$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: MNXiseuS4a87I0B4/UH7Oifh8nFhwb/EP2ZaeHWTBPs= Subject key identifier: 33:43:CB:FF:FB:0A:16:7A:38:3D:8B:E3:CD:02:1A:E0:3C:77:6D:1A Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0C98 Signing time: Sun 02 Nov 2025 18:17:58 +0000 Manifest this update: Sun 02 Nov 2025 18:17:58 +0000 Manifest next update: Sun 09 Nov 2025 18:17:58 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: Ed7QpMWW+W0NjaLmMrKT51cE3BVpb9iWDWeEcR5Kbxk=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Nov 2 18:17:58 2025 GMT Not After : Nov 9 18:17:58 2025 GMT Subject: CN=6907a056-fb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:1d:9a:3c:68:28:07:f4:9e:09:e7:ac:32: 83:fa:e6:f6:59:c4:37:5c:40:2f:d4:70:a7:b5:0c: d3:c9:43:5c:82:a5:f4:c4:b0:ee:33:46:c1:53:ed: 23:1a:ad:27:66:c7:98:3f:46:4d:b3:fc:96:59:b6: 0b:b9:bb:3d:a8:e0:eb:54:1d:c2:9b:db:e8:b4:31: e6:9f:98:0d:5a:2b:6a:8a:54:6b:c1:4d:4d:11:e3: 70:d3:a2:49:94:61:e1:cb:cd:90:d1:2d:77:68:74: fc:83:fd:36:19:d6:67:36:34:41:50:7c:f5:21:a9: 64:4d:3c:31:1d:f4:da:5f:e7:a9:7c:25:a6:a3:6c: 93:85:95:87:28:06:fc:08:cc:f3:c0:2e:7a:74:e7: 3c:ed:06:9f:31:af:28:23:c1:9a:f8:90:09:14:fe: 41:ff:5f:97:8f:b6:57:fd:b0:dc:6c:0a:fb:d8:34: 71:75:01:49:4e:b2:49:05:ac:5f:be:1d:0e:15:dc: fc:68:5a:87:ca:25:1f:34:44:95:bf:f5:62:ff:c3: 93:ae:25:21:76:8b:d6:b9:a2:62:94:d6:b5:35:e2: 72:2c:9e:9a:6f:59:e4:59:86:88:1b:d5:5b:8a:13: d0:5e:1e:32:d7:22:98:fa:df:d2:58:e0:e4:38:d8: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:43:CB:FF:FB:0A:16:7A:38:3D:8B:E3:CD:02:1A:E0:3C:77:6D:1A X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4c:f8:f1:2e:a4:dc:23:6b:4a:ef:ae:f0:ff:a1:47:de:5c: 19:0a:5e:19:04:38:cf:e2:10:20:b0:bd:7e:ba:58:32:dc:11: e6:ce:3c:20:86:71:64:be:39:b7:29:e5:d8:b2:54:42:85:1f: 37:c6:6e:46:16:13:07:45:58:61:0b:41:6b:62:23:e3:b0:47: da:e4:f0:43:2b:12:28:e2:e0:f5:8c:44:37:2c:21:aa:5f:ee: 42:80:4d:14:6e:34:f8:de:91:76:f8:70:04:62:fc:dd:e0:37: 37:8b:3c:f9:86:f0:22:18:81:a2:4c:14:0d:f6:b0:ec:fd:9f: aa:3d:b9:6a:1b:c8:94:c4:c0:9e:b4:be:a0:da:97:72:a8:ba: 1b:ac:db:38:dd:79:93:86:bf:43:3f:0d:28:e7:9b:2d:0d:45: ef:e7:f5:21:98:80:15:c3:f5:b4:44:2e:19:6b:21:37:ff:3c: de:5f:0e:fb:5c:82:3a:5d:72:cd:2e:62:ec:c7:0a:a6:20:13: 73:42:1d:84:08:0d:91:2a:76:3b:ac:55:34:4d:13:79:d2:77: d5:7d:52:fe:92:61:45:d1:0e:1b:02:53:36:c2:8b:59:f8:3a: b3:9c:af:54:64:dd:92:b9:c0:b3:87:dd:2d:c8:d6:11:db:91: 83:f0:3d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUxMTAyMTgxNzU4WhcNMjUxMTA5MTgxNzU4WjAYMRYwFAYD VQQDEw02OTA3YTA1Ni1mYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkkdmjxoKAf0ngnnrDKD+ub2WcQ3XEAv1HCntQzTyUNcgqX0xLDuM0bBU+0j Gq0nZseYP0ZNs/yWWbYLubs9qODrVB3Cm9votDHmn5gNWitqilRrwU1NEeNw06JJ lGHhy82Q0S13aHT8g/02GdZnNjRBUHz1IalkTTwxHfTaX+epfCWmo2yThZWHKAb8 CMzzwC56dOc87QafMa8oI8Ga+JAJFP5B/1+Xj7ZX/bDcbAr72DRxdQFJTrJJBaxf vh0OFdz8aFqHyiUfNESVv/Vi/8OTriUhdovWuaJilNa1NeJyLJ6ab1nkWYaIG9Vb ihPQXh4y1yKY+t/SWODkONjJ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNDy//7 ChZ6OD2L480CGuA8d20aMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhTPjxLqTcI2tK767w/6FH3lwZCl4ZBDjP4hAgsL1+ulgy3BHmzjwg hnFkvjm3KeXYslRChR83xm5GFhMHRVhhC0FrYiPjsEfa5PBDKxIo4uD1jEQ3LCGq X+5CgE0UbjT43pF2+HAEYvzd4Dc3izz5hvAiGIGiTBQN9rDs/Z+qPblqG8iUxMCe tL6g2pdyqLobrNs43XmThr9DPw0o55stDUXv5/UhmIAVw/W0RC4ZayE3/zzeXw77 XII6XXLNLmLsxwqmIBNzQh2ECA2RKnY7rFU0TRN50nfVfVL+kmFF0Q4bAlM2wotZ +DqznK9UZN2SucCzh90tyNYR25GD8D2G -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:59 2025 by rpki-client