$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: XIt8ZDICBm/GsKp+aAEx2FISJWXRh2ZV1nIq6fU8rdk= Subject key identifier: 97:F1:DA:E4:00:6D:A6:53:44:D8:B2:6F:5F:09:C2:97:FB:F8:B6:B7 Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0DA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0D82 Signing time: Sun 02 Nov 2025 17:58:12 +0000 Manifest this update: Sun 02 Nov 2025 17:58:12 +0000 Manifest next update: Sun 09 Nov 2025 17:58:12 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: AnShnAqFQNFZ3cU0SOfLFWT2t0gWtO03f4V9VRX/BNo=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3491 (0xda3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1, serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Nov 2 17:58:12 2025 GMT Not After : Nov 9 17:58:12 2025 GMT Subject: CN=69079bb4-cb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:53:6b:d1:8d:b4:41:aa:c2:42:90:74:a7:c9: 97:c5:46:e2:2b:f6:2a:8e:1c:d5:94:77:14:db:39: 61:2c:b5:d2:53:1d:29:62:b2:15:f5:ff:9a:49:b4: bb:60:df:18:1a:ed:0d:e8:05:43:dc:fa:55:26:f3: c0:37:6c:d5:fa:7c:27:ae:b6:e6:45:b2:2f:71:4b: d5:f6:ac:04:c9:7d:44:c2:2e:0d:a3:b6:8b:c5:7a: cb:2a:fe:ed:de:f9:ee:81:88:08:d8:11:87:6c:34: ae:81:fc:a6:2a:9d:33:5f:f6:92:ee:c7:fc:85:0f: d6:82:0b:35:7b:ef:42:55:1e:cb:1d:71:f8:9d:db: 50:50:cc:f4:42:6d:b9:6b:7f:eb:f7:ff:fb:2f:18: 4e:fa:c3:c2:11:61:f0:0d:95:a8:2e:7c:e2:7c:0b: 95:77:b9:db:c6:11:d6:52:83:e5:9f:23:eb:cd:05: b9:bf:f6:e3:00:88:c4:70:db:58:31:b0:62:66:f6: 16:aa:3e:8d:0f:6f:34:e1:e1:f6:f5:2b:e7:a3:a3: 5b:d7:2f:2d:cf:0e:4e:84:99:e0:09:9e:c0:a8:5f: bb:fc:db:13:12:56:15:b7:bd:3b:77:4f:33:bd:a9: 5b:70:f6:f3:d5:04:a3:4d:93:db:b3:ba:77:73:e5: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F1:DA:E4:00:6D:A6:53:44:D8:B2:6F:5F:09:C2:97:FB:F8:B6:B7 X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:bc:a0:9f:f7:79:bc:cb:cd:8c:bc:16:53:f4:9d:88:b3:e9: 8a:2e:81:d4:4b:d6:89:d6:0d:b0:44:0d:b4:e0:3d:82:a4:ee: b2:c6:81:be:f8:d8:fc:8e:43:3b:b7:43:62:7c:e1:d0:60:22: 4d:96:72:9d:f7:05:50:e5:23:4b:6e:e5:f3:08:cb:c3:13:35: ac:2d:0c:b9:da:82:26:89:93:95:65:8f:6e:3f:4f:68:a5:6b: 80:86:7d:cc:8e:52:f8:46:53:e5:d8:98:71:81:de:71:53:42: 97:17:92:b8:1f:7d:78:f0:09:9b:54:40:a7:b1:6a:c4:bc:8d: e8:87:07:03:6a:33:c9:53:57:a8:ec:cd:d2:a6:c0:42:fd:d1: 92:a6:e4:10:33:f1:0e:7f:df:c2:65:98:e0:47:1d:8e:67:2b: 7a:09:22:0c:30:db:14:c7:b0:d5:dc:8a:8e:50:48:98:a4:df: 68:3d:db:e4:a0:55:d8:74:8f:69:84:cb:dc:09:f9:f2:e4:01: 67:43:b7:26:ad:00:4b:0a:7c:6d:b4:59:f6:fd:46:fb:86:c4: 26:7f:f0:61:97:23:95:3e:69:c6:1d:98:96:7e:ed:e6:fe:3d: db:10:4a:b9:d5:99:a7:d0:47:c1:b4:12:db:a5:06:13:87:c1: bd:fe:1f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjUxMTAyMTc1ODEyWhcNMjUxMTA5MTc1ODEyWjAYMRYwFAYD VQQDEw02OTA3OWJiNC1jYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VNr0Y20QarCQpB0p8mXxUbiK/YqjhzVlHcU2zlhLLXSUx0pYrIV9f+aSbS7 YN8YGu0N6AVD3PpVJvPAN2zV+nwnrrbmRbIvcUvV9qwEyX1Ewi4No7aLxXrLKv7t 3vnugYgI2BGHbDSugfymKp0zX/aS7sf8hQ/Wggs1e+9CVR7LHXH4ndtQUMz0Qm25 a3/r9//7LxhO+sPCEWHwDZWoLnzifAuVd7nbxhHWUoPlnyPrzQW5v/bjAIjEcNtY MbBiZvYWqj6ND2804eH29Svno6Nb1y8tzw5OhJngCZ7AqF+7/NsTElYVt707d08z valbcPbz1QSjTZPbs7p3c+WpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfx2uQA baZTRNiyb18Jwpf7+La3MB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHvKCf93m8y82MvBZT9J2Is+mKLoHUS9aJ1g2wRA204D2CpO6yxoG+ +Nj8jkM7t0NifOHQYCJNlnKd9wVQ5SNLbuXzCMvDEzWsLQy52oImiZOVZY9uP09o pWuAhn3MjlL4RlPl2Jhxgd5xU0KXF5K4H3148AmbVECnsWrEvI3ohwcDajPJU1eo 7M3SpsBC/dGSpuQQM/EOf9/CZZjgRx2OZyt6CSIMMNsUx7DV3IqOUEiYpN9oPdvk oFXYdI9phMvcCfny5AFnQ7cmrQBLCnxttFn2/Ub7hsQmf/BhlyOVPmnGHZiWfu3m /j3bEEq51Zmn0EfBtBLbpQYTh8G9/h/r -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:59 2025 by rpki-client