$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json) Hash identifier: Wz4IIfTSNPyj8+weLE095utpj9XBBMGMQvUivTopA98= Subject key identifier: C4:06:D5:64:FD:EA:03:99:77:AD:EE:C5:4F:43:ED:0C:9A:B8:90:76 Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:13:14 +0000 Manifest this update: Mon 03 Nov 2025 07:13:13 +0000 Manifest next update: Mon 10 Nov 2025 07:13:13 +0000 Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: TcfX0NSSHETOmk9eQ0OA0G+SaG/ciKKY4b9lyPtM0uQ=) 2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Validity Not Before: Nov 3 07:13:13 2025 GMT Not After : Nov 10 07:13:13 2025 GMT Subject: CN=69085609-6e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:d6:d1:0b:0a:a7:73:5e:e2:b2:59:cb:f3: 0e:e9:5b:e1:62:0f:a3:30:fa:78:15:d8:da:9c:48: 5c:bf:cc:bb:cb:5b:ac:d5:72:e1:fc:a5:d3:52:b3: 9a:94:32:94:af:18:88:f8:25:e6:2c:a5:13:5c:71: 6e:f0:46:3e:54:8e:65:35:c4:1a:f8:a3:67:73:98: ea:66:db:0b:4f:a7:07:88:df:b0:09:9c:e9:00:95: bd:8d:4e:59:5d:11:a8:16:c8:2e:ed:37:5e:a0:b5: a8:39:20:a8:aa:8f:4d:8d:af:ed:ee:12:59:7e:e9: 2d:d6:6b:34:3b:12:2e:3b:4a:96:2a:4c:7c:45:ae: 9e:14:2a:0d:ef:3d:b1:60:b8:69:94:92:22:9c:22: f0:1d:b1:32:9c:8d:e9:9e:09:be:46:d8:79:f3:9f: a0:c5:46:87:3b:35:aa:d1:05:43:02:67:dc:c8:63: 8b:1b:4a:25:06:92:b8:15:09:7b:ce:e1:a5:d4:39: be:f0:c2:00:68:8e:21:a3:0e:f5:5b:9d:c4:3b:eb: 4e:e5:5a:e8:bf:af:a3:44:76:59:61:38:28:e8:8c: 10:be:48:73:db:cc:d5:e9:4a:4e:4b:93:99:8d:63: 0e:02:17:42:55:3a:b7:e5:18:52:df:9b:d2:f0:10: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:D5:64:FD:EA:03:99:77:AD:EE:C5:4F:43:ED:0C:9A:B8:90:76 X509v3 Authority Key Identifier: keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:82:a7:c6:96:1e:f5:dd:dd:79:2a:0d:47:d0:61:84:6f:74: 6c:ff:02:17:ff:76:67:15:6c:e9:36:db:14:fc:ca:3c:38:64: 07:c0:f8:28:1f:0a:88:fd:91:9e:d2:94:d8:cf:20:86:8a:81: e2:12:90:74:9d:dc:90:b3:dd:0e:a9:c2:60:c9:5c:05:5c:e3: ba:bf:42:2c:c6:b2:49:80:90:84:1f:6c:1d:9e:f8:94:d3:62: 8d:87:bd:1a:27:19:c7:36:13:fd:cc:3a:c5:9c:b6:2b:83:65: ed:de:9a:8a:01:e5:6a:91:1a:08:e3:66:ab:17:0d:a5:6c:83: e7:10:3a:5e:4f:94:b5:fd:50:96:59:eb:3c:c6:db:c8:11:be: b7:47:8b:77:d7:f8:0d:ad:0d:67:40:4f:7d:ae:2f:dc:c7:60: 37:79:64:f6:be:27:3e:fb:7d:ed:a6:43:4b:92:a3:01:e5:85: a7:69:89:aa:16:c9:07:a7:6a:cd:34:ce:06:19:2f:14:a3:1d: 25:90:8d:25:b1:27:1b:f0:2d:b9:ad:98:33:f3:7d:f4:6d:0b: 84:84:06:a1:6e:c0:d2:5b:40:13:99:10:7e:30:e3:7a:97:06: 8a:73:45:11:df:9d:8e:08:12:b4:2a:2c:30:32:d6:ec:f8:39: 4a:7a:fc:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MEU5MDExMC8GA1UEBRMoQ0YxRTBFNUJENzdCMUZGQjUzNTY3ODFGNjE2MzE1OEMy RTJGN0I2RDAeFw0yNTExMDMwNzEzMTNaFw0yNTExMTAwNzEzMTNaMBgxFjAUBgNV BAMTDTY5MDg1NjA5LTZlMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS79bRCwqnc17islnL8w7pW+FiD6Mw+ngV2NqcSFy/zLvLW6zVcuH8pdNSs5qU MpSvGIj4JeYspRNccW7wRj5UjmU1xBr4o2dzmOpm2wtPpweI37AJnOkAlb2NTlld EagWyC7tN16gtag5IKiqj02Nr+3uEll+6S3WazQ7Ei47SpYqTHxFrp4UKg3vPbFg uGmUkiKcIvAdsTKcjemeCb5G2Hnzn6DFRoc7NarRBUMCZ9zIY4sbSiUGkrgVCXvO 4aXUOb7wwgBojiGjDvVbncQ7607lWui/r6NEdllhOCjojBC+SHPbzNXpSk5Lk5mN Yw4CF0JVOrflGFLfm9LwEG79AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxAbVZP3q A5l3re7FT0PtDJq4kHYwHwYDVR0jBBgwFoAUzx4OW9d7H/tTVngfYWMVjC4ve20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRTkwL0JCNkZCNjg4Mzk2 NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveng0T1c5ZDdIX3RUVm5nZllXTVZqQzR2ZTIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw RTkwL0JCNkZCNjg4Mzk2NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90 VFZuZ2ZZV01WakM0dmUyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWCp8aWHvXd3XkqDUfQYYRvdGz/Ahf/dmcVbOk22xT8yjw4ZAfA+Cgf Coj9kZ7SlNjPIIaKgeISkHSd3JCz3Q6pwmDJXAVc47q/QizGskmAkIQfbB2e+JTT Yo2HvRonGcc2E/3MOsWctiuDZe3emooB5WqRGgjjZqsXDaVsg+cQOl5PlLX9UJZZ 6zzG28gRvrdHi3fX+A2tDWdAT32uL9zHYDd5ZPa+Jz77fe2mQ0uSowHlhadpiaoW yQenas00zgYZLxSjHSWQjSWxJxvwLbmtmDPzffRtC4SEBqFuwNJbQBOZEH4w43qX BopzRRHfnY4IErQqLDAy1uz4OUp6/LQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:56 2025 by rpki-client