$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: Oqk1Fn+jhefnZUlkjbMua+Llwbf6v+hQRCqiFuwGXEk= Subject key identifier: 84:E8:D6:A4:0C:DD:C7:C6:2F:9F:14:F0:AA:F4:65:00:1B:DF:62:7B Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: B7 Signing time: Mon 03 Nov 2025 06:01:04 +0000 Manifest this update: Mon 03 Nov 2025 06:01:04 +0000 Manifest next update: Mon 10 Nov 2025 06:01:04 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: t67RQuxybnqGPyLZn6EbijNky7C4Vlm6QdjgIYcR8LM=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Nov 3 06:01:04 2025 GMT Not After : Nov 10 06:01:04 2025 GMT Subject: CN=69084520-32d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:63:0f:43:00:41:d4:4e:55:c2:f8:99:48: 29:6c:4d:cf:2e:0b:b9:bf:37:82:79:41:f0:3b:1f: 5c:6c:40:a2:34:c3:7f:8f:f6:21:3c:92:2f:e9:dd: b5:61:13:0b:6a:2b:d4:a5:74:bb:be:80:56:f7:13: e6:87:4b:cc:4d:8a:12:a7:25:4a:1d:d9:55:8a:05: a9:02:07:77:34:b4:70:e0:04:b2:d7:a0:68:26:16: d8:4f:15:87:29:d6:d2:8a:1a:6d:9d:9f:73:c1:a1: ed:21:a6:c1:d7:30:eb:56:4f:bc:72:30:51:d7:6b: 7f:eb:0b:38:c7:b7:b6:5d:00:e6:8e:38:22:58:4d: 50:d7:79:8d:75:46:2c:3f:0d:5b:cc:fa:f8:94:9a: 48:f0:8f:30:5a:c1:5d:3a:57:74:81:1c:1b:df:bd: a6:0d:33:07:4f:38:2a:cb:84:29:e2:31:73:fc:b0: 2e:61:1b:c9:1a:ca:6a:0e:2e:f3:65:f0:63:2c:04: e7:f7:5d:b4:49:6d:e3:ac:da:93:72:b6:4e:4e:dc: af:15:c1:23:a1:78:88:ce:52:9a:87:99:38:5d:a6: 4a:b0:0c:0d:63:b0:44:d6:a2:d4:51:e7:ad:86:4d: c0:88:24:cc:fd:99:3e:77:b8:16:4d:21:76:06:24: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E8:D6:A4:0C:DD:C7:C6:2F:9F:14:F0:AA:F4:65:00:1B:DF:62:7B X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:73:e7:79:75:f1:ba:09:e7:c2:50:0c:dd:c7:02:0f:39:69: 07:41:f1:69:c1:58:4b:bd:d3:44:fd:55:46:90:51:ea:7d:19: ee:5e:f0:ab:eb:af:fe:8e:70:92:ec:78:d9:72:55:b6:6f:ff: d7:75:b5:fe:f1:d1:c1:f1:f0:25:26:2b:a0:ea:12:ae:b1:e7: 9f:43:21:7d:48:da:48:99:dc:f7:0c:fc:08:5d:36:cc:a6:4d: 80:18:c6:e7:23:75:28:46:7c:e0:c0:82:ae:9f:b1:5f:c1:5b: 09:6c:71:a4:1d:54:09:72:d5:2e:ed:8f:b6:b9:0f:86:b4:5b: 7c:8f:b6:f2:6c:4d:24:8c:84:e7:cb:1c:91:13:a1:1d:51:c8: c7:9a:8e:ca:8e:75:43:d6:0e:76:f9:6a:ab:95:d7:e2:4c:b6: 46:db:0c:8b:3a:37:77:80:6f:c6:7d:a3:c5:ca:94:59:fb:2f: 1c:29:99:ce:65:14:ed:6a:92:df:ea:72:6b:76:c9:66:85:70: a2:93:bb:cb:7c:0a:a6:58:dd:4d:7a:ed:0c:05:fe:97:83:0f: b7:b5:68:a8:68:0b:87:33:10:54:52:ba:9e:de:94:da:a9:1d: 11:23:09:36:c7:09:68:38:33:e1:e0:48:48:41:12:b0:1c:2e: b8:54:23:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjUxMTAzMDYwMTA0WhcNMjUxMTEwMDYwMTA0WjAYMRYwFAYD VQQDEw02OTA4NDUyMC0zMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvJjD0MAQdROVcL4mUgpbE3PLgu5vzeCeUHwOx9cbECiNMN/j/YhPJIv6d21 YRMLaivUpXS7voBW9xPmh0vMTYoSpyVKHdlVigWpAgd3NLRw4ASy16BoJhbYTxWH KdbSihptnZ9zwaHtIabB1zDrVk+8cjBR12t/6ws4x7e2XQDmjjgiWE1Q13mNdUYs Pw1bzPr4lJpI8I8wWsFdOld0gRwb372mDTMHTzgqy4Qp4jFz/LAuYRvJGspqDi7z ZfBjLATn9120SW3jrNqTcrZOTtyvFcEjoXiIzlKah5k4XaZKsAwNY7BE1qLUUeet hk3AiCTM/Zk+d7gWTSF2BiSkSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITo1qQM 3cfGL58U8Kr0ZQAb32J7MB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3c+d5dfG6CefCUAzdxwIPOWkHQfFpwVhLvdNE/VVGkFHqfRnuXvCr 66/+jnCS7HjZclW2b//XdbX+8dHB8fAlJiug6hKuseefQyF9SNpImdz3DPwIXTbM pk2AGMbnI3UoRnzgwIKun7FfwVsJbHGkHVQJctUu7Y+2uQ+GtFt8j7bybE0kjITn yxyRE6EdUcjHmo7KjnVD1g52+WqrldfiTLZG2wyLOjd3gG/GfaPFypRZ+y8cKZnO ZRTtapLf6nJrdslmhXCik7vLfAqmWN1Neu0MBf6Xgw+3tWioaAuHMxBUUrqe3pTa qR0RIwk2xwloODPh4EhIQRKwHC64VCMT -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:37 2025 by rpki-client