$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: 2zTX2bnGWxr/0pbqE2B2TP3aQoLW/kvITWvkK4VB4Ss= Subject key identifier: 67:4C:CE:84:AF:06:C3:55:93:A8:26:1A:EA:4D:34:B0:5D:B4:57:F9 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: E0 Signing time: Mon 03 Nov 2025 05:56:35 +0000 Manifest this update: Mon 03 Nov 2025 05:56:34 +0000 Manifest next update: Mon 10 Nov 2025 05:56:34 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: lOYbEFhawNk3CwfKDgAgshV/tIVDFhH+PNdMvFu24gQ=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: B45FE878A9AD11F0961A9A16C4F9AE02.roa (hash: h1D43mkDjU8O4Towelr+Ypv4NL8HA4t7Ft8OdAyajp4=) 5: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 6: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 7: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Nov 3 05:56:34 2025 GMT Not After : Nov 10 05:56:34 2025 GMT Subject: CN=69084412-e928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4c:1a:e4:4b:73:07:f3:50:b4:7c:c3:c9:ca: fd:b5:d2:87:30:99:44:e6:04:bf:7a:4f:10:b5:d7: 3f:1c:a3:a1:c5:dd:5c:18:60:9a:bb:11:dd:1b:24: cb:bd:60:b0:fb:7d:ae:bb:0a:cb:51:b0:bd:9e:c7: c4:0e:4c:b9:fc:10:6b:97:91:68:ab:1e:48:e7:a6: 00:46:71:98:41:b3:38:dc:66:77:12:8f:5a:c4:7d: b3:bc:d5:1a:22:3b:4d:d9:f8:31:46:a4:d8:61:fb: 7f:b5:8e:07:8f:40:44:5f:1d:5c:68:16:58:19:97: e6:7f:d2:ea:d9:ef:51:35:c9:6d:38:9d:62:54:7f: bc:09:93:db:d4:c9:7a:12:58:8a:d5:d0:a1:1a:25: 21:46:f6:24:b2:e5:fd:c1:83:65:84:8d:ee:4c:ed: a3:30:06:a3:10:fd:a5:68:6d:e1:78:80:32:e3:c9: 2f:b5:40:0a:5c:f1:7e:4d:b1:a4:20:bf:b6:72:6d: 15:b3:c6:11:db:ff:6c:53:57:b2:75:21:80:9f:6d: 11:c6:ed:c7:bc:d2:44:e1:bf:a1:d6:26:b6:a0:94: 15:59:75:8a:ef:2f:b3:b0:65:d8:db:f2:a6:98:ff: c1:cc:81:4c:56:a6:71:f0:50:84:04:57:9b:76:49: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4C:CE:84:AF:06:C3:55:93:A8:26:1A:EA:4D:34:B0:5D:B4:57:F9 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ec:75:ba:a5:46:b5:be:3a:dd:93:f0:95:2d:70:e4:e5:8e: bc:20:18:34:7b:df:2c:ec:06:32:e1:3a:9b:6e:a8:65:b8:bb: ec:50:43:84:1f:1d:23:60:89:22:3f:3a:b6:10:21:d2:e8:74: 0d:98:c4:5b:e2:d5:6d:db:04:86:ad:1c:15:eb:53:38:74:a5: b4:37:16:b9:e4:24:b8:e1:91:e3:c2:f6:56:74:af:44:20:2c: 69:4a:9d:a0:50:e4:1c:e4:9a:12:4d:9f:78:ad:b9:99:99:0d: f7:7b:7a:a6:21:30:d7:8b:c4:ea:59:c9:b8:22:5f:00:e7:5f: 1f:eb:8e:83:b3:51:40:9e:39:f6:a0:26:c0:b6:d8:6b:40:c0: 1c:09:45:b9:b2:ed:b2:be:b5:13:58:c0:b2:54:a6:19:c0:22: 1e:89:67:22:ec:18:b1:3b:88:49:e4:ec:7f:9b:c8:9a:07:7e: c4:fb:b7:e8:72:dc:71:20:fa:de:fc:07:87:3c:fe:f3:a0:cc: ec:3a:2e:19:b6:a7:00:27:3f:39:f2:45:61:74:bd:7d:7c:95: ef:04:6a:c3:dd:6c:19:57:4f:19:1c:0d:bd:4f:40:cc:38:a1: 0d:54:b3:09:bb:2f:08:ab:82:fa:e2:bb:f4:26:da:28:09:dc: 91:99:d3:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUxMTAzMDU1NjM0WhcNMjUxMTEwMDU1NjM0WjAYMRYwFAYD VQQDEw02OTA4NDQxMi1lOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Uwa5EtzB/NQtHzDycr9tdKHMJlE5gS/ek8Qtdc/HKOhxd1cGGCauxHdGyTL vWCw+32uuwrLUbC9nsfEDky5/BBrl5Foqx5I56YARnGYQbM43GZ3Eo9axH2zvNUa IjtN2fgxRqTYYft/tY4Hj0BEXx1caBZYGZfmf9Lq2e9RNcltOJ1iVH+8CZPb1Ml6 EliK1dChGiUhRvYksuX9wYNlhI3uTO2jMAajEP2laG3heIAy48kvtUAKXPF+TbGk IL+2cm0Vs8YR2/9sU1eydSGAn20Rxu3HvNJE4b+h1ia2oJQVWXWK7y+zsGXY2/Km mP/BzIFMVqZx8FCEBFebdkmG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdMzoSv BsNVk6gmGupNNLBdtFf5MB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB97HW6pUa1vjrdk/CVLXDk5Y68IBg0e98s7AYy4TqbbqhluLvsUEOE Hx0jYIkiPzq2ECHS6HQNmMRb4tVt2wSGrRwV61M4dKW0Nxa55CS44ZHjwvZWdK9E ICxpSp2gUOQc5JoSTZ94rbmZmQ33e3qmITDXi8TqWcm4Il8A518f646Ds1FAnjn2 oCbAtthrQMAcCUW5su2yvrUTWMCyVKYZwCIeiWci7BixO4hJ5Ox/m8iaB37E+7fo ctxxIPre/AeHPP7zoMzsOi4ZtqcAJz858kVhdL19fJXvBGrD3WwZV08ZHA29T0DM OKENVLMJuy8Iq4L64rv0JtooCdyRmdOD -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:54 2025 by rpki-client