$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: svLOCMk8JtmwKFLwVLwZ1SmUHP8b/zSC65vlqZtsSdY= Subject key identifier: 9D:A8:13:FC:8B:47:70:6E:BC:FB:CD:1A:03:E4:C5:17:C3:D3:7E:BA Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 0950 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 094F Signing time: Sun 02 Nov 2025 20:06:15 +0000 Manifest this update: Sun 02 Nov 2025 20:06:14 +0000 Manifest next update: Sun 09 Nov 2025 20:06:14 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: ASVNfWxz/2xrmcMB5berCYxcJom+NUMslC7V9a3iQiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2384 (0x950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Nov 2 20:06:14 2025 GMT Not After : Nov 9 20:06:14 2025 GMT Subject: CN=6907b9b7-0075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:5e:c5:5e:40:65:92:31:56:8f:ae:b2:d3: 6f:1f:af:f8:68:ae:cd:46:e3:93:f0:f6:7b:fb:d0: e9:8d:00:0f:55:e8:61:42:fa:fd:ad:07:a9:34:19: 49:3c:9d:ad:21:71:dd:b5:9d:c3:28:30:76:a5:99: 57:59:a9:83:1c:f3:70:98:19:21:f9:ba:fc:81:26: b4:06:71:76:99:4a:69:27:12:71:60:07:af:d0:50: 0d:cc:a4:14:25:16:c9:7c:18:c2:3f:d7:e0:0f:7c: e1:e6:6a:b2:c6:46:dc:20:d0:2d:ce:de:49:6a:0c: bc:01:3f:1b:4b:57:86:cd:6f:a0:29:67:01:c2:4a: f6:d6:c2:1e:3d:1b:d6:f7:79:25:1a:89:d7:ff:e1: b7:01:b4:27:81:58:b8:41:61:6c:53:df:3b:1f:66: 49:2c:b0:68:91:2c:cd:c6:86:50:05:55:9c:05:e3: 44:a6:cb:4f:4d:2d:4c:ea:42:e9:3a:c3:e7:56:36: c0:ae:df:4e:07:08:77:d2:5c:c7:74:81:c3:4e:47: 11:35:75:2b:aa:0a:1f:91:f3:5e:46:1e:23:7f:f2: 46:ea:36:71:ce:31:93:0d:c9:ea:b3:3f:2f:ab:29: 94:82:d3:be:41:d5:24:c9:a3:2e:c9:3b:43:dd:52: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:13:FC:8B:47:70:6E:BC:FB:CD:1A:03:E4:C5:17:C3:D3:7E:BA X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:db:8e:39:50:83:aa:4a:f9:03:77:6b:93:ae:dc:b0:d2:f1: 6f:b9:e5:da:99:36:e1:d9:5e:c4:3f:d1:f7:05:67:8e:54:b0: 01:e9:dc:8e:8d:38:9b:5b:0e:82:9b:81:d5:41:fd:6d:a7:51: 71:70:b4:3e:e0:5c:b3:2f:f0:c9:d8:40:d1:11:60:61:2d:47: 64:7f:1d:ce:52:5c:16:de:2b:cd:5c:83:44:4b:47:7e:22:1b: 26:d8:39:22:6d:ea:32:32:34:6c:e3:eb:09:8c:3f:0e:9a:e8: 4e:23:55:27:57:8e:c5:a5:cf:8d:8b:48:5a:e2:cc:a5:26:7c: 44:f0:e6:26:52:9b:8d:65:48:21:ac:29:92:8a:dc:16:3a:04: 1d:c2:1c:e8:95:c7:40:f5:da:7e:dd:2a:5e:19:5f:51:05:65: cc:c8:8b:93:07:df:24:2b:7d:d9:cc:0c:fc:fb:81:6e:7d:d1: dd:34:c6:b0:09:0a:26:c6:d7:7e:06:57:bd:99:b5:74:89:7e: 95:23:d1:6a:7b:80:88:b1:74:9e:2a:15:33:b9:a7:37:ea:5b: 57:20:ca:12:6e:1a:0f:ed:45:bd:80:6d:04:b6:a5:66:33:d2: 3f:7a:57:20:a1:c1:3d:16:cb:dd:54:8c:4f:af:c2:f6:41:3e: f0:33:3c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUxMTAyMjAwNjE0WhcNMjUxMTA5MjAwNjE0WjAYMRYwFAYD VQQDEw02OTA3YjliNy0wMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEJexV5AZZIxVo+ustNvH6/4aK7NRuOT8PZ7+9DpjQAPVehhQvr9rQepNBlJ PJ2tIXHdtZ3DKDB2pZlXWamDHPNwmBkh+br8gSa0BnF2mUppJxJxYAev0FANzKQU JRbJfBjCP9fgD3zh5mqyxkbcINAtzt5Jagy8AT8bS1eGzW+gKWcBwkr21sIePRvW 93klGonX/+G3AbQngVi4QWFsU987H2ZJLLBokSzNxoZQBVWcBeNEpstPTS1M6kLp OsPnVjbArt9OBwh30lzHdIHDTkcRNXUrqgofkfNeRh4jf/JG6jZxzjGTDcnqsz8v qymUgtO+QdUkyaMuyTtD3VLD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2oE/yL R3BuvPvNGgPkxRfD0366MB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDU2445UIOqSvkDd2uTrtyw0vFvueXamTbh2V7EP9H3BWeOVLAB6dyO jTibWw6Cm4HVQf1tp1FxcLQ+4FyzL/DJ2EDREWBhLUdkfx3OUlwW3ivNXINES0d+ Ihsm2DkibeoyMjRs4+sJjD8OmuhOI1UnV47Fpc+Ni0ha4sylJnxE8OYmUpuNZUgh rCmSitwWOgQdwhzolcdA9dp+3SpeGV9RBWXMyIuTB98kK33ZzAz8+4FufdHdNMaw CQomxtd+Ble9mbV0iX6VI9Fqe4CIsXSeKhUzuac36ltXIMoSbhoP7UW9gG0EtqVm M9I/elcgocE9FsvdVIxPr8L2QT7wMzzV -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:36 2025 by rpki-client