpEWGrnpsER8+gYKDejfKpmaR0sKabCMCo92wG ouizUWgbZjlmdBVL1C9ieZsnvy2PkVw5gtXRuRCAPQCBOwumP+b68aR8WYz1gg/O OXisu8pyqSgTXdiW1hWG+5Py8RQ/NTBm9Nj9qNFv8BtOPHRJcblQZr1p38RZePkK X3VdgQwIB2iE/Tt0Al3xIdMlxQTxlcKu -----END CERTIFICATE-----Generated at Wed Nov 5 22:44:30 2025 by rpki-client