$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: 5jDGC+zBtOiV8O/8gJ47W6woZbSv6b8FgWOtSORZ+gw= Subject key identifier: 82:7F:0F:9F:1B:90:2D:81:B7:53:C7:1E:B2:36:1C:F8:AF:A4:81:B2 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 8E Signing time: Wed 05 Nov 2025 06:51:56 +0000 Manifest this update: Wed 05 Nov 2025 06:51:56 +0000 Manifest next update: Wed 12 Nov 2025 06:51:56 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: a4E5dzAauls2wsqFxWcTFCvXmtiM1LjgQ+3M3Z+e8kc=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Nov 5 06:51:56 2025 GMT Not After : Nov 12 06:51:56 2025 GMT Subject: CN=690af40c-1701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:6e:5f:35:98:f3:e7:e9:4e:71:e1:e4:09: 00:88:9f:fb:5c:5f:30:5c:56:e1:57:f2:b3:15:91: 7a:70:eb:7a:ee:17:ed:9c:32:a4:2d:2e:e5:49:71: ab:c0:2b:18:9d:1a:12:e1:39:ae:bf:3b:e6:28:cc: 4e:5a:ea:25:ae:cb:dd:1d:2a:30:cb:a6:c3:a5:64: 4b:20:54:71:d6:75:5a:2f:ca:ac:3b:ea:6b:2e:0f: e8:9e:58:fe:6e:b5:8c:eb:68:e0:97:d4:23:64:2b: 35:d5:eb:7b:fc:cc:40:ba:02:bc:05:98:7a:ad:22: 3e:18:fd:c6:af:aa:f3:11:01:da:4f:1e:3e:31:9b: 77:30:b0:39:56:4c:6f:fd:67:33:58:59:04:e6:8c: 4f:6a:bf:f0:80:2d:c3:fc:b9:68:f7:e6:be:14:c2: 04:63:4e:0c:6a:f6:40:11:61:5b:cf:10:96:9f:0b: fa:c9:9c:a3:67:fd:24:44:6a:54:77:ce:d4:97:bd: 60:71:f4:02:f2:f1:55:89:a3:b0:41:da:f7:38:c7: df:0a:59:55:4d:ce:cd:b9:fb:bf:c9:a3:3a:d9:06: 63:58:d5:4e:e3:2f:e8:24:81:e0:53:cb:ba:7d:10: 51:dc:d9:c9:70:76:15:18:fd:d7:9c:f7:0d:db:9d: ee:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7F:0F:9F:1B:90:2D:81:B7:53:C7:1E:B2:36:1C:F8:AF:A4:81:B2 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:79:58:ff:75:8f:c3:a7:64:2d:d3:cd:f7:be:2c:1a:14:21: 6f:2e:51:b7:72:79:43:ab:c8:68:c2:ef:ae:2d:f1:4a:98:e9: 92:03:83:c7:1f:6c:03:37:91:ea:96:2b:76:32:5f:59:78:02: 75:11:8a:a2:7a:63:a5:4e:e7:db:06:42:42:d4:6a:27:ac:66: 52:41:04:9d:45:94:cd:8b:af:5e:48:46:db:88:af:24:01:c8: a3:b3:b2:cc:0c:5f:4f:52:30:17:ec:db:4a:68:58:3b:4a:2e: db:77:4d:d9:66:37:a3:90:97:6f:fa:85:5d:a7:57:5d:35:f7: 59:0e:50:97:d0:5d:98:cb:74:5c:6a:aa:f9:e2:1c:3e:ec:9a: 76:3d:1c:19:dd:f0:d6:f5:dc:27:c1:44:bf:47:9a:3a:58:6e: 3b:13:e1:c1:e9:33:90:39:6c:50:60:71:b8:94:ef:c7:a7:b0: 2e:1c:35:d8:f5:38:c1:8f:32:e6:54:01:b3:ca:71:ba:15:14: 64:2e:9f:49:a6:35:40:50:1f:5f:72:14:07:02:df:fd:d7:63: 2f:17:cb:bb:88:22:c3:8a:2c:96:5c:fd:2f:19:46:e3:df:54: b5:11:3c:7d:cf:94:ec:5f:f9:cc:55:7c:21:c3:fa:fd:83:aa: 7c:21:3d:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjUxMTA1MDY1MTU2WhcNMjUxMTEyMDY1MTU2WjAYMRYwFAYD VQQDEw02OTBhZjQwYy0xNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rNuXzWY8+fpTnHh5AkAiJ/7XF8wXFbhV/KzFZF6cOt67hftnDKkLS7lSXGr wCsYnRoS4TmuvzvmKMxOWuolrsvdHSowy6bDpWRLIFRx1nVaL8qsO+prLg/onlj+ brWM62jgl9QjZCs11et7/MxAugK8BZh6rSI+GP3Gr6rzEQHaTx4+MZt3MLA5Vkxv /WczWFkE5oxPar/wgC3D/Llo9+a+FMIEY04MavZAEWFbzxCWnwv6yZyjZ/0kRGpU d87Ul71gcfQC8vFViaOwQdr3OMffCllVTc7Nufu/yaM62QZjWNVO4y/oJIHgU8u6 fRBR3NnJcHYVGP3XnPcN253usQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ/D58b kC2Bt1PHHrI2HPivpIGyMB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCleVj/dY/Dp2Qt0833viwaFCFvLlG3cnlDq8howu+uLfFKmOmSA4PH H2wDN5Hqlit2Ml9ZeAJ1EYqiemOlTufbBkJC1GonrGZSQQSdRZTNi69eSEbbiK8k Acijs7LMDF9PUjAX7NtKaFg7Si7bd03ZZjejkJdv+oVdp1ddNfdZDlCX0F2Yy3Rc aqr54hw+7Jp2PRwZ3fDW9dwnwUS/R5o6WG47E+HB6TOQOWxQYHG4lO/Hp7AuHDXY 9TjBjzLmVAGzynG6FRRkLp9JpjVAUB9fchQHAt/912MvF8u7iCLDiiyWXP0vGUbj 31S1ETx9z5TsX/nMVXwhw/r9g6p8IT3m -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:59 2025 by rpki-client