$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: ps1aQR3mo5qF9sbe3iF1xRPTIQrdfhOgnmX0V9GLZfk= Subject key identifier: 53:CF:1C:CE:F1:F4:40:1C:68:9D:86:F5:E9:FC:DF:90:72:9F:C5:7E Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 0472 Signing time: Mon 03 Nov 2025 00:45:00 +0000 Manifest this update: Mon 03 Nov 2025 00:45:00 +0000 Manifest next update: Mon 10 Nov 2025 00:44:59 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: cAqkVpoZAqYqzg9jcS0czY4Xm+IE37veLPc+oruF6FY=) 2: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: sMRcWxChssn3H6D5qaChgdxh5gtjwzzrdc1dGQbN5+A=) 3: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: fEN+oTiCJkPlQnC5jC4xqdZ5XVmm/ET62fXwuVJ80pk=) 4: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: vtLz424RDUbODXXpI7aufILsZ9HU4RZ81pkVr53F9BU=) 5: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: ePNogPPVbGEkJuQw5T0SxqhH/K2mvmcxCKSGqMSN+yc=) 6: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: B2iTPnMxaly9ld+4G5qhnu/Dw0b6DsRttSqT1fc5gtg=) 7: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: z+J6k2WSDwVmDdFI9w7THPPX/Q7RFUW9LZQWuJzZEcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:45:00 2025 GMT Not After : Nov 10 00:44:59 2025 GMT Subject: CN=6907fb0c-7e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:24:d9:0d:11:c7:28:9e:17:f1:20:e5:9e: 96:d4:6b:92:8c:09:a7:d3:42:11:d4:6a:bc:6b:45: fa:ff:9b:06:be:24:30:00:60:9d:47:d0:27:33:01: e4:18:c3:aa:33:6b:83:16:82:ea:ee:cf:d3:fc:75: 49:a5:ae:6f:f3:d3:84:14:47:a4:a0:89:0e:eb:3c: e5:a9:8a:20:9d:83:2f:1c:dc:f3:36:f6:89:b7:d1: 09:8d:4b:54:e4:53:0c:f6:3e:28:69:18:69:d5:a5: e8:fa:46:cb:d4:a8:74:4a:f1:93:d7:15:e6:3b:79: d3:24:75:2d:1c:c3:87:4e:f2:bb:30:25:47:0a:be: 63:6e:a4:bf:98:c7:8f:79:5d:17:7c:8c:4b:c2:a7: a8:65:b9:70:85:1b:55:88:6c:d7:2a:ea:56:41:20: 98:a6:52:f7:5a:bb:c0:17:00:b3:47:e9:73:e8:22: 91:d3:33:8b:39:9c:68:d1:f8:c0:14:93:cf:fe:de: d7:60:68:1d:e9:50:a8:06:57:7b:59:5d:37:a4:7b: c2:34:f3:07:ab:bb:86:d2:be:cd:a5:70:a3:fa:35: 03:ec:e1:35:cc:54:6d:bc:86:ae:33:6f:31:cc:4d: ab:1c:8e:ec:5a:49:6b:e3:0c:2f:d1:7d:77:4a:a8: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:1C:CE:F1:F4:40:1C:68:9D:86:F5:E9:FC:DF:90:72:9F:C5:7E X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:97:24:2f:7e:7b:81:cb:9f:5c:d0:b7:c1:71:8c:16:1b:3c: a3:67:3e:45:5c:2f:75:e0:61:c6:62:ea:95:4e:ac:7c:f6:c9: d7:1c:52:fd:6f:c6:5b:60:e1:52:9d:11:35:cd:a9:a3:ee:e9: 32:99:e1:97:dd:b0:47:e2:a2:64:14:9e:60:0e:cd:bd:99:7c: 79:c1:f1:09:f0:f4:03:88:53:cc:ba:e3:a5:1e:19:88:10:e8: da:3d:5b:4b:a8:ce:5d:19:3c:7c:3f:a3:5c:56:71:a1:fb:e8: 7b:83:05:74:0b:cb:2c:3d:45:7a:ea:0e:b7:15:18:ab:fe:87: 2a:f4:ee:36:ca:eb:f0:35:fb:02:b2:e4:59:47:25:4d:18:ec: a3:31:68:65:b3:a6:c2:e8:0c:45:dd:71:22:63:db:c7:1d:70: f4:4c:59:83:a4:c0:88:d6:90:54:7c:12:7b:ad:35:29:79:f0: 4b:aa:80:f7:ab:65:4c:fc:9e:dd:5f:3f:04:9e:c4:c3:6e:08: 0b:63:9f:2f:15:45:b9:96:c3:82:8e:a2:4e:b4:2f:02:ee:3a: 83:89:e5:6c:fb:95:09:42:2a:b1:fa:d7:fb:a8:d4:44:b8:79: 1b:42:48:fd:24:56:51:f6:1a:ac:72:62:9a:5c:6d:9a:7b:4d: 12:f3:d6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUxMTAzMDA0NTAwWhcNMjUxMTEwMDA0NDU5WjAYMRYwFAYD VQQDEw02OTA3ZmIwYy03ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOMk2Q0RxyieF/Eg5Z6W1GuSjAmn00IR1Gq8a0X6/5sGviQwAGCdR9AnMwHk GMOqM2uDFoLq7s/T/HVJpa5v89OEFEekoIkO6zzlqYognYMvHNzzNvaJt9EJjUtU 5FMM9j4oaRhp1aXo+kbL1Kh0SvGT1xXmO3nTJHUtHMOHTvK7MCVHCr5jbqS/mMeP eV0XfIxLwqeoZblwhRtViGzXKupWQSCYplL3WrvAFwCzR+lz6CKR0zOLOZxo0fjA FJPP/t7XYGgd6VCoBld7WV03pHvCNPMHq7uG0r7NpXCj+jUD7OE1zFRtvIauM28x zE2rHI7sWklr4wwv0X13SqgzDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPPHM7x 9EAcaJ2G9en835Byn8V+MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDClyQvfnuBy59c0LfBcYwWGzyjZz5FXC914GHGYuqVTqx89snXHFL9 b8ZbYOFSnRE1zamj7ukymeGX3bBH4qJkFJ5gDs29mXx5wfEJ8PQDiFPMuuOlHhmI EOjaPVtLqM5dGTx8P6NcVnGh++h7gwV0C8ssPUV66g63FRir/ocq9O42yuvwNfsC suRZRyVNGOyjMWhls6bC6AxF3XEiY9vHHXD0TFmDpMCI1pBUfBJ7rTUpefBLqoD3 q2VM/J7dXz8EnsTDbggLY58vFUW5lsOCjqJOtC8C7jqDieVs+5UJQiqx+tf7qNRE uHkbQkj9JFZR9hqscmKaXG2ae00S89YC -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:13 2025 by rpki-client