$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: T6u5NVRtfYRH3aegxMYo/NnpxTyw4C+dLhUF9qor3O8= Subject key identifier: 2F:30:EC:DD:70:DD:B0:A0:12:3E:5F:D2:77:A7:AA:2B:F8:76:D5:2F Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 234A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 233B Signing time: Tue 04 Nov 2025 15:54:55 +0000 Manifest this update: Tue 04 Nov 2025 15:54:55 +0000 Manifest next update: Tue 11 Nov 2025 15:54:55 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: E8c1nUCPrPSW45rfPp+Ut5rRboZc7qv8YCgElUHJcVk=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9034 (0x234a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Nov 4 15:54:55 2025 GMT Not After : Nov 11 15:54:55 2025 GMT Subject: CN=690a21cf-e2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:09:02:f3:db:2a:89:04:a4:cf:c5:29:d7: 92:25:d4:5f:7d:31:f2:44:0c:73:10:00:ce:2f:61: 56:a3:a3:0a:6c:40:bd:1e:6c:12:7d:10:e9:04:11: 9c:e7:7f:28:31:af:eb:04:eb:db:32:a2:32:7b:cc: e0:98:5a:c9:e8:8a:f1:42:a6:b5:c6:b0:72:2e:9d: cf:68:1b:41:8d:75:0a:48:d2:ad:1e:97:2b:14:8f: bb:b8:c2:30:5e:97:5a:bb:72:43:9a:ae:69:fe:57: 4d:91:c8:3d:7d:4e:6f:35:58:0f:a6:70:39:b3:76: 9d:64:52:01:e4:e0:3c:e3:85:02:f0:32:38:eb:9e: 89:1c:76:63:b0:b7:e9:bf:7d:92:e5:44:92:77:88: 8d:1f:20:41:50:a1:a1:23:6f:65:e6:96:18:cc:8d: 79:ab:23:54:d1:41:a6:b6:86:e3:89:02:75:a2:5e: 90:10:2d:27:b3:71:8c:c9:d5:ed:16:b6:8d:60:70: 88:ec:21:a4:7a:f4:70:84:8a:ad:07:56:e1:5a:1b: cc:67:72:96:92:fd:e4:12:69:38:8c:f4:a3:ad:8d: 18:ca:3d:36:36:d7:8a:a3:0a:74:64:76:c1:c4:e0: e2:80:66:95:b7:26:ee:b6:2a:12:11:91:76:1f:39: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:30:EC:DD:70:DD:B0:A0:12:3E:5F:D2:77:A7:AA:2B:F8:76:D5:2F X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8b:8d:91:b6:ca:bd:9d:8a:e7:33:5e:c1:b6:b0:f6:0b:8e: f7:c7:b7:c0:d4:8a:ef:bb:5a:e5:55:37:f4:f1:00:76:e4:d8: 30:77:ef:1d:d6:3b:65:07:80:f4:39:3c:10:02:cb:2f:de:27: cb:d5:e8:e4:a5:4a:d8:12:05:2c:1b:5a:5a:1b:5c:f6:30:89: 62:17:78:3c:99:ec:d0:4d:f9:e2:28:a9:10:b3:06:f4:e6:4d: 91:a0:58:65:0e:3c:96:2d:ca:db:73:20:06:79:cf:28:38:b3: eb:b6:25:4b:0e:97:ff:3b:d0:fb:e9:5d:8c:55:e7:c5:6a:a0: cf:b9:00:2c:3e:82:b5:d3:a3:64:b6:f0:35:6e:75:7e:ba:37: 4e:52:f1:02:7d:e4:c1:da:ca:b8:9c:bd:21:cd:a1:67:bc:d8: 0b:20:f4:4a:ad:4a:04:44:60:3a:2b:62:7e:6d:8f:a7:d9:78: 95:45:3d:38:a5:72:0f:ab:a6:ff:b2:af:cd:9d:ef:ce:f0:b3: ca:2d:64:50:2a:09:5c:26:a2:89:8e:ac:c9:44:12:9b:47:8c: a9:5a:71:65:be:49:77:f3:85:b5:b5:d4:28:7f:9b:08:89:05: 7e:f8:f5:fa:8d:27:8c:81:8f:32:7a:d8:78:dd:f8:d2:aa:d8: 26:1c:b6:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUxMTA0MTU1NDU1WhcNMjUxMTExMTU1NDU1WjAYMRYwFAYD VQQDEw02OTBhMjFjZi1lMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy8JAvPbKokEpM/FKdeSJdRffTHyRAxzEADOL2FWo6MKbEC9HmwSfRDpBBGc 538oMa/rBOvbMqIye8zgmFrJ6IrxQqa1xrByLp3PaBtBjXUKSNKtHpcrFI+7uMIw Xpdau3JDmq5p/ldNkcg9fU5vNVgPpnA5s3adZFIB5OA844UC8DI4656JHHZjsLfp v32S5USSd4iNHyBBUKGhI29l5pYYzI15qyNU0UGmtobjiQJ1ol6QEC0ns3GMydXt FraNYHCI7CGkevRwhIqtB1bhWhvMZ3KWkv3kEmk4jPSjrY0Yyj02NteKowp0ZHbB xODigGaVtybutioSEZF2HzlAMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8w7N1w 3bCgEj5f0nenqiv4dtUvMB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYi42Rtsq9nYrnM17BtrD2C473x7fA1Irvu1rlVTf08QB25Ngwd+8d 1jtlB4D0OTwQAssv3ifL1ejkpUrYEgUsG1paG1z2MIliF3g8mezQTfniKKkQswb0 5k2RoFhlDjyWLcrbcyAGec8oOLPrtiVLDpf/O9D76V2MVefFaqDPuQAsPoK106Nk tvA1bnV+ujdOUvECfeTB2sq4nL0hzaFnvNgLIPRKrUoERGA6K2J+bY+n2XiVRT04 pXIPq6b/sq/Nne/O8LPKLWRQKglcJqKJjqzJRBKbR4ypWnFlvkl384W1tdQof5sI iQV++PX6jSeMgY8yeth43fjSqtgmHLZf -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:24 2025 by rpki-client