$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: LMRh5D+oYG2BH2+Mi/AakSS+9UJNHEaDpIuLHUGw5dQ= Subject key identifier: 71:82:AD:3F:08:95:AA:4C:7D:AE:D3:5A:B2:DA:30:16:9A:B7:F4:F8 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0290 Signing time: Wed 05 Nov 2025 01:41:04 +0000 Manifest this update: Wed 05 Nov 2025 01:41:04 +0000 Manifest next update: Wed 12 Nov 2025 01:41:04 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: e0fgdE1oF5FWXJt4VjDUdMV//yAringon+T5HNI7mAU=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Nov 5 01:41:04 2025 GMT Not After : Nov 12 01:41:04 2025 GMT Subject: CN=690aab30-d58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:c6:0d:ba:e9:40:28:a7:45:12:78:f2:e5: 7b:2e:6c:cf:a0:7e:5a:0b:c2:a9:05:81:fb:44:4d: 80:9d:9c:38:c4:d6:58:76:34:fa:c9:06:b9:23:76: 50:42:d3:39:71:6e:2c:8e:84:90:c4:2f:c2:0a:b7: db:05:16:32:f2:b5:0f:19:0b:ad:99:7e:ae:11:a0: 11:48:f2:ae:cb:a8:72:6e:8e:9d:2f:18:39:56:c1: 8d:ce:a0:f6:7c:db:43:74:77:ea:49:40:bc:5c:12: 78:d8:57:8e:f4:e7:74:c6:49:bc:34:8d:4d:47:88: fb:95:15:bf:fe:17:62:76:9b:ba:87:40:74:b6:84: 79:34:8c:e0:68:14:12:3b:89:31:43:12:35:75:8e: be:d0:5c:6e:fb:8b:72:70:81:7e:ec:f3:10:dd:cf: 06:55:49:dc:ce:82:1f:49:55:50:26:c1:56:96:e0: a9:33:0f:32:1a:65:c8:ff:f8:1a:0f:75:95:66:fd: 1f:4d:02:55:ad:bb:93:8e:ae:f2:b2:1a:08:45:ca: 3d:4e:44:53:d2:f5:65:19:ed:b2:8d:60:8d:cf:67: f4:b7:75:3c:b0:7a:7f:76:0d:69:73:6f:69:23:b4: e9:fd:c6:5f:03:5d:63:40:af:d6:62:1d:6a:2e:71: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:AD:3F:08:95:AA:4C:7D:AE:D3:5A:B2:DA:30:16:9A:B7:F4:F8 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ec:1c:9e:23:71:64:9e:61:aa:40:ba:43:58:3e:6b:15:31: c1:9b:45:4e:2f:08:24:fc:81:be:11:48:12:2b:cc:b9:23:86: 72:40:bf:8d:9c:e8:2a:aa:36:e3:34:f6:2e:fd:19:86:ef:89: 8b:9d:69:16:e5:88:60:36:7d:99:aa:47:58:77:53:49:d4:d7: 38:3c:19:1a:d8:2c:0e:46:ed:0e:09:4f:f8:60:68:b5:20:71: db:12:c1:9e:66:eb:91:2c:b3:7a:9b:0e:6d:04:41:f3:52:8b: 89:1e:63:b2:ab:16:57:2d:3c:4f:86:c2:fa:b5:08:26:f6:43: 7a:91:2a:c4:01:da:e7:61:3b:62:61:52:5a:21:9e:94:71:0e: f1:3f:33:98:b2:2c:ec:4d:8f:56:05:c6:67:41:da:70:ff:10: 26:48:06:99:44:94:93:db:0f:8a:ed:02:63:6d:db:c6:0c:a2: 14:ef:6c:93:38:99:0c:e7:3c:15:eb:c3:9e:c7:2a:5e:1c:50: a3:97:7b:d7:8f:f6:1a:f3:ca:fb:c4:99:22:d7:ee:d1:e9:df: 30:c5:4d:1b:4b:91:1d:5b:58:0c:05:26:6d:cc:db:1e:24:fb: 74:74:e6:bd:63:08:06:c7:02:88:84:71:2e:66:b6:c3:69:8b: d1:09:17:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUxMTA1MDE0MTA0WhcNMjUxMTEyMDE0MTA0WjAYMRYwFAYD VQQDEw02OTBhYWIzMC1kNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuTGDbrpQCinRRJ48uV7LmzPoH5aC8KpBYH7RE2AnZw4xNZYdjT6yQa5I3ZQ QtM5cW4sjoSQxC/CCrfbBRYy8rUPGQutmX6uEaARSPKuy6hybo6dLxg5VsGNzqD2 fNtDdHfqSUC8XBJ42FeO9Od0xkm8NI1NR4j7lRW//hdidpu6h0B0toR5NIzgaBQS O4kxQxI1dY6+0Fxu+4tycIF+7PMQ3c8GVUnczoIfSVVQJsFWluCpMw8yGmXI//ga D3WVZv0fTQJVrbuTjq7yshoIRco9TkRT0vVlGe2yjWCNz2f0t3U8sHp/dg1pc29p I7Tp/cZfA11jQK/WYh1qLnElnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGCrT8I lapMfa7TWrLaMBaat/T4MB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo7ByeI3FknmGqQLpDWD5rFTHBm0VOLwgk/IG+EUgSK8y5I4ZyQL+N nOgqqjbjNPYu/RmG74mLnWkW5YhgNn2ZqkdYd1NJ1Nc4PBka2CwORu0OCU/4YGi1 IHHbEsGeZuuRLLN6mw5tBEHzUouJHmOyqxZXLTxPhsL6tQgm9kN6kSrEAdrnYTti YVJaIZ6UcQ7xPzOYsizsTY9WBcZnQdpw/xAmSAaZRJST2w+K7QJjbdvGDKIU72yT OJkM5zwV68OexypeHFCjl3vXj/Ya88r7xJki1+7R6d8wxU0bS5EdW1gMBSZtzNse JPt0dOa9YwgGxwKIhHEuZrbDaYvRCRek -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:43 2025 by rpki-client