$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: ZoRVY+CB1EJmSid7BdT+GmUoWTmcdIrB1gpffifNxG4= Subject key identifier: 0E:67:07:AD:FF:9E:B7:36:A5:D3:3A:EF:08:DD:51:3B:A0:BD:14:DD Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0D53 Signing time: Tue 04 Nov 2025 18:05:45 +0000 Manifest this update: Tue 04 Nov 2025 18:05:44 +0000 Manifest next update: Tue 11 Nov 2025 18:05:44 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: MFvNPeaC1hob3wbAsc8IDnd3htmGdPsd+/i2pifyU20=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: zkAhSZ57x5i2z1ecY4hViVs+riusX3XK2gSVsFUEBsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Nov 4 18:05:44 2025 GMT Not After : Nov 11 18:05:44 2025 GMT Subject: CN=690a4078-5fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:bc:12:fa:68:61:7b:6e:14:53:51:d3:1f: 91:ca:41:b3:8b:06:2a:86:21:95:5d:e3:dd:b0:fd: 18:bd:0d:e3:64:6d:95:f8:a9:5c:c2:e1:10:48:c5: 5a:10:a2:02:32:33:44:2d:32:25:d8:11:e5:64:8d: ef:7b:f2:e3:aa:87:23:f0:2b:86:32:73:5a:85:91: 64:e0:f2:d8:83:9f:65:3b:40:29:60:58:29:49:73: 34:9d:38:c1:9c:84:56:0c:fe:69:38:7a:02:57:70: a3:b4:4e:11:e6:49:09:dc:cc:94:98:ef:6b:4d:fb: f8:bb:79:8c:03:70:90:a8:8f:34:3a:6f:af:ac:3d: 42:6b:40:27:25:30:ca:f1:64:6a:04:a1:c4:88:1e: 45:b2:28:f1:d1:d9:64:f4:3c:08:e5:20:1c:71:b5: 47:d7:1a:fe:72:ad:ca:73:67:41:3a:95:19:30:f8: fb:ee:74:eb:c1:e8:90:2a:91:8a:c7:c9:53:39:1b: 7c:c2:94:c6:2c:7d:a5:f4:e2:0d:f1:60:5f:d8:6e: e7:4e:89:ee:ce:70:71:af:69:41:32:63:6a:84:19: 3b:75:c0:86:db:9d:ef:95:58:08:b5:08:86:34:02: 3e:cb:90:a9:5c:ee:42:1d:5e:76:09:d5:f2:20:9b: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:67:07:AD:FF:9E:B7:36:A5:D3:3A:EF:08:DD:51:3B:A0:BD:14:DD X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b4:fc:96:52:d5:9d:5f:67:6b:80:e8:13:bc:b2:f6:4d:45: e3:64:83:df:c8:08:94:61:65:f3:ac:cf:41:4b:f0:da:40:fc: 56:50:64:bc:18:56:af:85:3f:a6:9b:f6:ac:f6:9b:eb:a4:39: ba:bf:3b:7c:93:f8:16:96:c2:57:e5:d1:53:e5:90:cb:06:a2: 13:e2:95:5f:c7:6a:61:16:93:5d:87:36:3e:fc:e6:72:03:c3: a9:b2:70:b1:5d:1a:90:88:93:af:2b:16:75:14:3d:c7:70:c3: 7a:0c:b9:12:1e:ea:d8:e4:85:89:d9:68:f2:27:0c:7a:35:14: d1:9f:ac:f2:a3:e7:93:78:c0:ad:81:5e:5f:43:b8:e9:ed:4d: 68:f3:5b:2c:78:c1:35:46:c2:f3:1c:0f:b4:cd:fc:ef:54:5c: 8c:17:c6:b1:03:02:a2:33:cb:2d:2a:8c:3b:17:f2:fb:d5:15: 69:8a:84:16:0d:4c:34:44:7b:08:a4:22:14:5a:4d:13:a5:2c: f4:79:04:8a:6a:be:32:5b:94:fd:3f:de:76:22:08:c8:e4:3a: 4d:a7:7b:ce:e9:0f:6c:df:59:05:1a:90:81:a4:5f:cc:fa:ab: fc:6e:7f:ab:9b:96:29:75:da:36:7e:04:d6:31:ba:7d:49:c6: 4b:0b:3b:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjUxMTA0MTgwNTQ0WhcNMjUxMTExMTgwNTQ0WjAYMRYwFAYD VQQDEw02OTBhNDA3OC01ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA28EvpoYXtuFFNR0x+RykGziwYqhiGVXePdsP0YvQ3jZG2V+KlcwuEQSMVa EKICMjNELTIl2BHlZI3ve/Ljqocj8CuGMnNahZFk4PLYg59lO0ApYFgpSXM0nTjB nIRWDP5pOHoCV3CjtE4R5kkJ3MyUmO9rTfv4u3mMA3CQqI80Om+vrD1Ca0AnJTDK 8WRqBKHEiB5Fsijx0dlk9DwI5SAccbVH1xr+cq3Kc2dBOpUZMPj77nTrweiQKpGK x8lTORt8wpTGLH2l9OIN8WBf2G7nTonuznBxr2lBMmNqhBk7dcCG253vlVgItQiG NAI+y5CpXO5CHV52CdXyIJs6xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5nB63/ nrc2pdM67wjdUTugvRTdMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwtPyWUtWdX2drgOgTvLL2TUXjZIPfyAiUYWXzrM9BS/DaQPxWUGS8 GFavhT+mm/as9pvrpDm6vzt8k/gWlsJX5dFT5ZDLBqIT4pVfx2phFpNdhzY+/OZy A8OpsnCxXRqQiJOvKxZ1FD3HcMN6DLkSHurY5IWJ2WjyJwx6NRTRn6zyo+eTeMCt gV5fQ7jp7U1o81sseME1RsLzHA+0zfzvVFyMF8axAwKiM8stKow7F/L71RVpioQW DUw0RHsIpCIUWk0TpSz0eQSKar4yW5T9P952IgjI5DpNp3vO6Q9s31kFGpCBpF/M +qv8bn+rm5Ypddo2fgTWMbp9ScZLCzui -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:28 2025 by rpki-client