$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: ls0umgBGwsjuYLlqm+40bg7ndbUk3RMP8B/mngZGAbg= Subject key identifier: A3:EB:3D:D0:9A:32:26:97:06:CA:53:80:C0:62:F4:F5:D1:F1:4B:FD Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B66 Signing time: Tue 04 Nov 2025 19:16:05 +0000 Manifest this update: Tue 04 Nov 2025 19:16:04 +0000 Manifest next update: Tue 11 Nov 2025 19:16:04 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: ehN2AxMtCsimbb35F6xJf10W8/l7tO1sOfi2EMX4ipc=) 2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 3: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) 4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) 5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Nov 4 19:16:04 2025 GMT Not After : Nov 11 19:16:04 2025 GMT Subject: CN=690a50f4-240c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:46:a1:9e:b8:3e:87:e0:b8:54:08:4c:23: ac:b8:95:6c:0f:4d:1d:f6:57:49:50:f1:37:23:ef: 47:45:e2:74:8c:39:f2:5e:53:64:7d:17:5b:28:51: 5e:38:a1:58:ae:38:70:90:63:19:19:be:13:c5:f4: 72:2f:e9:ad:3c:87:8f:b0:1a:ba:f7:32:fe:78:41: 43:13:b8:d4:c4:c4:1a:1c:d1:6e:ce:29:97:76:ad: 05:9b:a6:c3:1a:8f:10:ff:4a:95:b9:61:55:54:d2: 59:39:89:5d:89:50:97:ae:cd:60:ff:6c:5b:83:f3: 55:af:ae:26:b4:fc:c2:e5:66:fc:96:8a:e1:94:f9: 9e:71:01:d5:3e:74:ff:68:91:25:b0:3d:cc:e5:34: c4:e1:ff:55:dd:82:92:0d:5b:df:d2:61:a7:4e:34: c5:1a:4b:d3:2b:a4:dc:4f:bd:43:25:33:6b:e9:87: 6c:5c:fd:d9:85:9f:6c:9e:5f:e7:0a:4f:38:f6:35: 70:69:f0:5c:2f:9a:44:f7:d2:df:0d:5f:50:53:b7: 95:6c:47:fc:a1:a6:db:dc:60:44:c2:32:b4:00:a5: f5:2b:d3:78:7b:93:76:e8:2c:7c:ef:05:e1:a6:d9: 8c:f5:99:c0:0a:5e:8a:6f:42:72:af:74:99:fd:f4: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:3D:D0:9A:32:26:97:06:CA:53:80:C0:62:F4:F5:D1:F1:4B:FD X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7e:7e:5f:82:bc:21:c7:69:87:33:08:d4:7f:01:2c:9d:c6: c9:82:aa:8b:d7:0c:6b:49:12:3a:9c:93:da:e9:1a:48:7d:93: 0f:9e:d3:ff:db:ab:d6:aa:03:6b:57:7c:79:fc:b2:dd:49:fa: 9c:71:76:41:b4:49:ca:c0:15:63:09:e4:fd:e3:da:4e:69:06: fe:9d:8e:c9:2a:ac:f7:1b:1b:8a:e1:d0:a6:65:f3:46:aa:1c: 67:90:41:f6:32:d4:84:d5:73:5e:7d:42:5d:79:a7:ec:30:76: b6:3a:e1:ce:f9:fb:5c:20:bc:f9:ee:f4:02:df:96:aa:16:4f: ee:61:c2:5e:a8:19:ff:fe:32:87:75:1c:99:1f:90:67:af:4c: ab:b8:7e:e8:45:22:21:6b:45:ba:31:5e:46:37:5e:27:09:43: 7d:27:bc:89:57:a7:44:16:01:4d:c4:f0:cf:a2:bb:20:a1:c1: 3c:95:7e:d6:d4:ba:b9:20:30:68:bd:88:f4:cf:c5:7a:fe:80: d6:e8:54:39:82:8e:d6:31:4e:55:c3:03:90:e0:b0:da:e0:fd: de:af:9f:d6:47:67:9e:3d:80:ab:1c:09:72:ee:49:26:ba:48: ae:4c:e1:76:d0:2f:61:32:ef:d0:76:70:73:62:93:9b:8d:9d: e4:90:0b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUxMTA0MTkxNjA0WhcNMjUxMTExMTkxNjA0WjAYMRYwFAYD VQQDEw02OTBhNTBmNC0yNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZxGoZ64PofguFQITCOsuJVsD00d9ldJUPE3I+9HReJ0jDnyXlNkfRdbKFFe OKFYrjhwkGMZGb4TxfRyL+mtPIePsBq69zL+eEFDE7jUxMQaHNFuzimXdq0Fm6bD Go8Q/0qVuWFVVNJZOYldiVCXrs1g/2xbg/NVr64mtPzC5Wb8lorhlPmecQHVPnT/ aJElsD3M5TTE4f9V3YKSDVvf0mGnTjTFGkvTK6TcT71DJTNr6YdsXP3ZhZ9snl/n Ck849jVwafBcL5pE99LfDV9QU7eVbEf8oabb3GBEwjK0AKX1K9N4e5N26Cx87wXh ptmM9ZnACl6Kb0Jyr3SZ/fQ2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPrPdCa MiaXBspTgMBi9PXR8Uv9MB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIfn5fgrwhx2mHMwjUfwEsncbJgqqL1wxrSRI6nJPa6RpIfZMPntP/ 26vWqgNrV3x5/LLdSfqccXZBtEnKwBVjCeT949pOaQb+nY7JKqz3GxuK4dCmZfNG qhxnkEH2MtSE1XNefUJdeafsMHa2OuHO+ftcILz57vQC35aqFk/uYcJeqBn//jKH dRyZH5Bnr0yruH7oRSIha0W6MV5GN14nCUN9J7yJV6dEFgFNxPDPorsgocE8lX7W 1Lq5IDBovYj0z8V6/oDW6FQ5go7WMU5VwwOQ4LDa4P3er5/WR2eePYCrHAly7kkm ukiuTOF20C9hMu/QdnBzYpObjZ3kkAuu -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:23 2025 by rpki-client