$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: DR/sa1rtUZVQ89w4u43HVTfYeltF+gN1uQgQiI2i3mI= Subject key identifier: 21:95:B8:C9:44:17:14:BE:D6:44:03:D5:2A:4D:C9:95:E8:FD:3F:0D Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 048F Signing time: Mon 03 Nov 2025 00:04:11 +0000 Manifest this update: Mon 03 Nov 2025 00:04:10 +0000 Manifest next update: Mon 10 Nov 2025 00:04:10 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: RRrxaY+vOYCJWHVao9gzHSEYwKdP4Pvincq1vu7T3jU=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Nov 3 00:04:10 2025 GMT Not After : Nov 10 00:04:10 2025 GMT Subject: CN=6907f17a-e399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:8b:cd:11:0d:5c:7a:da:17:35:34:13:06: f7:eb:ad:f6:e3:32:75:90:65:10:e2:24:fe:71:53: 44:a9:ea:0d:50:e5:ba:13:c5:53:f2:85:30:e4:c1: f1:ca:52:a6:12:d9:de:20:96:b0:b0:97:d3:a5:f5: e5:1d:17:cf:e1:cc:df:f1:23:b6:da:61:6f:96:cc: 6a:62:55:0a:5f:dd:cd:5c:03:0e:cd:17:41:00:03: 1b:d1:a8:87:43:06:2e:25:42:ce:05:d6:0e:fa:bf: 9a:64:b6:a1:10:de:a6:8b:64:fa:d1:11:ac:76:8b: 25:36:54:f2:a5:48:a9:ed:73:86:d2:0b:ef:cf:c5: eb:16:f5:cd:05:16:ca:36:d0:57:e8:11:bd:c7:4c: de:fb:d2:30:22:32:95:2f:ca:a3:ba:12:52:52:f0: 60:02:5b:02:48:03:f2:ad:20:16:09:5a:17:5d:2a: a0:5f:1f:69:cc:76:eb:bc:7d:5a:b1:4d:f3:d2:98: 51:ac:93:76:7b:72:f5:de:b0:1c:78:6d:ad:24:8b: df:35:36:4d:81:44:24:42:0b:0a:73:f8:18:c1:d1: 5a:d3:7f:64:63:d0:b7:7f:62:30:3e:e2:f0:81:1b: e5:74:67:d0:a1:a0:90:0d:0b:63:ad:29:e9:b7:53: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:B8:C9:44:17:14:BE:D6:44:03:D5:2A:4D:C9:95:E8:FD:3F:0D X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9f:a2:4a:a7:8c:e8:a1:e8:12:04:95:3e:73:65:77:71:71: 56:f3:a7:70:6a:a8:1d:13:3b:32:db:99:c1:9a:5f:30:dc:8c: d0:54:81:c3:d2:90:e6:3c:e1:9d:0e:2d:98:6e:6b:9f:c6:ca: 64:81:a5:83:68:26:60:7d:56:a0:a0:dc:e8:93:77:68:72:ed: 8d:51:bc:bc:15:0c:ba:b2:e6:d6:b6:7d:58:9d:47:cd:72:0c: b9:25:f6:47:11:d6:44:41:50:21:39:b3:ee:aa:7e:a3:fd:44: 62:06:62:71:2a:f3:5e:e3:f6:d1:d1:f6:8f:1f:0a:f7:b5:79: be:f8:6a:c3:a3:25:17:ed:a1:df:ad:c1:a5:98:12:f3:7e:fe: 0e:2a:75:73:81:24:c4:ab:ac:19:07:9d:5f:1a:b8:1c:8e:ae: 6f:c7:4c:8b:ca:a5:46:1d:8e:a1:f1:68:6d:2e:be:08:12:f9: 8b:88:96:59:a0:8a:00:70:ae:b2:9f:79:df:68:5e:67:40:f8: 16:f2:e3:d8:0e:99:60:6c:37:c4:9d:ff:5a:b7:3a:5f:3b:6e: 52:aa:e5:ee:f3:77:4b:9b:e7:08:61:5a:29:53:6b:22:3f:58: 26:62:7d:5a:e2:3c:a3:4b:1b:82:eb:8f:b9:75:7c:f3:9e:54: 67:55:e6:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUxMTAzMDAwNDEwWhcNMjUxMTEwMDAwNDEwWjAYMRYwFAYD VQQDEw02OTA3ZjE3YS1lMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniqLzRENXHraFzU0Ewb366324zJ1kGUQ4iT+cVNEqeoNUOW6E8VT8oUw5MHx ylKmEtneIJawsJfTpfXlHRfP4czf8SO22mFvlsxqYlUKX93NXAMOzRdBAAMb0aiH QwYuJULOBdYO+r+aZLahEN6mi2T60RGsdoslNlTypUip7XOG0gvvz8XrFvXNBRbK NtBX6BG9x0ze+9IwIjKVL8qjuhJSUvBgAlsCSAPyrSAWCVoXXSqgXx9pzHbrvH1a sU3z0phRrJN2e3L13rAceG2tJIvfNTZNgUQkQgsKc/gYwdFa039kY9C3f2IwPuLw gRvldGfQoaCQDQtjrSnpt1NVCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGVuMlE FxS+1kQD1SpNyZXo/T8NMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3n6JKp4zooegSBJU+c2V3cXFW86dwaqgdEzsy25nBml8w3IzQVIHD 0pDmPOGdDi2YbmufxspkgaWDaCZgfVagoNzok3docu2NUby8FQy6subWtn1YnUfN cgy5JfZHEdZEQVAhObPuqn6j/URiBmJxKvNe4/bR0faPHwr3tXm++GrDoyUX7aHf rcGlmBLzfv4OKnVzgSTEq6wZB51fGrgcjq5vx0yLyqVGHY6h8WhtLr4IEvmLiJZZ oIoAcK6yn3nfaF5nQPgW8uPYDplgbDfEnf9atzpfO25SquXu83dLm+cIYVopU2si P1gmYn1a4jyjSxuC64+5dXzznlRnVeYu -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:41 2025 by rpki-client