$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: izuIXNJHw5o3MWYpyEgiw4YDFmIVkSpii8zqYIQPztk= Subject key identifier: 85:38:BC:96:DC:A7:B1:FE:00:4B:51:5D:01:2F:B7:5B:20:04:7A:5C Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 0119 Signing time: Wed 05 Nov 2025 05:15:06 +0000 Manifest this update: Wed 05 Nov 2025 05:15:06 +0000 Manifest next update: Wed 12 Nov 2025 05:15:06 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: Sfa9Gzi3DCsBtUZhIlS+lTS/HbbFBmfZEMdZDoSNAks=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Nov 5 05:15:06 2025 GMT Not After : Nov 12 05:15:06 2025 GMT Subject: CN=690add5a-a3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:07:90:b6:3e:cb:ce:c9:a3:d5:3f:9d:ec: 18:4f:bf:ab:3e:54:93:a5:d5:ab:5e:25:ed:e1:38: b5:f3:1c:07:b8:84:dd:b7:77:76:ad:d6:2d:ef:49: ce:0f:6b:c7:c2:60:03:9e:a2:e2:38:5d:f3:0a:6a: df:7c:a5:94:24:29:82:f2:cb:b6:1f:fe:67:3d:89: b4:2e:96:75:31:9b:08:5c:0d:d9:74:16:df:22:38: 3b:a2:15:76:7e:34:8f:2a:79:73:ea:71:ff:6a:5a: 91:70:3f:b7:54:41:4b:35:26:de:69:28:d2:9b:ad: 31:74:21:47:82:5c:ca:82:84:4e:2d:03:78:1d:2e: 7d:ce:08:d1:37:92:fe:0c:73:5e:c0:46:55:49:61: f9:e8:7a:b2:cd:8f:00:5e:66:2e:6d:ef:cb:b1:f7: ba:7f:bf:29:d3:97:d6:1e:2c:8f:13:87:98:38:c5: 6c:f8:ed:d2:c0:f3:a1:f3:98:c3:44:4c:8b:24:f6: 94:a6:14:e4:20:f9:b9:31:cc:6c:05:02:1e:76:56: f3:ac:4d:9d:d9:93:c4:5f:71:07:35:5a:43:f6:03: 39:de:ad:ae:1d:10:d2:30:90:bf:04:1f:24:7e:f1: a2:71:23:81:a1:99:f2:a3:64:62:ac:80:9c:06:13: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:BC:96:DC:A7:B1:FE:00:4B:51:5D:01:2F:B7:5B:20:04:7A:5C X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:29:8c:b3:44:8d:8f:35:27:eb:3a:13:33:83:26:24:13:fc: 88:ea:84:64:c9:c1:83:ce:54:11:a6:e4:cc:e3:8c:89:48:53: 4e:c1:cf:fa:df:f5:47:e8:3d:85:f5:a9:d3:ac:35:ea:67:a1: 2a:83:31:e6:29:40:f1:69:b5:17:ee:15:61:78:25:31:e4:ce: 24:d8:7c:d8:fb:a6:cf:97:63:25:09:90:62:54:90:07:ff:53: b6:40:58:6d:cb:10:7c:3a:d7:a0:8e:97:b7:95:96:cb:9f:ce: d3:77:5e:e6:d7:98:bb:34:43:ad:46:b8:71:3b:57:dc:54:2b: 60:78:32:0e:43:c3:cc:94:ad:06:d6:f3:83:2d:a6:fd:1e:fa: e2:18:50:9c:ed:72:32:6a:75:22:54:11:1f:bf:30:fd:a1:6c: 4b:4f:50:f1:a4:35:26:12:14:a5:84:21:9c:58:54:86:4b:bf: 62:30:82:77:cf:11:c8:e1:20:47:d3:19:eb:61:9d:93:06:75: f8:9b:b6:92:b7:30:50:de:b2:bc:c9:97:3e:37:39:98:e5:50: d4:c0:9d:b8:88:2c:1a:db:df:95:11:5f:17:77:9f:5c:18:22: d8:75:05:74:94:d6:00:c3:f5:a7:f9:d7:9d:37:06:4f:81:ee: e7:ec:57:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUxMTA1MDUxNTA2WhcNMjUxMTEyMDUxNTA2WjAYMRYwFAYD VQQDEw02OTBhZGQ1YS1hM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl4HkLY+y87Jo9U/newYT7+rPlSTpdWrXiXt4Ti18xwHuITdt3d2rdYt70nO D2vHwmADnqLiOF3zCmrffKWUJCmC8su2H/5nPYm0LpZ1MZsIXA3ZdBbfIjg7ohV2 fjSPKnlz6nH/alqRcD+3VEFLNSbeaSjSm60xdCFHglzKgoROLQN4HS59zgjRN5L+ DHNewEZVSWH56HqyzY8AXmYube/Lsfe6f78p05fWHiyPE4eYOMVs+O3SwPOh85jD REyLJPaUphTkIPm5McxsBQIedlbzrE2d2ZPEX3EHNVpD9gM53q2uHRDSMJC/BB8k fvGicSOBoZnyo2RirICcBhPHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU4vJbc p7H+AEtRXQEvt1sgBHpcMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZKYyzRI2PNSfrOhMzgyYkE/yI6oRkycGDzlQRpuTM44yJSFNOwc/6 3/VH6D2F9anTrDXqZ6EqgzHmKUDxabUX7hVheCUx5M4k2HzY+6bPl2MlCZBiVJAH /1O2QFhtyxB8Otegjpe3lZbLn87Td17m15i7NEOtRrhxO1fcVCtgeDIOQ8PMlK0G 1vODLab9HvriGFCc7XIyanUiVBEfvzD9oWxLT1DxpDUmEhSlhCGcWFSGS79iMIJ3 zxHI4SBH0xnrYZ2TBnX4m7aStzBQ3rK8yZc+NzmY5VDUwJ24iCwa29+VEV8Xd59c GCLYdQV0lNYAw/Wn+dedNwZPge7n7Fdt -----END CERTIFICATE-----Generated at Wed Nov 5 15:24:52 2025 by rpki-client