$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: e2hlnJ6HeAxdHX8eotpMbxCctIOWWshG0iOSss7xA90= Subject key identifier: EF:0D:78:7B:8C:8B:13:1C:39:F0:FA:8C:B5:75:E4:86:6D:A0:A8:4B Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 0118 Signing time: Mon 03 Nov 2025 05:04:57 +0000 Manifest this update: Mon 03 Nov 2025 05:04:56 +0000 Manifest next update: Mon 10 Nov 2025 05:04:56 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: 3gbpwkFfmRKxkDZzSIxC0An4d9HpsntjosqwxiOTC7w=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Nov 3 05:04:56 2025 GMT Not After : Nov 10 05:04:56 2025 GMT Subject: CN=690837f9-f65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:e4:94:99:15:85:2f:2c:e2:81:b7:e0:2b: a8:6a:b3:c9:b3:a7:27:e1:c0:09:dc:d6:d3:bb:25: 38:72:26:c9:bc:eb:3a:73:f5:dd:c4:85:51:be:5f: 0a:3f:d9:85:05:00:92:c8:94:cc:a1:5b:43:5e:5d: 9b:ba:76:d1:ad:b6:e3:3e:d6:74:9d:c0:1e:53:b1: e6:a9:dc:ba:33:dc:bd:71:6b:ad:a1:54:be:e2:c3: 41:79:4d:24:f4:7f:fe:24:d1:8f:c2:af:86:31:56: 01:75:f1:2e:20:e4:e0:2d:30:b2:6a:37:1d:4d:48: f6:f8:11:2a:44:2e:7b:17:08:d7:56:45:03:29:ed: fb:2a:2a:6b:d0:e5:55:d6:c8:c9:2e:ae:80:72:71: f4:16:de:da:3b:87:0b:c2:6e:5f:ec:08:83:bc:ae: e1:a3:a1:e0:78:f2:a5:db:18:4c:d7:1d:b3:fc:57: da:95:36:01:5c:dd:b5:7b:91:bd:aa:c6:e3:4f:10: a8:1a:c9:15:a2:ad:37:ee:d1:13:8c:be:a0:01:a3: 19:43:fe:45:18:94:e5:b3:8a:e1:c1:70:d6:95:9b: 1b:99:43:af:d4:f6:55:2f:a4:6d:e5:ba:1b:bb:da: 39:a4:30:ac:9a:3c:86:c7:90:d7:02:05:b3:15:6c: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0D:78:7B:8C:8B:13:1C:39:F0:FA:8C:B5:75:E4:86:6D:A0:A8:4B X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b2:3c:ac:b9:d0:2b:82:2f:54:1d:e8:9d:c7:36:2f:30:ef: c0:22:a4:aa:b7:1c:d5:d3:ad:be:1b:74:39:ba:2e:a0:8e:14: c6:b7:04:1f:4b:53:8b:df:8b:89:3b:5f:91:13:65:02:7e:eb: be:74:6b:44:ea:78:39:25:b7:23:b7:9c:93:7b:60:31:25:ca: 44:7c:35:b5:3f:42:d6:95:04:e1:e6:5c:82:2f:2b:9c:3f:11: 0c:20:85:bd:b0:4e:f6:0c:46:79:0e:e6:01:c9:b5:a9:ad:c5: e5:48:75:5c:d5:9b:6f:4a:bb:b9:f3:40:7a:c2:89:74:2f:bd: d3:61:75:35:30:d3:d2:cc:50:07:86:55:1d:d7:fe:1c:78:b6: 1b:3d:2e:43:f4:fc:1d:d6:4e:1a:cb:2a:2e:da:96:ef:96:11: d8:dc:fc:ca:03:cd:7d:6e:05:d6:0b:08:05:ca:fd:53:98:e8: 6f:a5:23:a7:76:90:0d:eb:92:94:d5:e0:3d:bc:f0:2f:e7:63: 0b:ef:65:94:46:0f:df:41:53:e7:ce:e6:d4:3e:3b:8d:27:68: 6e:76:9e:d6:2f:2d:76:65:4c:7e:07:27:cc:06:3f:df:40:f0: 13:1f:d2:22:aa:d2:c2:5b:c4:17:35:fa:11:17:20:5f:c0:52: f8:75:41:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUxMTAzMDUwNDU2WhcNMjUxMTEwMDUwNDU2WjAYMRYwFAYD VQQDEw02OTA4MzdmOS1mNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4DklJkVhS8s4oG34CuoarPJs6cn4cAJ3NbTuyU4cibJvOs6c/XdxIVRvl8K P9mFBQCSyJTMoVtDXl2bunbRrbbjPtZ0ncAeU7Hmqdy6M9y9cWutoVS+4sNBeU0k 9H/+JNGPwq+GMVYBdfEuIOTgLTCyajcdTUj2+BEqRC57FwjXVkUDKe37Kipr0OVV 1sjJLq6AcnH0Ft7aO4cLwm5f7AiDvK7ho6HgePKl2xhM1x2z/FfalTYBXN21e5G9 qsbjTxCoGskVoq037tETjL6gAaMZQ/5FGJTls4rhwXDWlZsbmUOv1PZVL6Rt5bob u9o5pDCsmjyGx5DXAgWzFWyKMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8NeHuM ixMcOfD6jLV15IZtoKhLMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKsjysudArgi9UHeidxzYvMO/AIqSqtxzV062+G3Q5ui6gjhTGtwQf S1OL34uJO1+RE2UCfuu+dGtE6ng5Jbcjt5yTe2AxJcpEfDW1P0LWlQTh5lyCLyuc PxEMIIW9sE72DEZ5DuYBybWprcXlSHVc1ZtvSru580B6wol0L73TYXU1MNPSzFAH hlUd1/4ceLYbPS5D9Pwd1k4ayyou2pbvlhHY3PzKA819bgXWCwgFyv1TmOhvpSOn dpAN65KU1eA9vPAv52ML72WURg/fQVPnzubUPjuNJ2hudp7WLy12ZUx+ByfMBj/f QPATH9IiqtLCW8QXNfoRFyBfwFL4dUFq -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:33 2025 by rpki-client