$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json) Hash identifier: gHonombkzg7T4eD2qfuwuKSUoN8+1GfHXZFh/WwXbWk= Subject key identifier: AA:36:E3:01:A0:7B:F5:8F:31:17:39:73:25:F7:6B:A4:D2:C1:F6:A3 Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft Manifest number: 062C Signing time: Sun 02 Nov 2025 22:43:30 +0000 Manifest this update: Sun 02 Nov 2025 22:43:29 +0000 Manifest next update: Sun 09 Nov 2025 22:43:29 +0000 Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: aH+CZQZXsflTm0/j44ulwof07jJahTyfFi9mMoblUEg=) 2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: lIk4sio4TZruyq4pTpC/V2Gh2NyWW6dRTUh+EqYhKOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Validity Not Before: Nov 2 22:43:29 2025 GMT Not After : Nov 9 22:43:29 2025 GMT Subject: CN=6907de92-c4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:09:7b:64:ce:dd:3a:07:dc:f3:54:96:56: b9:f2:9c:77:d6:e9:ed:8e:5c:bf:bc:77:d4:7c:10: 5d:08:75:2c:a5:81:16:f8:dd:db:4b:40:1a:48:6c: 24:ce:c2:0a:51:cb:c8:f8:54:39:2c:da:29:bd:f8: cf:0f:45:7d:65:94:1b:d7:11:60:14:a3:7d:15:6d: 44:3c:a7:7f:8e:7c:0a:fe:a9:c6:92:9b:ac:50:b8: 3a:77:50:f6:ae:58:b0:f6:48:a9:f8:7d:2c:d4:48: 62:50:08:9e:e7:01:be:c1:49:38:d0:da:ff:6e:36: 01:29:1e:8d:73:86:99:e5:4a:60:27:2e:33:cf:0e: ac:de:c7:58:c7:0d:99:02:74:db:90:a8:ab:38:25: 16:de:e7:5d:4d:ba:44:33:78:c6:d2:33:ca:b6:b3: 76:86:4b:6a:1a:db:f1:ef:b0:8d:96:5b:cd:25:09: 43:42:87:ab:c3:2e:b2:1d:e8:57:02:8e:34:1d:46: e5:22:cd:cd:fa:0d:8a:23:70:b1:c2:16:b4:7c:df: e9:66:7e:b0:09:bb:c5:4f:6f:fe:7e:52:d2:f0:b6: 27:b3:07:78:2c:ef:af:f2:18:37:a5:d8:84:53:c1: 60:5d:99:fb:f3:6e:1d:f8:07:b2:c9:e9:21:b0:2a: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:E3:01:A0:7B:F5:8F:31:17:39:73:25:F7:6B:A4:D2:C1:F6:A3 X509v3 Authority Key Identifier: keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:63:7d:b7:93:80:ea:f7:85:d3:a2:4a:16:68:e1:b4:56: 45:7d:59:93:a2:6f:47:68:32:ce:24:64:78:eb:42:56:ee:13: e2:cb:de:c6:ef:b9:7d:ea:57:75:8b:34:02:3c:58:44:8d:4f: 4f:f5:a8:aa:6c:86:ef:96:6e:c9:80:6e:8b:d2:4c:fb:29:2f: 8d:90:50:c7:80:37:79:06:1a:42:6f:60:22:75:6c:51:64:f9: 99:0e:ec:82:df:1a:b0:ff:a0:15:6e:1e:ee:c9:f9:3d:45:63: 4f:cd:3f:1b:16:d7:98:9d:ea:a5:0d:56:0e:7f:43:69:f2:49: f5:36:22:fb:4d:87:2e:dd:6b:95:d2:15:39:1a:f7:43:69:1e: d4:be:40:b4:51:86:84:a9:f6:e1:36:61:cd:c4:c8:22:20:9c: cf:16:1a:fc:62:aa:b0:a0:aa:f9:d3:a7:27:ce:7c:c4:66:69: 99:be:5e:39:21:d2:ac:3a:c0:2b:d2:fd:d3:9f:8e:54:78:8c: 99:23:80:e1:d9:a8:ae:b7:e3:26:de:7c:d7:5b:ea:bf:1a:0a: 80:a9:fa:a0:74:8e:5b:15:4e:7a:46:ca:b5:a9:eb:70:61:b0: a6:87:74:25:f5:7e:9c:89:49:3b:ce:a0:86:99:bb:25:2f:00: 5b:f0:e2:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF RjBFNjlBODYwHhcNMjUxMTAyMjI0MzI5WhcNMjUxMTA5MjI0MzI5WjAYMRYwFAYD VQQDEw02OTA3ZGU5Mi1jNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mgJe2TO3ToH3PNUlla58px31untjly/vHfUfBBdCHUspYEW+N3bS0AaSGwk zsIKUcvI+FQ5LNopvfjPD0V9ZZQb1xFgFKN9FW1EPKd/jnwK/qnGkpusULg6d1D2 rliw9kip+H0s1EhiUAie5wG+wUk40Nr/bjYBKR6Nc4aZ5UpgJy4zzw6s3sdYxw2Z AnTbkKirOCUW3uddTbpEM3jG0jPKtrN2hktqGtvx77CNllvNJQlDQoerwy6yHehX Ao40HUblIs3N+g2KI3Cxwha0fN/pZn6wCbvFT2/+flLS8LYnswd4LO+v8hg3pdiE U8FgXZn7824d+AeyyekhsCqqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo24wGg e/WPMRc5cyX3a6TSwfajMB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2 MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT TlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA042N9t5OA6veF06JKFmjhtFZFfVmTom9HaDLOJGR460JW7hPiy97G 77l96ld1izQCPFhEjU9P9aiqbIbvlm7JgG6L0kz7KS+NkFDHgDd5BhpCb2AidWxR ZPmZDuyC3xqw/6AVbh7uyfk9RWNPzT8bFteYneqlDVYOf0Np8kn1NiL7TYcu3WuV 0hU5GvdDaR7UvkC0UYaEqfbhNmHNxMgiIJzPFhr8YqqwoKr506cnznzEZmmZvl45 IdKsOsAr0v3Tn45UeIyZI4Dh2aiut+Mm3nzXW+q/GgqAqfqgdI5bFU56Rsq1qetw YbCmh3Ql9X6ciUk7zqCGmbslLwBb8OIf -----END CERTIFICATE-----Generated at Tue Nov 4 12:35:03 2025 by rpki-client