$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft File: zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json) Hash identifier: +RW+6HaevPXEXFpBtovW+zQzLvjXnhvATpEcUBQo1Yg= Subject key identifier: FD:41:0B:C3:C2:86:AE:66:E6:06:F0:2D:F7:3A:0D:39:CF:E8:6D:8E Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 Certificate issuer: /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft Manifest number: 0114 Signing time: Wed 05 Nov 2025 05:00:27 +0000 Manifest this update: Wed 05 Nov 2025 05:00:26 +0000 Manifest next update: Wed 12 Nov 2025 05:00:26 +0000 Files and hashes: 1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: moxl14QaWom1PFLM8pyzdQLz2IEGKgS2OcX1MW0kuE4=) 2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1 Validity Not Before: Nov 5 05:00:26 2025 GMT Not After : Nov 12 05:00:26 2025 GMT Subject: CN=690ad9eb-ef15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:1a:3c:46:7c:1a:f2:3a:0a:dc:3c:c7:55: ae:7c:ac:6b:6c:44:bf:eb:76:23:00:ee:08:8c:e1: 8f:76:6c:2f:49:fd:0b:4b:39:23:fd:cc:c9:55:dd: 43:32:cb:3e:20:70:82:d4:a2:3e:c8:7a:75:7f:9a: 29:16:ed:fc:42:30:18:7c:09:bc:68:70:60:76:43: 78:5e:1d:9d:0b:13:2d:55:85:6b:f2:b3:1e:5a:90: 43:39:28:72:2e:fa:17:02:18:a4:41:02:6a:e6:9b: 26:e6:50:3b:51:1c:46:c8:9e:64:25:91:67:88:77: f8:25:e8:e7:01:2d:c4:ab:f2:f4:ef:23:a0:10:e1: d2:77:5a:d1:bb:0b:4f:ce:f8:d0:b4:ed:28:91:86: 53:21:6a:db:fa:c7:39:7d:07:bc:04:68:a0:df:4a: 90:fe:e4:b3:eb:66:f5:1c:58:05:c4:8a:97:6e:19: 11:9b:cd:14:ad:0d:68:19:3f:f6:6d:65:c7:c6:fb: 85:b1:e2:e5:62:b4:cb:20:be:75:9b:03:f6:05:e1: 9c:fd:55:45:f2:0e:44:eb:56:ea:73:12:72:3e:c1: b9:51:63:02:f7:91:18:37:30:06:4a:8c:8e:92:ff: 34:56:d2:df:28:6f:6f:21:c2:e6:b5:17:44:52:99: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:0B:C3:C2:86:AE:66:E6:06:F0:2D:F7:3A:0D:39:CF:E8:6D:8E X509v3 Authority Key Identifier: keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6c:67:2d:d7:fc:ee:fb:cf:01:b2:0b:ca:2b:40:f2:3c:45: ca:d9:31:42:13:bf:fd:42:74:a3:3c:3d:7e:b6:67:59:42:86: c6:e4:e2:5a:df:f4:15:eb:c4:bf:bc:2a:73:32:c1:69:e2:38: 8f:8f:70:2d:e2:03:31:d7:ef:e2:b0:79:9a:6a:b3:92:66:a2: 12:13:b4:88:1e:cc:bc:4e:71:70:b6:6d:e4:19:94:e4:ea:49: 91:4c:30:49:1f:37:16:c2:cf:7e:46:88:9f:d3:c3:df:2a:32: 78:d5:fc:70:fc:d1:00:c4:34:c2:b0:3f:44:97:8c:f8:19:ce: b7:54:ff:53:21:2b:85:ed:c5:06:7e:9c:d6:de:bc:07:98:b7: b2:56:d6:9d:42:31:b9:b9:cf:dc:4a:03:86:24:ea:d5:5e:2d: 8c:c7:f9:16:d8:13:13:c0:06:b3:cc:68:73:6d:21:e1:21:6a: b4:42:74:14:42:70:c1:f0:e2:95:27:b9:66:3f:64:ce:29:d2: 62:b7:23:8e:db:f9:65:ab:3c:21:ab:f7:58:f8:52:2e:9e:89: a2:7a:30:69:03:d2:49:43:fb:fd:f9:5f:c6:4d:91:53:66:b2: 74:29:82:27:82:d6:f7:02:ef:89:8a:6e:00:11:bc:fb:a0:8a: f9:83:3d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGODYxMTAvBgNVBAUTKENFNkJGQjA4Rjk1Mjg2MzUyN0E5M0MxMERBM0NBN0RG OTExM0FDRjEwHhcNMjUxMTA1MDUwMDI2WhcNMjUxMTEyMDUwMDI2WjAYMRYwFAYD VQQDEw02OTBhZDllYi1lZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriwaPEZ8GvI6Ctw8x1WufKxrbES/63YjAO4IjOGPdmwvSf0LSzkj/czJVd1D Mss+IHCC1KI+yHp1f5opFu38QjAYfAm8aHBgdkN4Xh2dCxMtVYVr8rMeWpBDOShy LvoXAhikQQJq5psm5lA7URxGyJ5kJZFniHf4JejnAS3Eq/L07yOgEOHSd1rRuwtP zvjQtO0okYZTIWrb+sc5fQe8BGig30qQ/uSz62b1HFgFxIqXbhkRm80UrQ1oGT/2 bWXHxvuFseLlYrTLIL51mwP2BeGc/VVF8g5E61bqcxJyPsG5UWMC95EYNzAGSoyO kv80VtLfKG9vIcLmtRdEUpnRjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1BC8PC hq5m5gbwLfc6DTnP6G2OMB8GA1UdIwQYMBaAFM5r+wj5UoY1J6k8ENo8p9+RE6zx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY4Ni8wOTAzREI5MDEy QjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hqVW5xVHdRMmp5bjM1RVRy UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptdjdDUGxTaGpVbnFUd1EyanluMzVFVHJQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY4Ni8wOTAzREI5MDEyQjExMUVGOTIxMTUwMzZDNEY5QUUwMi96bXY3Q1BsU2hq VW5xVHdRMmp5bjM1RVRyUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbbGct1/zu+88BsgvKK0DyPEXK2TFCE7/9QnSjPD1+tmdZQobG5OJa 3/QV68S/vCpzMsFp4jiPj3At4gMx1+/isHmaarOSZqISE7SIHsy8TnFwtm3kGZTk 6kmRTDBJHzcWws9+Roif08PfKjJ41fxw/NEAxDTCsD9El4z4Gc63VP9TISuF7cUG fpzW3rwHmLeyVtadQjG5uc/cSgOGJOrVXi2Mx/kW2BMTwAazzGhzbSHhIWq0QnQU QnDB8OKVJ7lmP2TOKdJityOO2/llqzwhq/dY+FIunomiejBpA9JJQ/v9+V/GTZFT ZrJ0KYIngtb3Au+Jim4AEbz7oIr5gz1G -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:01 2025 by rpki-client