$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft File: znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json) Hash identifier: CgwGN+tDl8gdse0umjw3+mW49OpUqCjjzey7nQXHTEY= Subject key identifier: 74:A6:D7:5E:9E:51:2E:F4:D9:E5:4F:C0:1E:3A:B5:7D:78:C8:29:1D Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Certificate serial: 0893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft Manifest number: 0871 Signing time: Tue 04 Nov 2025 20:46:03 +0000 Manifest this update: Tue 04 Nov 2025 20:46:02 +0000 Manifest next update: Tue 11 Nov 2025 20:46:02 +0000 Files and hashes: 1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: vq8ZAKM++m5SIOSDvKng/ewAuHsedwgBxOdPwUgkuGE=) 2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: V9wdh8jyKUELoyH3ltxRaciIlStsT6ht66mAyTIa1HI=) 3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: Fa6SdUbTPUudXOpSSwXnBEDK9cTtldS1jBd7HoHcy+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Validity Not Before: Nov 4 20:46:02 2025 GMT Not After : Nov 11 20:46:02 2025 GMT Subject: CN=690a660b-ae33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:79:34:5c:15:f7:79:a0:10:2e:75:98:7e: 30:d4:ea:ca:ae:e7:6b:41:ab:56:f5:45:c2:04:03: 61:87:6e:64:18:9d:a0:10:35:e3:ce:61:b8:08:08: d4:dd:c2:53:b8:69:75:fb:83:6d:1f:82:9e:13:68: 95:85:a0:78:f2:62:6c:db:11:e8:da:3c:f9:73:21: a7:dd:ce:94:8e:6f:fb:6d:97:b5:8b:d6:4b:b4:0b: a4:92:ec:41:c4:d3:f3:ef:0c:b1:9e:77:2b:2d:57: 8f:aa:8c:04:1d:4c:0e:1d:5c:0d:03:cf:db:38:26: 30:3e:8e:e6:7f:85:4d:1e:79:70:91:2c:56:9c:42: c4:73:7c:87:a2:b1:3d:7b:b6:b1:d1:37:3e:6a:3f: a2:a1:2d:e1:84:27:11:2b:7b:8f:15:cb:e0:76:5c: 78:1b:33:b7:5e:97:53:c9:29:be:4d:9d:d9:19:07: 0a:c7:96:85:19:e4:f4:26:0a:28:ac:9e:a6:9d:18: c2:5f:a3:86:e2:7c:15:4b:83:36:e6:29:70:f3:57: 91:e2:e6:2d:2d:01:f3:b7:f4:c6:48:7c:48:30:1e: 0d:3b:e5:8f:fc:38:28:32:7e:9b:86:d8:f6:e8:3c: 60:09:18:5c:11:05:79:d5:e5:1e:8e:e7:bc:99:4a: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A6:D7:5E:9E:51:2E:F4:D9:E5:4F:C0:1E:3A:B5:7D:78:C8:29:1D X509v3 Authority Key Identifier: keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bb:f8:76:35:3a:51:ae:4c:76:8c:94:09:e2:2a:71:40:6d: 77:02:50:7a:72:0d:dc:a5:03:83:e5:30:80:eb:b8:f8:f8:1a: d3:3d:f0:2f:00:fd:25:03:be:a7:d0:cb:3d:56:2a:01:19:eb: cf:9d:6d:94:ae:08:41:86:10:c3:d6:17:f8:e5:aa:58:9c:ab: 5c:8e:5d:b6:72:7d:30:6f:ed:44:d7:3f:e1:71:87:b5:6c:04: 57:20:75:47:6c:1d:68:5c:58:5e:64:73:70:df:57:58:47:f8: 83:a8:ec:39:22:ad:dd:a5:8c:b0:60:90:af:f3:d9:78:c8:a5: 2f:eb:c8:cd:3f:a7:38:05:7e:c5:12:da:d1:e5:91:06:99:f5: 80:86:45:04:1d:5d:3a:0d:a2:90:76:67:1f:7b:8c:77:cb:10: d3:a2:bf:4c:5a:af:39:0c:34:b3:3c:e3:a7:a2:85:7b:5f:eb: 78:b8:66:13:37:92:0f:82:de:86:6b:ae:54:9c:05:86:1f:f5: 9c:b5:da:0e:fb:50:16:c5:0d:9f:44:3d:fa:14:fd:f8:55:ec: a9:99:d8:b8:97:8a:53:27:2f:db:40:19:e0:e6:80:96:80:dc: 0f:14:04:42:1e:3b:7c:f8:33:a5:b0:02:8a:1c:b0:a0:5c:d2: 49:91:53:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE NUY5Q0I3MzUwHhcNMjUxMTA0MjA0NjAyWhcNMjUxMTExMjA0NjAyWjAYMRYwFAYD VQQDEw02OTBhNjYwYi1hZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux55NFwV93mgEC51mH4w1OrKrudrQatW9UXCBANhh25kGJ2gEDXjzmG4CAjU 3cJTuGl1+4NtH4KeE2iVhaB48mJs2xHo2jz5cyGn3c6Ujm/7bZe1i9ZLtAukkuxB xNPz7wyxnncrLVePqowEHUwOHVwNA8/bOCYwPo7mf4VNHnlwkSxWnELEc3yHorE9 e7ax0Tc+aj+ioS3hhCcRK3uPFcvgdlx4GzO3XpdTySm+TZ3ZGQcKx5aFGeT0Jgoo rJ6mnRjCX6OG4nwVS4M25ilw81eR4uYtLQHzt/TGSHxIMB4NO+WP/DgoMn6bhtj2 6DxgCRhcEQV51eUejue8mUoSyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSm116e US702eVPwB46tX14yCkdMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTQxNS9CQzY2MTA2RUREOTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2 SFB3MFdNVFI2UWpWLWN0elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbu/h2NTpRrkx2jJQJ4ipxQG13AlB6cg3cpQOD5TCA67j4+BrTPfAv AP0lA76n0Ms9VioBGevPnW2UrghBhhDD1hf45apYnKtcjl22cn0wb+1E1z/hcYe1 bARXIHVHbB1oXFheZHNw31dYR/iDqOw5Iq3dpYywYJCv89l4yKUv68jNP6c4BX7F EtrR5ZEGmfWAhkUEHV06DaKQdmcfe4x3yxDTor9MWq85DDSzPOOnooV7X+t4uGYT N5IPgt6Ga65UnAWGH/WctdoO+1AWxQ2fRD36FP34Veypmdi4l4pTJy/bQBng5oCW gNwPFARCHjt8+DOlsAKKHLCgXNJJkVMg -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:28 2025 by rpki-client