$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json) Hash identifier: GWZfCy8tVSW6XrskX8IrtenGrWCGtdtQxYf6jH0lwXE= Subject key identifier: 7F:39:E2:9C:89:4F:7B:44:9A:59:C1:63:AA:85:07:D1:3E:66:A7:46 Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 Certificate issuer: /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft Manifest number: 09D2 Signing time: Tue 04 Nov 2025 20:05:14 +0000 Manifest this update: Tue 04 Nov 2025 20:05:13 +0000 Manifest next update: Tue 11 Nov 2025 20:05:13 +0000 Files and hashes: 1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: FA8g29nYgYoKYb0Jj/KcDk8neG+VHGHLekPubpRSVkk=) 2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: fqaNqrT+Qg2pLwuLNri5RTiMJOZQlavEcVcSmaNEBIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Validity Not Before: Nov 4 20:05:13 2025 GMT Not After : Nov 11 20:05:13 2025 GMT Subject: CN=690a5c79-fe4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:bd:ba:92:38:66:fc:16:9d:74:af:24:1e: 43:84:f8:d7:be:b2:f5:6d:97:6d:57:e6:09:3c:7c: e3:f2:62:13:86:d2:8b:5a:71:5e:d1:f4:42:3a:9b: 79:05:35:f1:b5:e5:bc:0d:7a:0b:42:de:0b:08:aa: 11:b3:ea:84:8c:18:1e:72:30:99:88:49:9e:19:a8: 83:33:20:a3:1f:cf:b4:d6:c5:0b:f0:c7:64:6a:45: 26:2e:6e:07:2f:b7:f1:f2:02:54:5e:cf:7f:1b:7b: 5b:bc:0f:97:7a:fc:ad:dd:2a:fa:3f:0d:d4:bf:d7: 96:11:12:5b:7e:35:e8:35:6f:6a:c5:9f:58:2f:06: 60:3b:01:88:35:b4:c2:90:5f:04:d7:3b:6c:4b:a5: 00:6f:df:aa:af:3e:24:74:ca:6d:0e:75:46:63:74: dc:c8:0e:73:29:45:2c:80:2d:66:81:3c:72:eb:d1: 91:66:e7:68:ed:ef:20:94:6f:58:81:54:cf:49:69: 02:16:ce:b8:b5:f3:e2:63:cf:6a:28:9d:6e:e2:4e: ea:ec:8d:11:72:48:3d:6d:95:42:e1:d3:74:8c:45: 31:f7:80:6b:cf:57:80:38:b5:1a:65:96:3c:ee:04: e7:f6:61:79:ef:e1:be:57:dd:4a:7a:39:2d:33:35: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:E2:9C:89:4F:7B:44:9A:59:C1:63:AA:85:07:D1:3E:66:A7:46 X509v3 Authority Key Identifier: keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2b:33:97:5f:35:c4:66:4a:17:45:ab:53:cc:f4:4b:87:be: bf:8d:d0:53:91:27:46:c4:aa:cc:2f:dd:4d:bb:53:18:0d:25: 2d:f6:e4:af:c8:86:ed:0c:28:a9:78:a1:f1:0c:c5:07:be:90: 5f:ea:1c:b3:b1:3f:3d:5a:c5:c2:be:d7:2f:11:4c:79:50:9b: c8:18:0b:a4:de:40:05:65:78:08:33:c0:6d:d4:36:fb:8b:7d: 33:f2:51:36:76:c9:02:3c:8e:e0:53:ff:1e:32:f9:10:2a:29: 4b:ff:9b:fc:cd:a2:41:79:f7:a0:6f:43:4d:92:ae:11:c6:ce: ad:7e:80:62:e3:7d:9c:46:a9:9b:61:41:9a:6a:ec:51:fb:9a: ea:d6:ff:10:5b:aa:a1:36:75:e6:42:f5:d1:90:2a:94:3d:70: 0b:76:e3:40:01:ff:9f:28:af:23:28:f5:14:eb:92:7d:1d:ac: 90:82:01:8b:52:2d:56:f1:62:c9:59:6a:5b:ae:3c:2f:45:34: 42:fc:64:40:82:6e:2e:e9:97:9d:f0:06:16:0e:a0:ea:1e:98: d1:c4:69:66:6e:58:c4:bb:8e:f1:b4:75:b0:cd:80:9c:64:87: 2a:50:fa:86:6e:0d:6f:27:de:d1:57:51:47:94:49:19:79:27: b0:6c:b5:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0FFNjExMC8GA1UEBRMoNjRDQTU0MjZBQzdBNTUwQkRBMTA1M0EwMTI4MzE0NEUy RENEMkJENzAeFw0yNTExMDQyMDA1MTNaFw0yNTExMTEyMDA1MTNaMBgxFjAUBgNV BAMTDTY5MGE1Yzc5LWZlNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWhL26kjhm/BaddK8kHkOE+Ne+svVtl21X5gk8fOPyYhOG0otacV7R9EI6m3kF NfG15bwNegtC3gsIqhGz6oSMGB5yMJmISZ4ZqIMzIKMfz7TWxQvwx2RqRSYubgcv t/HyAlRez38be1u8D5d6/K3dKvo/DdS/15YRElt+Neg1b2rFn1gvBmA7AYg1tMKQ XwTXO2xLpQBv36qvPiR0ym0OdUZjdNzIDnMpRSyALWaBPHLr0ZFm52jt7yCUb1iB VM9JaQIWzri18+Jjz2oonW7iTursjRFySD1tlULh03SMRTH3gGvPV4A4tRplljzu BOf2YXnv4b5X3Up6OS0zNfaRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfzninIlP e0SaWcFjqoUH0T5mp0YwHwYDVR0jBBgwFoAUZMpUJqx6VQvaEFOgEoMUTi3NK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQUU2LzY1RDA0NEM0OTQx ODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2YUVGT2dFb01VVGkzTks5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1wVUpxeDZWUXZhRUZPZ0VvTVVUaTNOSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD QUU2LzY1RDA0NEM0OTQxODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2 YUVGT2dFb01VVGkzTks5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0rM5dfNcRmShdFq1PM9EuHvr+N0FORJ0bEqswv3U27UxgNJS325K/I hu0MKKl4ofEMxQe+kF/qHLOxPz1axcK+1y8RTHlQm8gYC6TeQAVleAgzwG3UNvuL fTPyUTZ2yQI8juBT/x4y+RAqKUv/m/zNokF596BvQ02SrhHGzq1+gGLjfZxGqZth QZpq7FH7murW/xBbqqE2deZC9dGQKpQ9cAt240AB/58oryMo9RTrkn0drJCCAYtS LVbxYslZaluuPC9FNEL8ZECCbi7pl53wBhYOoOoemNHEaWZuWMS7jvG0dbDNgJxk hypQ+oZuDW8n3tFXUUeUSRl5J7BstZE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:44 2025 by rpki-client