$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: ceOhlXmaF368EfApBnQGoI3SpE1YnVUp80qjuvNeUZA= Subject key identifier: A1:CE:E6:D6:1B:79:AF:D1:E1:3F:33:79:BE:BD:21:18:C7:7D:60:7F Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 15D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 15C8 Signing time: Tue 04 Nov 2025 16:51:08 +0000 Manifest this update: Tue 04 Nov 2025 16:51:07 +0000 Manifest next update: Tue 11 Nov 2025 16:51:07 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: wZn8d3J94R+ydekR6xDLBePhk/A/hSPJXsk6ZEamu1s=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5584 (0x15d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Nov 4 16:51:07 2025 GMT Not After : Nov 11 16:51:07 2025 GMT Subject: CN=690a2efc-83f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:89:da:ff:08:8c:f5:fa:a2:cb:56:3e:7f: c7:bb:3d:8c:b2:60:3d:29:df:b4:e9:72:90:ef:5b: 8b:3b:13:e0:38:ba:0d:5d:b0:d5:c9:bf:52:f5:bc: 2f:50:10:a1:2d:3b:49:03:bc:2e:e8:3c:de:d6:c6: dd:a0:3b:1c:b9:2e:33:35:b7:e3:33:c9:2f:f7:04: bb:31:4b:ee:15:33:5c:e3:5a:0d:ef:50:d2:72:1b: 77:b4:88:2f:f9:55:4b:3c:b8:ae:9b:8d:9b:ac:3d: 27:e5:dd:79:4c:2f:d8:24:3e:0a:23:7d:96:e1:8b: d1:e4:ee:eb:ab:e2:26:5c:f7:1a:e5:d4:08:26:86: 63:d8:a5:1c:1c:3f:42:34:7a:ff:12:3a:15:51:aa: 0d:a7:8a:15:db:e7:23:5b:2b:17:d7:41:a1:35:7e: c6:55:cd:16:fb:20:3b:d0:a2:0f:23:87:26:67:ae: a9:7b:82:e5:04:4b:63:2a:3d:09:29:dc:31:7e:c3: 22:ca:40:7b:c7:e3:9e:ac:86:f3:4f:6b:24:12:20: 38:97:af:c2:74:b8:0e:e0:e1:5a:09:7f:41:93:b2: 2c:0b:30:31:fe:f3:65:c4:7f:e9:a9:95:25:75:76: 6d:d0:4e:e6:ae:2c:20:c3:04:94:02:2c:9f:18:87: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CE:E6:D6:1B:79:AF:D1:E1:3F:33:79:BE:BD:21:18:C7:7D:60:7F X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:fa:ff:26:e4:24:3d:7e:a2:33:0f:ad:c8:c6:2d:8d:aa: d3:76:18:1f:ce:19:70:24:88:a8:61:9f:8d:f0:68:a2:2d:65: d6:83:f1:fb:47:b6:96:35:5d:ab:74:6f:8a:c5:02:94:73:fa: 81:87:6a:42:3e:7e:a1:a1:56:ea:0e:8d:e5:5d:c1:84:7d:98: 81:44:03:e7:00:67:ac:94:30:f0:95:fc:34:f9:eb:90:7b:96: 00:c7:5a:9b:f3:7f:5a:04:3a:7b:61:65:6a:79:ad:82:ac:51: b8:ff:4e:1d:c8:5f:20:f9:87:8a:2d:10:76:fb:86:b3:84:ef: 06:25:1b:1e:41:18:cc:7a:26:7d:ae:42:8a:49:9e:4e:e3:35: 8a:82:1f:f8:bf:ad:51:15:5e:8f:ca:79:8f:de:60:af:93:8b: 6b:9b:22:bf:62:45:92:4e:38:a0:62:77:59:e5:e1:d5:3b:a6: ed:49:14:0d:c8:67:2b:76:2a:87:9c:ab:bd:28:4f:22:37:2b: 1b:a4:fd:ef:06:b9:63:2e:a4:e4:9b:fd:e7:16:5b:9e:01:e5: fb:29:89:63:0f:b7:35:b0:58:d1:ca:eb:25:8e:07:93:ec:47: 41:95:cc:47:5f:ec:5e:22:58:25:79:68:d0:f2:58:7a:be:38: 2b:29:56:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUxMTA0MTY1MTA3WhcNMjUxMTExMTY1MTA3WjAYMRYwFAYD VQQDEw02OTBhMmVmYy04M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV2J2v8IjPX6ostWPn/Huz2MsmA9Kd+06XKQ71uLOxPgOLoNXbDVyb9S9bwv UBChLTtJA7wu6Dze1sbdoDscuS4zNbfjM8kv9wS7MUvuFTNc41oN71DScht3tIgv +VVLPLium42brD0n5d15TC/YJD4KI32W4YvR5O7rq+ImXPca5dQIJoZj2KUcHD9C NHr/EjoVUaoNp4oV2+cjWysX10GhNX7GVc0W+yA70KIPI4cmZ66pe4LlBEtjKj0J KdwxfsMiykB7x+OerIbzT2skEiA4l6/CdLgO4OFaCX9Bk7IsCzAx/vNlxH/pqZUl dXZt0E7mriwgwwSUAiyfGIfkyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHO5tYb ea/R4T8zeb69IRjHfWB/MB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBhPr/JuQkPX6iMw+tyMYtjarTdhgfzhlwJIioYZ+N8GiiLWXWg/H7 R7aWNV2rdG+KxQKUc/qBh2pCPn6hoVbqDo3lXcGEfZiBRAPnAGeslDDwlfw0+euQ e5YAx1qb839aBDp7YWVqea2CrFG4/04dyF8g+YeKLRB2+4azhO8GJRseQRjMeiZ9 rkKKSZ5O4zWKgh/4v61RFV6PynmP3mCvk4trmyK/YkWSTjigYndZ5eHVO6btSRQN yGcrdiqHnKu9KE8iNysbpP3vBrljLqTkm/3nFlueAeX7KYljD7c1sFjRyusljgeT 7EdBlcxHX+xeIlgleWjQ8lh6vjgrKVZG -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:30 2025 by rpki-client