$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: eaAxSTtn9KBW4EkTSUVKZze6XcK/S9PMdvh38uSScQA= Subject key identifier: 78:4B:33:BC:F4:F7:41:94:ED:94:E8:D9:86:9A:DD:30:37:CE:48:4D Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: E8 Signing time: Wed 05 Nov 2025 05:47:15 +0000 Manifest this update: Wed 05 Nov 2025 05:47:14 +0000 Manifest next update: Wed 12 Nov 2025 05:47:14 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: Tg3LHe9lOCEgnHIWeeTEVOaZrXoKc82ltY2ZXTQJzIU=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: m3GeVlgQwLSASq7XBSa8f1Uvp0nte9cJZ6MnwsMfEFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Nov 5 05:47:14 2025 GMT Not After : Nov 12 05:47:14 2025 GMT Subject: CN=690ae4e3-63af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:8f:11:35:d9:db:3d:d1:dd:98:28:c5:6d: ea:d5:1a:da:4a:33:79:d2:a0:91:a6:b0:39:6a:b2: 96:51:61:a0:6b:6c:f0:9e:39:b4:7f:44:5f:22:72: a4:12:fa:df:1f:aa:fe:bb:64:28:79:ef:23:8c:8b: 9e:53:b9:ed:af:8d:16:d6:7f:a7:35:fd:b7:76:40: 64:91:db:ef:9f:ad:e4:bc:8b:c1:d4:2e:4b:74:72: 48:20:f1:ce:70:75:17:6b:de:de:88:d2:59:e1:bf: 2d:86:d3:69:39:13:b9:6d:f5:61:a0:f3:be:84:cc: bc:c0:96:af:5a:e4:5d:83:3e:5f:87:2a:c7:14:f6: 8c:75:80:1d:25:ab:19:a2:ba:fc:27:56:2c:c8:00: fd:78:19:9d:f8:6b:64:0b:80:0a:3d:e9:52:e9:fb: 09:d8:db:06:c9:e1:d1:a3:e7:ca:80:e8:06:b9:8f: 82:2e:18:12:bf:23:69:3f:0b:ab:f7:fb:b6:2d:06: ce:4f:1d:67:0e:b0:6e:92:10:a0:3f:48:ac:3b:cc: fc:ca:bb:36:4e:cd:1a:f0:94:92:ec:bd:e0:57:89: ac:66:5b:6f:14:6b:8f:f0:1b:df:7c:69:fa:d9:9b: cd:3e:17:ec:53:f5:0e:3d:db:e5:71:ae:7c:0c:25: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:33:BC:F4:F7:41:94:ED:94:E8:D9:86:9A:DD:30:37:CE:48:4D X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:63:c2:c0:a6:d3:ba:ca:78:50:de:5e:fb:10:c9:3a:bb:f8: 54:2f:0e:60:cb:79:e6:1b:79:0f:6b:78:ee:c0:c8:c4:ba:56: 70:ac:66:8e:aa:df:c3:36:bc:6f:62:1b:4c:6f:4a:ce:99:b4: 6e:6b:fd:bd:85:7e:c3:6a:4a:75:48:64:af:7e:62:33:a4:32: 22:bb:d7:3d:4b:0b:69:26:15:d4:81:61:84:32:e2:87:62:ec: 71:4b:49:65:f9:86:1f:2a:0d:72:f5:21:f3:89:a4:96:3e:70: 7d:9e:63:dd:89:92:1b:69:63:0d:ac:c3:85:ce:1d:b9:50:f6: d5:2e:7b:46:81:a2:24:75:87:fc:68:b8:78:be:2b:30:bd:56: fa:c8:df:bb:a0:ad:b3:e9:e8:eb:84:4c:39:24:29:ae:e2:d3: 57:c4:55:99:6c:ec:e3:47:bf:34:7b:ca:5c:20:85:a8:7f:84: e7:07:66:b6:f2:7e:05:37:29:6d:fd:ca:9b:ac:7a:55:23:7e: 1d:de:32:e5:25:30:0e:6d:69:c4:4c:d0:a3:5b:28:2d:e3:0a: 4f:8b:27:de:b8:7b:a5:70:6b:2b:06:8e:69:29:d6:5f:51:2f: d0:9a:b2:7a:0d:d5:2c:33:4c:2c:6e:e3:76:97:87:30:a4:68: fa:38:7b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUxMTA1MDU0NzE0WhcNMjUxMTEyMDU0NzE0WjAYMRYwFAYD VQQDEw02OTBhZTRlMy02M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HmPETXZ2z3R3ZgoxW3q1RraSjN50qCRprA5arKWUWGga2zwnjm0f0RfInKk EvrfH6r+u2Qoee8jjIueU7ntr40W1n+nNf23dkBkkdvvn63kvIvB1C5LdHJIIPHO cHUXa97eiNJZ4b8thtNpORO5bfVhoPO+hMy8wJavWuRdgz5fhyrHFPaMdYAdJasZ orr8J1YsyAD9eBmd+GtkC4AKPelS6fsJ2NsGyeHRo+fKgOgGuY+CLhgSvyNpPwur 9/u2LQbOTx1nDrBukhCgP0isO8z8yrs2Ts0a8JSS7L3gV4msZltvFGuP8BvffGn6 2ZvNPhfsU/UOPdvlca58DCXCowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhLM7z0 90GU7ZTo2Yaa3TA3zkhNMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFY8LAptO6ynhQ3l77EMk6u/hULw5gy3nmG3kPa3juwMjEulZwrGaO qt/DNrxvYhtMb0rOmbRua/29hX7Dakp1SGSvfmIzpDIiu9c9SwtpJhXUgWGEMuKH YuxxS0ll+YYfKg1y9SHziaSWPnB9nmPdiZIbaWMNrMOFzh25UPbVLntGgaIkdYf8 aLh4viswvVb6yN+7oK2z6ejrhEw5JCmu4tNXxFWZbOzjR780e8pcIIWof4TnB2a2 8n4FNylt/cqbrHpVI34d3jLlJTAObWnETNCjWygt4wpPiyfeuHulcGsrBo5pKdZf US/QmrJ6DdUsM0wsbuN2l4cwpGj6OHs9 -----END CERTIFICATE-----Generated at Wed Nov 5 16:28:33 2025 by rpki-client