$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: WANEIFZiswWHl2cptpw0mxX9AH4Hi/qBuFYg6C1+IgI= Subject key identifier: AD:67:BE:31:0B:5E:32:B0:93:5E:6D:A5:27:2C:29:72:B6:91:12:BE Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 0372 Signing time: Wed 05 Nov 2025 00:58:21 +0000 Manifest this update: Wed 05 Nov 2025 00:58:20 +0000 Manifest next update: Wed 12 Nov 2025 00:58:20 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: e+XB+/to4l1S5XU8s/CZaHvxGmkgYBuZ59vGaWFH6lY=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: uq2UtIcvHFOXxicW+V2m6gHu891OMQA/M+oL5jc7QTE=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: 35hCo0g/r7FxI8+/jeqVhnAOkZ//we7adpPQGUSCnXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: Nov 5 00:58:20 2025 GMT Not After : Nov 12 00:58:20 2025 GMT Subject: CN=690aa12c-80ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:a0:61:f5:ce:32:8a:a9:8b:fb:e0:e5:d9: ff:49:30:54:2d:0f:e3:ca:02:f2:a3:31:86:51:12: e3:cb:cd:26:2b:8f:35:45:ee:6b:f8:10:49:6d:dc: 4e:64:f9:f9:92:00:18:9b:62:67:2f:2e:57:f2:1a: 29:a1:c2:02:5b:97:cc:41:c7:ad:30:7c:de:c3:ad: 66:e0:57:c1:9a:1e:55:15:a1:62:4f:91:d1:d5:23: 7f:e5:4f:e2:fa:c5:e2:8e:c6:e5:18:dd:64:3e:4a: 5c:fa:8f:01:08:b4:29:b8:a2:d8:f9:fb:50:09:01: ab:0c:e1:f2:80:c6:22:5e:9b:a7:95:b1:ac:54:0b: 9f:f8:56:a0:51:bc:f6:69:c5:08:b0:74:0a:12:59: ae:d6:f5:56:5a:dd:86:b8:36:34:55:55:99:f9:5e: ed:dc:ab:4a:c0:58:70:5c:5b:05:67:5d:e6:aa:07: 9f:3f:11:95:cb:1d:2a:95:d5:8c:f9:04:2a:97:74: 70:82:6d:70:61:1f:08:b7:a9:c8:7b:16:3d:74:d3: 3c:8b:82:1e:57:b4:d9:a7:94:63:7a:8a:b0:1a:f6: 5b:b9:15:7d:ac:89:96:4e:78:09:9b:db:dd:c8:09: 18:75:8a:b8:c8:80:75:f4:4f:3c:2b:c0:cb:97:9f: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:67:BE:31:0B:5E:32:B0:93:5E:6D:A5:27:2C:29:72:B6:91:12:BE X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4c:e5:1e:79:d9:17:71:f3:ba:b8:7e:6b:e3:c1:df:f1:3c: 28:6c:86:cc:0b:de:f2:21:f7:79:b8:34:5e:a9:30:84:71:67: d6:c2:dc:3a:5a:3c:5b:7e:d0:70:8d:c1:58:79:96:41:73:ce: d4:d8:4e:f8:4c:15:ee:e5:ea:b0:36:c6:bf:27:03:c5:83:ed: cc:b9:01:b7:25:29:19:ff:c0:75:88:f5:06:c7:89:eb:8e:2d: df:1f:60:ff:f8:e3:14:b7:3c:9b:86:c9:b4:23:d9:3e:77:cc: 33:5f:17:a0:77:88:77:49:ed:8f:a2:60:01:2d:7d:59:2e:a2: 03:de:a5:0d:ca:28:c3:2d:f4:72:db:21:a2:3e:28:e2:fb:69: 40:11:29:df:80:01:80:57:b7:64:65:68:95:6e:29:b3:04:a2: 03:a0:a0:16:0b:40:94:49:22:24:87:25:71:fa:1d:a5:89:57: eb:54:5a:ee:c3:92:13:16:03:f7:86:7a:90:ee:4a:0f:2e:97: 28:b6:cf:41:94:86:73:c0:75:71:c1:74:70:2c:11:10:80:6c: cd:b5:94:96:af:7d:f8:85:c3:ef:6a:75:73:c5:3f:38:e2:3f: f5:e2:f8:80:cc:dc:f6:bf:f2:8a:dd:3f:48:6f:6b:aa:f3:88: e0:50:c3:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUxMTA1MDA1ODIwWhcNMjUxMTEyMDA1ODIwWjAYMRYwFAYD VQQDEw02OTBhYTEyYy04MGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0CgYfXOMoqpi/vg5dn/STBULQ/jygLyozGGURLjy80mK481Re5r+BBJbdxO ZPn5kgAYm2JnLy5X8hopocICW5fMQcetMHzew61m4FfBmh5VFaFiT5HR1SN/5U/i +sXijsblGN1kPkpc+o8BCLQpuKLY+ftQCQGrDOHygMYiXpunlbGsVAuf+FagUbz2 acUIsHQKElmu1vVWWt2GuDY0VVWZ+V7t3KtKwFhwXFsFZ13mqgefPxGVyx0qldWM +QQql3Rwgm1wYR8It6nIexY9dNM8i4IeV7TZp5RjeoqwGvZbuRV9rImWTngJm9vd yAkYdYq4yIB19E88K8DLl58HBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1nvjEL XjKwk15tpScsKXK2kRK+MB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkTOUeedkXcfO6uH5r48Hf8TwobIbMC97yIfd5uDReqTCEcWfWwtw6 WjxbftBwjcFYeZZBc87U2E74TBXu5eqwNsa/JwPFg+3MuQG3JSkZ/8B1iPUGx4nr ji3fH2D/+OMUtzybhsm0I9k+d8wzXxegd4h3Se2PomABLX1ZLqID3qUNyijDLfRy 2yGiPiji+2lAESnfgAGAV7dkZWiVbimzBKIDoKAWC0CUSSIkhyVx+h2liVfrVFru w5ITFgP3hnqQ7koPLpcots9BlIZzwHVxwXRwLBEQgGzNtZSWr334hcPvanVzxT84 4j/14viAzNz2v/KK3T9Ib2uq84jgUMP2 -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:12 2025 by rpki-client