$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: OaZUmCk4vIPZLyuFQcaf6YoVxY/nnFdyyBD5ek164gQ= Subject key identifier: 1E:4D:E0:2B:0E:EA:8A:82:50:5D:A1:3E:08:4B:94:AA:DA:78:7A:7C Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 1009 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FF4 Signing time: Sun 02 Nov 2025 17:30:18 +0000 Manifest this update: Sun 02 Nov 2025 17:30:18 +0000 Manifest next update: Sun 09 Nov 2025 17:30:18 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: aQErr2YW72g7Hglywn/Z+phogqYXqrTz4/XR6UVB+cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4105 (0x1009) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Nov 2 17:30:18 2025 GMT Not After : Nov 9 17:30:18 2025 GMT Subject: CN=6907952a-232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:3d:8f:1c:88:fa:28:33:24:d0:69:04:67: a4:76:e1:9b:3d:8e:fe:76:0e:27:ab:b7:05:3c:86: 2a:27:54:06:78:77:54:06:bd:c7:a3:0d:a0:b4:01: 77:42:23:7e:94:7a:88:17:d8:a6:42:fb:8b:30:f4: a7:5b:45:4e:a9:c4:f1:ed:a7:63:4b:5f:ea:9d:68: 24:ad:24:26:85:60:4d:26:b0:71:aa:ce:b4:39:85: 3e:87:66:b6:4e:24:85:53:44:b6:6f:13:a6:b2:7b: 33:f1:08:37:6f:0f:7d:95:1f:d1:58:78:56:ee:30: cd:8c:16:4a:fb:54:a6:14:d5:88:f6:2d:d7:58:d3: 51:45:bc:52:d0:5c:a9:ee:f3:0c:fd:de:a9:61:ec: df:e4:51:6b:c8:74:93:3d:91:f0:ef:4d:58:8d:b8: a6:99:c6:a8:60:ba:d2:64:46:1d:d9:03:9d:22:9d: a4:4d:99:28:91:04:54:da:8c:72:ec:0a:ea:eb:7d: df:d7:74:da:a8:70:c1:c0:6e:e6:85:0d:54:8c:c8: 10:ea:52:eb:c3:90:ed:77:a1:58:1e:2b:3b:de:3b: 8f:07:4d:0d:44:6e:9e:79:c8:81:a4:4a:5b:29:2f: 7c:ed:97:86:1c:8a:3f:0e:b8:d6:73:e5:c7:da:8f: 3f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:E0:2B:0E:EA:8A:82:50:5D:A1:3E:08:4B:94:AA:DA:78:7A:7C X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f0:df:e7:0d:08:21:47:4d:0a:e2:96:23:22:bb:c2:db:ea: 66:5c:09:70:d5:73:e9:8b:39:7b:59:f7:0f:03:4b:68:e7:2d: 58:23:a1:c6:35:fc:b4:e3:50:70:a0:69:75:6b:e4:e7:4f:3a: 4d:7f:1f:15:d8:4a:9a:11:f0:8d:9e:51:76:af:9e:81:58:b8: cd:1a:0b:40:23:61:7f:20:d8:ae:00:28:e3:3c:3a:50:6e:86: c8:5e:be:df:ef:da:a4:3a:80:a1:3b:ae:4b:da:60:d6:8b:0e: c5:a6:b4:08:30:68:6a:c8:34:df:21:e5:a2:66:61:9d:30:87: 25:80:da:89:3b:89:b6:df:bd:82:b8:1f:44:0d:6b:d3:4e:6b: 69:67:8d:d9:b1:9f:5b:fb:6b:2e:e1:82:41:31:ec:ec:a2:f5: 34:56:43:5e:29:7b:a1:03:ef:f4:43:e3:a5:55:9b:d1:96:1f: ab:6a:c2:cd:e4:e3:ed:ea:02:fd:5d:8b:b0:6a:f8:51:71:a5: c7:75:b5:c8:07:9b:ac:5c:12:62:5c:ab:8a:a3:0f:33:1d:25: 60:2e:20:7f:d3:da:f8:2e:ed:9c:a7:84:76:a3:83:c8:c1:2a: 6b:1d:99:13:82:92:03:86:54:89:2c:d3:02:5d:2a:be:dc:b4: 89:e0:bd:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUxMTAyMTczMDE4WhcNMjUxMTA5MTczMDE4WjAYMRYwFAYD VQQDEw02OTA3OTUyYS0yMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFU9jxyI+igzJNBpBGekduGbPY7+dg4nq7cFPIYqJ1QGeHdUBr3How2gtAF3 QiN+lHqIF9imQvuLMPSnW0VOqcTx7adjS1/qnWgkrSQmhWBNJrBxqs60OYU+h2a2 TiSFU0S2bxOmsnsz8Qg3bw99lR/RWHhW7jDNjBZK+1SmFNWI9i3XWNNRRbxS0Fyp 7vMM/d6pYezf5FFryHSTPZHw701YjbimmcaoYLrSZEYd2QOdIp2kTZkokQRU2oxy 7Arq633f13TaqHDBwG7mhQ1UjMgQ6lLrw5Dtd6FYHis73juPB00NRG6eeciBpEpb KS987ZeGHIo/DrjWc+XH2o8/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5N4CsO 6oqCUF2hPghLlKraeHp8MB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw8N/nDQghR00K4pYjIrvC2+pmXAlw1XPpizl7WfcPA0to5y1YI6HG Nfy041BwoGl1a+TnTzpNfx8V2EqaEfCNnlF2r56BWLjNGgtAI2F/INiuACjjPDpQ bobIXr7f79qkOoChO65L2mDWiw7FprQIMGhqyDTfIeWiZmGdMIclgNqJO4m2372C uB9EDWvTTmtpZ43ZsZ9b+2su4YJBMezsovU0VkNeKXuhA+/0Q+OlVZvRlh+rasLN 5OPt6gL9XYuwavhRcaXHdbXIB5usXBJiXKuKow8zHSVgLiB/09r4Lu2cp4R2o4PI wSprHZkTgpIDhlSJLNMCXSq+3LSJ4L1w -----END CERTIFICATE-----Generated at Tue Nov 4 08:16:11 2025 by rpki-client