$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: csnEEMcRFFdh0KbcpXSkg1MFpMBybyvcLIC1v1rXdJ8= Subject key identifier: A0:85:3E:EF:E3:23:4E:C6:D1:7D:70:F2:F3:BE:E8:2E:A1:AC:F8:12 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 0681 Signing time: Sun 02 Nov 2025 22:26:36 +0000 Manifest this update: Sun 02 Nov 2025 22:26:35 +0000 Manifest next update: Sun 09 Nov 2025 22:26:35 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: tt277DE3+yHcXT/AY3e+W8iuxV6RYRTB2FbZwTd3QBY=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Nov 2 22:26:35 2025 GMT Not After : Nov 9 22:26:35 2025 GMT Subject: CN=6907da9b-d13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:4f:7e:d5:ad:fb:a1:1b:be:7d:f6:8a:8e: d1:3d:2e:45:39:9c:95:4b:91:f1:20:94:f5:92:9f: 8e:2b:d7:01:e6:02:2f:99:7a:5c:66:9d:55:b3:a9: e9:bf:de:40:6d:eb:30:fe:f6:1d:e1:08:a2:bf:b7: 4a:b8:9c:33:63:71:d7:a2:e1:2b:4f:28:12:eb:74: f7:9e:e5:7e:cf:f7:a5:c2:dc:0c:41:e3:bf:28:c0: 3a:98:67:1d:3a:ae:41:7e:f6:db:5e:5f:0a:59:d2: 44:f6:c4:9f:43:6c:3b:af:02:4f:9d:62:86:d3:66: 03:76:aa:9b:c5:11:f1:27:f3:68:a2:00:4e:98:5c: 9f:ad:0b:63:d2:7c:5c:4f:1e:26:92:ee:ac:4f:66: a4:60:cf:8e:54:d5:5b:8b:ca:dd:70:bf:37:13:9d: 18:b7:bc:9b:a3:37:d9:05:97:f8:13:82:84:26:57: 1a:0e:25:ef:c4:14:7c:60:cb:5b:a1:e1:cf:7a:22: 2a:19:1f:d1:9f:36:be:5c:62:a7:5c:59:d8:be:d3: 7c:f4:c3:b0:29:22:42:d7:a7:81:9c:5b:53:e7:39: 5d:db:3b:28:6a:90:44:ec:f7:f6:6a:d2:9f:e1:06: 41:fa:76:e0:78:22:81:92:3b:f0:be:5d:01:20:b2: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:85:3E:EF:E3:23:4E:C6:D1:7D:70:F2:F3:BE:E8:2E:A1:AC:F8:12 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bd:3f:4d:66:38:e6:ab:f2:3b:e3:15:47:7d:3a:77:a4:cd: 5a:ba:ad:c6:68:89:2a:fe:6f:8f:e8:29:b5:f3:2d:26:67:8e: de:4b:2b:32:ef:d4:90:64:f4:f7:30:1b:e4:50:bb:ba:f1:30: 87:fd:0d:dc:60:45:77:ed:b1:7a:70:a4:f8:95:dc:e1:59:df: 6e:7f:aa:f1:73:c5:cf:49:01:b1:c0:f2:2f:b8:f8:bc:83:19: 5f:c7:80:39:26:95:ca:0f:67:e0:4c:cb:46:0d:c1:69:94:f2: dc:f5:4d:c2:5f:bd:a3:48:cb:5e:c4:2a:8d:de:20:cc:7e:3a: 29:5f:b2:14:c7:0a:4d:90:a9:47:57:44:fb:3d:a0:f4:59:11: 53:93:5c:44:f7:eb:26:bf:f5:5b:35:af:18:f1:4c:c5:6c:af: 01:22:d4:25:e9:5c:bf:6f:0c:75:8e:1e:95:0e:63:86:f7:6e: 32:45:dc:2e:32:93:97:41:d4:34:26:f7:9e:b5:b6:ea:c0:d5: 0e:06:5e:b1:60:a6:83:17:31:6f:8b:33:f1:87:5c:9e:29:54: 2a:14:24:aa:a4:50:a7:90:e0:91:bb:6b:63:95:f7:27:81:df: 95:a9:61:cd:37:91:a9:11:23:7a:ac:92:b0:6b:b0:9d:23:3a: 5a:b9:fc:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUxMTAyMjIyNjM1WhcNMjUxMTA5MjIyNjM1WjAYMRYwFAYD VQQDEw02OTA3ZGE5Yi1kMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPdPftWt+6Ebvn32io7RPS5FOZyVS5HxIJT1kp+OK9cB5gIvmXpcZp1Vs6np v95Abesw/vYd4Qiiv7dKuJwzY3HXouErTygS63T3nuV+z/elwtwMQeO/KMA6mGcd Oq5BfvbbXl8KWdJE9sSfQ2w7rwJPnWKG02YDdqqbxRHxJ/NoogBOmFyfrQtj0nxc Tx4mku6sT2akYM+OVNVbi8rdcL83E50Yt7ybozfZBZf4E4KEJlcaDiXvxBR8YMtb oeHPeiIqGR/Rnza+XGKnXFnYvtN89MOwKSJC16eBnFtT5zld2zsoapBE7Pf2atKf 4QZB+nbgeCKBkjvwvl0BILLTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCFPu/j I07G0X1w8vO+6C6hrPgSMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPvT9NZjjmq/I74xVHfTp3pM1auq3GaIkq/m+P6Cm18y0mZ47eSysy 79SQZPT3MBvkULu68TCH/Q3cYEV37bF6cKT4ldzhWd9uf6rxc8XPSQGxwPIvuPi8 gxlfx4A5JpXKD2fgTMtGDcFplPLc9U3CX72jSMtexCqN3iDMfjopX7IUxwpNkKlH V0T7PaD0WRFTk1xE9+smv/VbNa8Y8UzFbK8BItQl6Vy/bwx1jh6VDmOG924yRdwu MpOXQdQ0JveetbbqwNUOBl6xYKaDFzFvizPxh1yeKVQqFCSqpFCnkOCRu2tjlfcn gd+VqWHNN5GpESN6rJKwa7CdIzpaufxg -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:49 2025 by rpki-client