$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: 1S5YuJ3jh5OAZ/LKaHUDF0DaVac1klizqFxfVjVFtdo= Subject key identifier: B4:0C:A9:0E:06:14:6D:27:16:EC:CE:C3:FB:8C:B2:9A:2E:CD:B7:D0 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 281F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 2811 Signing time: Tue 04 Nov 2025 15:41:48 +0000 Manifest this update: Tue 04 Nov 2025 15:41:48 +0000 Manifest next update: Tue 11 Nov 2025 15:41:48 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: BC8R7jwiaNje5d/195O7L9/DOEDvdebeMcfjmw6SEiQ=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10271 (0x281f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Nov 4 15:41:48 2025 GMT Not After : Nov 11 15:41:48 2025 GMT Subject: CN=690a1ebc-50ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:23:40:3b:b3:05:c3:ab:b8:c5:1e:60:56: 45:9b:ce:0f:4f:bd:3b:84:54:3c:37:38:30:00:27: 33:a6:f4:17:80:64:14:fa:28:b7:8c:9b:70:a1:3f: e0:99:c3:f5:a6:ff:59:6d:35:94:1f:82:2b:f2:21: 49:0f:de:29:51:f1:5b:1f:45:38:04:4b:17:f0:2b: 08:1b:a5:41:36:d6:e5:65:8f:3b:6d:ea:05:fe:32: b2:ba:2b:be:65:59:ba:57:72:93:a7:fa:ef:07:a9: 44:f0:2b:c8:9f:47:b8:ae:04:62:99:43:9c:59:ea: 16:83:1a:6a:bd:fc:c6:35:07:2e:e1:22:44:71:2b: 2d:9e:fc:82:a5:9e:47:a5:ed:52:c0:72:ef:4a:c2: 96:79:c8:2e:84:74:34:37:ff:88:92:81:7c:f8:c1: d6:d3:bc:28:65:ad:6d:23:8b:43:b1:11:8e:bd:a2: ce:1e:b3:8d:c2:81:f1:ff:a7:d9:70:6c:0a:4e:0c: 39:7a:37:a4:c7:3d:06:20:d7:ee:26:aa:e5:3f:2f: 37:40:18:ae:d4:d0:f2:87:9c:ad:4c:f5:31:72:72: f3:59:f5:ec:00:11:d8:17:7d:98:b7:56:b6:0e:d1: 0e:38:0d:d0:cc:e0:6d:8e:6f:3f:b0:69:d2:bb:48: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0C:A9:0E:06:14:6D:27:16:EC:CE:C3:FB:8C:B2:9A:2E:CD:B7:D0 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:e8:99:8f:00:c5:f1:74:03:11:db:95:27:c0:6f:fc:e6: 89:fa:dc:90:44:8d:c1:15:d1:fb:54:26:da:1a:e1:e1:fe:d7: c8:58:fb:33:10:a8:92:6b:23:f1:37:f1:d4:8c:36:d1:f7:b9: 49:92:c9:a3:26:33:49:7c:3c:a9:a6:39:24:7a:eb:80:91:1b: 06:fe:a6:49:4d:c0:7c:39:9e:f5:61:f4:8c:39:1e:33:4e:ed: 2f:31:19:f6:30:b3:2e:d4:e1:e3:82:46:14:5b:00:01:fb:fc: 09:85:ca:c9:d0:c8:bb:bb:91:96:4b:a8:29:21:d9:9f:ac:0e: 33:92:a7:a3:76:44:67:ba:65:bc:77:49:4c:45:a5:6b:31:34: 28:25:d1:39:af:da:c5:ec:5f:e1:34:9e:c4:49:08:86:2d:90: 08:0a:c6:26:cd:d8:06:bf:fe:5b:98:18:ff:49:0c:d0:09:be: 61:fc:3a:05:8f:6e:e3:f2:74:60:62:3b:38:03:0f:3e:22:55: ec:48:bd:6e:fa:f6:89:f5:59:98:bb:7d:9f:f4:88:5e:9e:5f: 14:ee:94:b5:64:d0:f2:e5:99:72:c5:82:5d:e2:6b:01:9f:f8: 7a:3d:79:ca:70:7e:5e:dd:ff:24:15:cf:4f:1d:d7:af:22:61: fb:8b:3a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUxMTA0MTU0MTQ4WhcNMjUxMTExMTU0MTQ4WjAYMRYwFAYD VQQDEw02OTBhMWViYy01MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHAjQDuzBcOruMUeYFZFm84PT707hFQ8NzgwACczpvQXgGQU+ii3jJtwoT/g mcP1pv9ZbTWUH4Ir8iFJD94pUfFbH0U4BEsX8CsIG6VBNtblZY87beoF/jKyuiu+ ZVm6V3KTp/rvB6lE8CvIn0e4rgRimUOcWeoWgxpqvfzGNQcu4SJEcSstnvyCpZ5H pe1SwHLvSsKWecguhHQ0N/+IkoF8+MHW07woZa1tI4tDsRGOvaLOHrONwoHx/6fZ cGwKTgw5ejekxz0GINfuJqrlPy83QBiu1NDyh5ytTPUxcnLzWfXsABHYF32Yt1a2 DtEOOA3QzOBtjm8/sGnSu0gKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQMqQ4G FG0nFuzOw/uMspouzbfQMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB01OiZjwDF8XQDEduVJ8Bv/OaJ+tyQRI3BFdH7VCbaGuHh/tfIWPsz EKiSayPxN/HUjDbR97lJksmjJjNJfDyppjkkeuuAkRsG/qZJTcB8OZ71YfSMOR4z Tu0vMRn2MLMu1OHjgkYUWwAB+/wJhcrJ0Mi7u5GWS6gpIdmfrA4zkqejdkRnumW8 d0lMRaVrMTQoJdE5r9rF7F/hNJ7ESQiGLZAICsYmzdgGv/5bmBj/SQzQCb5h/DoF j27j8nRgYjs4Aw8+IlXsSL1u+vaJ9VmYu32f9Ihenl8U7pS1ZNDy5ZlyxYJd4msB n/h6PXnKcH5e3f8kFc9PHdevImH7izry -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:06 2025 by rpki-client