$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: 9/fUws0mYsH184J+HKJESCWSl6AjacPUrp6ocwFVpjc= Subject key identifier: 43:DF:2C:C4:93:B5:E1:E0:44:C8:5E:7D:1E:07:28:BB:BF:91:11:1F Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 13CB Signing time: Sun 02 Nov 2025 16:58:02 +0000 Manifest this update: Sun 02 Nov 2025 16:58:02 +0000 Manifest next update: Sun 09 Nov 2025 16:58:02 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: bJLBEMaC+BhAEnO8VlB10nzZLKgtBmlOucmS6w6zIjY=) 2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=) 3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=) 4: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5118 (0x13fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Nov 2 16:58:02 2025 GMT Not After : Nov 9 16:58:02 2025 GMT Subject: CN=69078d9a-6230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:e4:5e:5a:58:95:3a:e1:ec:41:e1:88:1c: 9a:df:f9:5d:9a:db:e6:34:6f:e4:dd:d5:74:a0:45: 90:97:96:a2:38:30:5a:31:9d:ee:cd:fd:9b:2f:2a: b6:a0:76:59:39:da:ad:26:ed:39:a7:78:87:a5:c1: 3b:08:b4:1a:5f:61:73:3d:e8:d6:33:0e:cf:09:4a: cb:60:07:d2:b2:76:79:c2:fc:a1:39:93:b1:e1:00: 5b:1a:b6:eb:fc:29:0c:91:bb:f1:cc:c3:da:a1:f7: 49:3d:d8:cc:b0:84:79:d4:b8:b3:0a:bd:ba:7a:61: 05:9d:41:46:25:9b:da:92:41:f3:84:19:5f:90:f2: 48:d9:8e:d6:bd:f8:cf:31:cc:6a:34:4c:c5:41:f1: 10:6f:b6:4c:da:b0:06:5f:7a:f6:a2:82:8c:fa:34: 69:28:06:33:13:9d:28:17:10:06:8a:56:52:3b:de: 8d:de:ed:83:1e:94:0e:34:56:c0:1c:83:c8:9c:2e: db:92:93:1e:13:51:2a:61:cb:e1:99:03:b5:12:51: b9:52:a7:73:b0:0f:43:a6:0f:e8:c0:7d:10:b1:6e: fa:4d:c0:54:3e:c1:80:37:b2:cc:6e:78:f1:f4:08: ee:e0:3b:1b:ab:c7:2a:b1:70:a0:cd:ba:6c:29:b3: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:2C:C4:93:B5:E1:E0:44:C8:5E:7D:1E:07:28:BB:BF:91:11:1F X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d9:9e:fa:c6:ab:2f:61:5e:e3:fe:2c:1b:79:a2:f4:e4:d0: bb:01:87:5c:62:9d:4e:10:5a:26:f0:4a:ca:71:d3:7c:3e:d4: 87:b0:1d:d2:ac:b9:3e:a0:6b:37:fe:b3:31:17:18:da:9a:a9: b1:0a:7b:39:a9:8b:a3:a8:78:b8:fe:cd:e7:06:3c:80:d0:20: 33:a2:6e:e0:a4:9b:32:17:b6:72:4b:5c:92:a5:04:10:9d:4f: 33:85:1d:61:44:a1:af:6b:5d:ac:bd:dd:70:aa:9e:77:55:c9: 6e:99:7c:06:ba:3d:4f:4c:8d:30:dd:bc:31:09:da:9d:d7:6c: f7:7b:29:61:76:b7:ef:84:84:89:70:05:b4:c2:c0:ee:05:54: 0b:79:13:2e:85:c6:26:ab:0f:d3:9f:01:62:96:1a:dc:a1:f2: 1e:72:d0:d8:9d:d3:f7:26:63:27:24:2b:63:00:1e:1b:07:b1: 15:b6:ec:90:05:09:1b:a9:65:93:2d:f6:69:3f:a9:68:76:6c: 35:b0:6d:09:2b:5f:4f:ed:45:61:8e:b1:84:f8:6e:81:ca:8c: f0:fa:ec:99:0d:e3:1c:20:fb:0f:a9:3e:f9:70:74:39:b7:29: 86:a8:0b:03:0f:0a:cd:fa:ad:0f:78:99:d9:8c:80:6d:60:6a: 23:9b:80:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUxMTAyMTY1ODAyWhcNMjUxMTA5MTY1ODAyWjAYMRYwFAYD VQQDEw02OTA3OGQ5YS02MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua7kXlpYlTrh7EHhiBya3/ldmtvmNG/k3dV0oEWQl5aiODBaMZ3uzf2bLyq2 oHZZOdqtJu05p3iHpcE7CLQaX2FzPejWMw7PCUrLYAfSsnZ5wvyhOZOx4QBbGrbr /CkMkbvxzMPaofdJPdjMsIR51LizCr26emEFnUFGJZvakkHzhBlfkPJI2Y7WvfjP McxqNEzFQfEQb7ZM2rAGX3r2ooKM+jRpKAYzE50oFxAGilZSO96N3u2DHpQONFbA HIPInC7bkpMeE1EqYcvhmQO1ElG5UqdzsA9Dpg/owH0QsW76TcBUPsGAN7LMbnjx 9Aju4Dsbq8cqsXCgzbpsKbMlIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPfLMST teHgRMhefR4HKLu/kREfMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA02Z76xqsvYV7j/iwbeaL05NC7AYdcYp1OEFom8ErKcdN8PtSHsB3S rLk+oGs3/rMxFxjamqmxCns5qYujqHi4/s3nBjyA0CAzom7gpJsyF7ZyS1ySpQQQ nU8zhR1hRKGva12svd1wqp53VclumXwGuj1PTI0w3bwxCdqd12z3eylhdrfvhISJ cAW0wsDuBVQLeRMuhcYmqw/TnwFilhrcofIectDYndP3JmMnJCtjAB4bB7EVtuyQ BQkbqWWTLfZpP6lodmw1sG0JK19P7UVhjrGE+G6Byozw+uyZDeMcIPsPqT75cHQ5 tymGqAsDDwrN+q0PeJnZjIBtYGojm4AC -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:27 2025 by rpki-client