$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: fYOQ6B9/yzysuKONyLPDw0VCc/9HGJOUOdBM3UqFXrk= Subject key identifier: CF:07:F1:80:B2:B7:E8:F0:C6:86:B0:58:59:A7:4F:37:93:CD:49:54 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 7A Signing time: Mon 03 Nov 2025 06:48:11 +0000 Manifest this update: Mon 03 Nov 2025 06:48:10 +0000 Manifest next update: Mon 10 Nov 2025 06:48:10 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: 61i7EBF9h2jzN3/q3iMyulm9apHDgS9BYvDHYLRMB9I=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Nov 3 06:48:10 2025 GMT Not After : Nov 10 06:48:10 2025 GMT Subject: CN=6908502a-070c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:87:51:98:d1:dd:5b:cf:bf:8e:20:43:24: b5:64:84:eb:c5:34:8f:13:51:7f:00:df:3c:1d:d0: 07:bb:4f:86:81:22:4e:32:ca:5e:3e:87:70:7e:fe: c7:48:87:35:10:72:19:06:b2:0f:c6:49:86:52:1d: c3:3b:9e:8f:73:54:4d:dc:e2:3b:36:cc:a2:cd:b0: 65:e2:0d:d8:03:50:93:b9:21:1f:9d:d9:e8:08:9a: a9:b1:14:5d:6c:0d:ca:89:86:2e:64:02:c3:b1:da: 9a:33:d9:9e:3c:76:93:7c:d1:54:f3:b3:ec:bd:6a: 0b:e7:7b:8e:b8:72:dd:4f:f8:69:69:9c:0a:0f:6c: 52:49:7a:08:e5:d5:83:b3:da:77:c1:9c:10:92:3e: b5:af:04:50:3a:1b:67:5c:0f:69:fe:d2:6f:8d:6e: a8:ed:b5:9d:46:29:69:3d:87:36:7f:32:f6:52:bf: e8:e3:49:fd:cc:a3:7a:23:d9:19:a2:f5:fd:1b:b5: 7b:f4:63:2b:ca:4e:53:5f:b9:13:64:68:f6:0a:2c: f8:42:45:56:13:d3:2c:53:f1:30:91:18:bc:f9:77: 3f:c7:a4:8d:82:08:fd:a1:42:4a:89:4e:12:84:67: 66:38:41:cd:06:9c:7d:a5:32:47:f8:e5:8f:24:b8: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:07:F1:80:B2:B7:E8:F0:C6:86:B0:58:59:A7:4F:37:93:CD:49:54 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2a:af:42:ec:a3:a7:38:70:de:2f:b7:db:9d:8e:a8:24:ee: 75:7e:2a:3c:0f:df:25:d9:6c:ce:5b:82:8d:b2:b6:d3:00:b9: 4e:bf:bf:ea:9b:32:66:58:ac:c7:80:dc:1d:86:f2:74:b2:9d: f6:bb:03:e0:bb:b5:ed:46:a6:da:a2:bd:cb:42:08:9e:97:cc: 56:4c:1b:a8:23:46:03:01:9c:da:f5:50:9a:52:4f:f4:f1:99: 49:50:f4:19:30:4d:da:cd:a4:ec:fd:39:2f:9e:a3:40:c5:99: 67:3d:04:dd:53:86:b5:8e:02:6e:b9:35:0c:18:f4:78:58:df: 09:cb:61:1f:d5:de:8f:55:de:0a:a6:b0:d5:0d:e9:0a:12:6b: ab:d7:eb:87:79:c9:a9:ea:a6:ed:83:eb:65:46:f6:a2:02:1a: b2:27:91:eb:fc:1e:65:b1:ef:71:f8:94:eb:e3:8d:db:3d:36: 7e:62:63:4e:2b:05:55:54:8f:b0:77:f0:f3:98:d1:a9:f0:40: 45:5c:94:b5:0e:3e:23:ee:5a:69:1f:5e:88:6a:0f:08:74:2e: 76:c2:8e:ee:39:af:91:e2:3a:f7:1b:b2:0e:ee:4e:1c:8d:39: a8:7f:3d:5e:5f:b0:d8:73:e3:ca:37:13:20:01:d1:ef:5a:5c: a3:ab:95:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTExMDMwNjQ4MTBaFw0yNTExMTAwNjQ4MTBaMBgxFjAUBgNV BAMTDTY5MDg1MDJhLTA3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFkodRmNHdW8+/jiBDJLVkhOvFNI8TUX8A3zwd0Ae7T4aBIk4yyl4+h3B+/sdI hzUQchkGsg/GSYZSHcM7no9zVE3c4js2zKLNsGXiDdgDUJO5IR+d2egImqmxFF1s DcqJhi5kAsOx2poz2Z48dpN80VTzs+y9agvne464ct1P+GlpnAoPbFJJegjl1YOz 2nfBnBCSPrWvBFA6G2dcD2n+0m+NbqjttZ1GKWk9hzZ/MvZSv+jjSf3Mo3oj2Rmi 9f0btXv0YyvKTlNfuRNkaPYKLPhCRVYT0yxT8TCRGLz5dz/HpI2CCP2hQkqJThKE Z2Y4Qc0GnH2lMkf45Y8kuIJXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzwfxgLK3 6PDGhrBYWadPN5PNSVQwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4qr0Lso6c4cN4vt9udjqgk7nV+KjwP3yXZbM5bgo2yttMAuU6/v+qb MmZYrMeA3B2G8nSynfa7A+C7te1GptqivctCCJ6XzFZMG6gjRgMBnNr1UJpST/Tx mUlQ9BkwTdrNpOz9OS+eo0DFmWc9BN1ThrWOAm65NQwY9HhY3wnLYR/V3o9V3gqm sNUN6QoSa6vX64d5yanqpu2D62VG9qICGrInkev8HmWx73H4lOvjjds9Nn5iY04r BVVUj7B38POY0anwQEVclLUOPiPuWmkfXohqDwh0LnbCju45r5HiOvcbsg7uThyN Oah/PV5fsNhz48o3EyAB0e9aXKOrlWw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:59 2025 by rpki-client