$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: SYDzb1zOozT91DubyXCNwaAoOdcBjm+nYXoMuOhEMRk= Subject key identifier: 32:02:87:62:D4:D6:CE:F6:85:57:09:D2:28:02:3B:B9:EB:5A:AF:A7 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: EF Signing time: Wed 05 Nov 2025 05:28:58 +0000 Manifest this update: Wed 05 Nov 2025 05:28:57 +0000 Manifest next update: Wed 12 Nov 2025 05:28:57 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: UEDH3AtP61O0YJT6xTfxRjVBKXFCzomG3KeP6C2L7pc=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: ZL8Uf90EoIe/9cFPftTPRzJYLCEIVxaFapmNs/ZbD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Nov 5 05:28:57 2025 GMT Not After : Nov 12 05:28:57 2025 GMT Subject: CN=690ae09a-7905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:62:35:0b:01:66:95:5c:62:1b:9d:ac:98: c5:cd:6b:27:2d:dc:37:5b:ec:95:48:01:de:15:84: 1e:0e:56:17:94:82:86:2e:d7:97:50:d3:63:36:3d: 1e:19:60:a8:d9:32:d4:26:f5:19:6a:7a:39:e7:ce: 59:d5:c9:14:a1:1b:8c:27:49:f1:92:76:68:09:0b: 61:59:03:9f:54:f3:9e:34:89:d8:0b:6f:60:53:23: 3d:bf:d0:1c:fd:e6:62:5f:c1:fe:cd:68:8c:ba:97: 93:37:79:68:ca:30:a4:65:98:0d:a6:57:1b:d5:b1: 84:e2:a7:ae:35:03:ae:af:e5:72:9c:88:78:0d:9e: 19:19:58:0f:ff:99:6b:51:93:ff:73:4c:8e:74:f4: e9:9d:72:f3:2c:e3:df:6d:6d:8f:5b:5b:7d:20:4e: 60:8b:a7:7a:07:04:35:eb:13:19:8a:9b:d5:09:7f: d7:e6:3b:d1:53:b6:48:e9:93:4a:a7:f2:dd:a2:d8: d9:e0:dd:48:be:ee:5c:df:c0:93:09:36:79:04:1b: 60:78:22:4b:c6:d9:7b:6a:a4:6d:8b:e5:24:aa:84: 65:52:9a:42:bf:28:ed:4d:eb:d3:a8:7f:47:4a:34: fe:bf:3a:4c:81:00:69:3c:e4:f5:bd:6c:a7:24:cb: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:02:87:62:D4:D6:CE:F6:85:57:09:D2:28:02:3B:B9:EB:5A:AF:A7 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a8:d7:c7:b1:48:97:4e:b1:d3:14:fd:86:8f:c9:c0:be:ea: f9:86:ea:81:5a:a0:d4:bc:ce:45:09:cb:69:33:3d:e6:af:cd: 06:70:ba:cc:72:73:7a:cc:3c:27:4f:00:c0:56:d0:7f:f0:be: 9f:47:51:49:6f:23:4c:3f:3f:d6:0c:c5:bc:d4:a3:35:0d:59: 56:cc:e4:22:e0:52:1d:aa:1f:34:0f:5d:d3:f7:c2:54:3c:ec: ed:49:8d:c9:be:60:bd:4e:d9:86:f8:d0:de:12:c2:ed:ba:b6: 0c:88:67:0f:b5:4a:4d:1c:4d:70:65:72:39:77:6e:05:e2:d2: 6e:a0:c3:4d:15:f8:2c:cc:d0:3f:36:e8:4c:97:b2:eb:78:45: d3:e5:ba:b5:8d:2d:1d:78:2e:74:a1:6e:a9:f0:76:70:34:d3: 54:a4:67:bc:e2:11:e8:68:5b:e6:ad:54:42:91:fb:eb:d2:89: eb:47:7f:60:ee:9a:f7:a8:04:06:61:cc:a0:ed:9a:a4:c0:97: fe:b0:1a:49:e2:0b:56:08:99:74:fd:d2:20:5c:4b:0e:05:83: 24:94:20:23:f9:d5:a9:72:ae:24:d5:9b:46:ba:2c:4d:7a:4d: 43:92:37:54:b0:ce:d2:63:05:70:09:76:7c:2a:bc:35:c2:3f: 84:01:c8:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUxMTA1MDUyODU3WhcNMjUxMTEyMDUyODU3WjAYMRYwFAYD VQQDEw02OTBhZTA5YS03OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQhiNQsBZpVcYhudrJjFzWsnLdw3W+yVSAHeFYQeDlYXlIKGLteXUNNjNj0e GWCo2TLUJvUZano5585Z1ckUoRuMJ0nxknZoCQthWQOfVPOeNInYC29gUyM9v9Ac /eZiX8H+zWiMupeTN3loyjCkZZgNplcb1bGE4qeuNQOur+VynIh4DZ4ZGVgP/5lr UZP/c0yOdPTpnXLzLOPfbW2PW1t9IE5gi6d6BwQ16xMZipvVCX/X5jvRU7ZI6ZNK p/LdotjZ4N1Ivu5c38CTCTZ5BBtgeCJLxtl7aqRti+UkqoRlUppCvyjtTevTqH9H SjT+vzpMgQBpPOT1vWynJMtjMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDICh2LU 1s72hVcJ0igCO7nrWq+nMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuqNfHsUiXTrHTFP2Gj8nAvur5huqBWqDUvM5FCctpMz3mr80GcLrM cnN6zDwnTwDAVtB/8L6fR1FJbyNMPz/WDMW81KM1DVlWzOQi4FIdqh80D13T98JU POztSY3JvmC9TtmG+NDeEsLturYMiGcPtUpNHE1wZXI5d24F4tJuoMNNFfgszNA/ NuhMl7LreEXT5bq1jS0deC50oW6p8HZwNNNUpGe84hHoaFvmrVRCkfvr0onrR39g 7pr3qAQGYcyg7ZqkwJf+sBpJ4gtWCJl0/dIgXEsOBYMklCAj+dWpcq4k1ZtGuixN ek1DkjdUsM7SYwVwCXZ8Krw1wj+EAciB -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:32 2025 by rpki-client