$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: YfDUtFecmvyZx+Z9xllNmcqrS+fREe8RgNTgSkuWgnw= Subject key identifier: 6C:CA:F1:E6:80:BD:8D:09:82:5C:7C:0B:22:A5:BF:A9:04:0C:8B:4F Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 01DE Signing time: Wed 05 Nov 2025 02:58:09 +0000 Manifest this update: Wed 05 Nov 2025 02:58:08 +0000 Manifest next update: Wed 12 Nov 2025 02:58:08 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: cnoL4qvxVILwdLuuTw+ZLaRHZ85i8bLp+aCRrYWpjEY=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: dEO++79BUk5ahAousLOU8sxWcE1quKezgUCE1Hu7wA4=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: R4Ljm5NeP4Hir9hOIaavj4Ei4Fp/DK7rq1sAkkj7t6M=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: 6T5VqQ+edZ6pbmeIW8IszEM8XpwV+NQ6Abfc3d497aM=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: UBOFGSoa96Dj5GakGMm+C82OJl4KIG2NerG7i5z19VI=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: yx0ON/sLrcGZFA/S/wuCK9bR9AtwCeJiAtm+emoP2GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Nov 5 02:58:08 2025 GMT Not After : Nov 12 02:58:08 2025 GMT Subject: CN=690abd40-0dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:14:d1:d4:98:13:b0:71:a9:00:99:9a:5c: 10:1a:dd:5a:46:c1:78:3e:9e:c5:51:ba:a8:86:f0: 8f:e0:9b:36:af:53:d1:fc:9f:cf:23:cf:a2:69:a2: c6:35:25:e0:c6:86:78:85:9e:53:87:ca:ad:c6:2d: 04:50:db:d5:39:6b:ec:7d:6c:05:24:8b:70:70:f4: 86:4d:13:f5:fb:c1:7c:e3:fc:d7:2d:3f:f1:93:72: d7:41:78:d7:e6:42:7c:7f:fc:9a:1f:fe:f4:bc:d7: 8a:d6:de:4d:b0:3c:ca:fb:69:41:60:de:bb:34:8e: 6c:a3:99:69:d4:c1:43:0c:6d:05:ff:0d:da:d0:d9: 18:b7:f4:ae:2d:ac:2e:2d:4a:9b:d7:18:6c:a8:73: 02:41:90:33:90:4f:44:5f:e6:99:bc:16:ac:4a:29: 21:dd:e3:7e:a8:16:f3:e1:cd:4b:40:22:d6:b2:aa: 8d:10:6c:d0:ca:0a:05:ed:6f:22:84:0b:f7:96:89: e2:bf:96:b4:91:d0:ca:3a:74:10:41:17:b3:30:26: 99:1c:67:62:46:46:01:c4:d2:0a:9b:34:1a:68:62: 21:f5:ad:82:21:ca:22:5b:58:68:bc:ec:d9:5b:6a: 6b:50:b1:38:87:c3:ba:8a:b5:03:01:64:a3:86:b1: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CA:F1:E6:80:BD:8D:09:82:5C:7C:0B:22:A5:BF:A9:04:0C:8B:4F X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:02:df:5d:90:3f:4e:43:09:f4:44:30:8a:60:b8:47:e8:52: 9b:d9:4d:bc:47:d0:8b:8e:a8:1b:fe:f8:de:c5:a4:41:e7:6c: 57:46:ae:41:b3:ce:8c:b8:92:a0:4a:15:b6:e9:d7:12:a7:8d: 17:6a:ca:8b:a0:0d:bc:cf:aa:62:2b:e7:7d:99:dc:2c:36:49: e9:e6:c8:a8:89:77:18:ed:e6:d8:3a:cc:d8:5f:5b:d5:b5:83: 27:f0:46:5c:e5:11:2a:ee:7c:2e:75:03:b8:d4:04:60:47:61: bd:82:68:a3:d3:f4:5f:b5:7e:fb:38:af:5e:40:c5:ad:03:11: 8b:5d:21:a0:2d:15:13:63:08:35:ca:47:d4:51:a8:00:33:6a: ea:cc:95:71:54:03:5c:2f:70:ae:dd:80:2d:57:83:0d:86:de: 78:45:a5:68:cd:ea:3f:9c:9d:51:c6:12:19:f5:ea:67:ed:4a: a8:e1:60:41:50:ea:21:68:0f:dd:c3:38:fe:42:d2:4b:80:89: 5d:b5:d8:0f:91:29:1c:34:79:da:0e:ad:d3:fb:f4:a3:3e:d9: 9c:5b:2b:08:46:d2:a0:5c:37:dd:4e:88:66:4e:54:cb:f6:05: dc:75:36:53:c6:04:52:2f:39:3f:56:91:43:46:3d:b7:1f:05: 7c:8a:1e:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUxMTA1MDI1ODA4WhcNMjUxMTEyMDI1ODA4WjAYMRYwFAYD VQQDEw02OTBhYmQ0MC0wZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXAU0dSYE7BxqQCZmlwQGt1aRsF4Pp7FUbqohvCP4Js2r1PR/J/PI8+iaaLG NSXgxoZ4hZ5Th8qtxi0EUNvVOWvsfWwFJItwcPSGTRP1+8F84/zXLT/xk3LXQXjX 5kJ8f/yaH/70vNeK1t5NsDzK+2lBYN67NI5so5lp1MFDDG0F/w3a0NkYt/SuLawu LUqb1xhsqHMCQZAzkE9EX+aZvBasSikh3eN+qBbz4c1LQCLWsqqNEGzQygoF7W8i hAv3loniv5a0kdDKOnQQQRezMCaZHGdiRkYBxNIKmzQaaGIh9a2CIcoiW1hovOzZ W2prULE4h8O6irUDAWSjhrG7mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzK8eaA vY0Jglx8CyKlv6kEDItPMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5At9dkD9OQwn0RDCKYLhH6FKb2U28R9CLjqgb/vjexaRB52xXRq5B s86MuJKgShW26dcSp40XasqLoA28z6piK+d9mdwsNknp5sioiXcY7ebYOszYX1vV tYMn8EZc5REq7nwudQO41ARgR2G9gmij0/RftX77OK9eQMWtAxGLXSGgLRUTYwg1 ykfUUagAM2rqzJVxVANcL3Cu3YAtV4MNht54RaVozeo/nJ1RxhIZ9epn7Uqo4WBB UOohaA/dwzj+QtJLgIldtdgPkSkcNHnaDq3T+/SjPtmcWysIRtKgXDfdTohmTlTL 9gXcdTZTxgRSLzk/VpFDRj23HwV8ih4O -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:49 2025 by rpki-client