$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: YJHPhb3cLu5Jkz/ocVIpbXjEJ7/y1+rShBO8D3y9AHY= Subject key identifier: B3:D1:DC:41:0B:E9:F6:9F:EF:89:D4:77:8F:B3:A4:0D:C7:38:47:84 Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 7C Signing time: Mon 03 Nov 2025 06:46:11 +0000 Manifest this update: Mon 03 Nov 2025 06:46:10 +0000 Manifest next update: Mon 10 Nov 2025 06:46:10 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: KQlwmIEiR16hq0lhGmpDdqXxmc5naoDR9ETYhccckMM=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: Nov 3 06:46:10 2025 GMT Not After : Nov 10 06:46:10 2025 GMT Subject: CN=69084fb2-26fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:76:25:4a:2c:32:90:2b:4d:18:80:1b:40: a2:0e:ef:3e:dc:dc:b6:9d:9d:df:ad:dc:53:82:f0: d2:a7:f1:9d:f8:28:e7:a0:ac:d3:1f:64:07:05:01: 5b:b5:c2:a4:a8:61:da:95:2c:ec:96:bd:82:24:0b: bf:9f:2d:4d:b9:2b:77:40:b4:7c:07:9c:72:fb:53: 8e:00:af:a5:af:d5:f2:f5:5f:8f:44:24:5a:81:fe: 8d:e2:49:7d:95:d3:72:37:de:7a:36:52:ed:c1:b5: d5:49:3a:98:d6:d8:da:f8:20:05:d8:10:41:2c:d1: 69:c9:8d:bd:ee:b4:47:37:59:22:1f:ce:ca:c8:83: 15:65:0e:a0:37:41:1a:90:e6:f4:13:f6:36:75:35: f2:fc:c7:54:1f:ba:ec:8f:6a:f5:79:c7:89:34:8c: b9:57:f5:a1:3a:3d:b6:7f:b5:59:b9:ee:c6:d7:ed: 4d:25:5f:3f:c3:42:9f:fd:94:ba:96:f9:47:ad:89: 4d:0f:a9:37:fd:1f:97:64:ca:7a:f2:11:0f:ac:77: 90:e9:da:f5:35:6e:01:58:63:48:2e:c7:d8:ae:41: 8d:56:1c:10:b9:51:33:61:05:f8:ec:0d:a4:6e:44: 9a:a9:5c:01:27:4e:4d:a5:dd:76:84:26:bf:dd:94: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:DC:41:0B:E9:F6:9F:EF:89:D4:77:8F:B3:A4:0D:C7:38:47:84 X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2b:e8:9f:df:4e:d1:e7:25:03:8c:24:61:0f:8d:93:29:5a: 86:5e:a2:68:8a:e9:d7:db:21:b6:1d:dc:a9:40:87:77:d4:73: f9:ea:be:74:8b:f0:3f:b8:30:8c:69:b4:67:b9:a3:3a:57:6b: 35:17:d0:25:91:a0:53:29:f1:e5:a1:c0:34:d1:eb:8f:4e:3f: 1e:89:0e:15:3b:50:70:a5:3d:42:9a:05:33:2e:41:92:98:ff: 9b:7b:2e:17:8c:ad:cf:85:85:82:a3:4d:49:c8:5e:a7:0f:bb: 6e:36:bb:75:eb:6e:be:95:4f:4b:38:63:21:28:4f:c4:7c:f2: ef:40:61:60:aa:ee:b9:94:0d:83:53:fb:c5:6b:d9:b8:6b:60: 09:27:02:85:44:e4:a3:90:30:b8:b8:a1:21:af:ba:53:63:e1: 65:2c:87:50:bf:0a:f3:98:f2:dc:d2:c7:cf:c6:72:6e:ca:e0: fb:fe:b7:49:9a:87:67:f7:c1:88:3b:e4:70:ff:33:b2:b2:2e: 36:0b:4b:3a:cd:e6:a0:d6:65:30:9a:7b:3c:0d:71:2a:9f:ad: 2a:ea:d6:8f:9c:fa:25:b3:47:f5:2a:b4:45:d2:e1:69:5f:f6: f4:fc:a2:9f:78:9f:fd:94:c8:07:bd:ea:ca:70:eb:52:1a:2f: 24:3f:de:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTExMDMwNjQ2MTBaFw0yNTExMTAwNjQ2MTBaMBgxFjAUBgNV BAMTDTY5MDg0ZmIyLTI2ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpNHYlSiwykCtNGIAbQKIO7z7c3Ladnd+t3FOC8NKn8Z34KOegrNMfZAcFAVu1 wqSoYdqVLOyWvYIkC7+fLU25K3dAtHwHnHL7U44Ar6Wv1fL1X49EJFqB/o3iSX2V 03I33no2Uu3BtdVJOpjW2Nr4IAXYEEEs0WnJjb3utEc3WSIfzsrIgxVlDqA3QRqQ 5vQT9jZ1NfL8x1QfuuyPavV5x4k0jLlX9aE6PbZ/tVm57sbX7U0lXz/DQp/9lLqW +UetiU0PqTf9H5dkynryEQ+sd5Dp2vU1bgFYY0gux9iuQY1WHBC5UTNhBfjsDaRu RJqpXAEnTk2l3XaEJr/dlNFBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs9HcQQvp 9p/vidR3j7OkDcc4R4QwHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIr6J/fTtHnJQOMJGEPjZMpWoZeomiK6dfbIbYd3KlAh3fUc/nqvnSL 8D+4MIxptGe5ozpXazUX0CWRoFMp8eWhwDTR649OPx6JDhU7UHClPUKaBTMuQZKY /5t7LheMrc+FhYKjTUnIXqcPu242u3Xrbr6VT0s4YyEoT8R88u9AYWCq7rmUDYNT +8Vr2bhrYAknAoVE5KOQMLi4oSGvulNj4WUsh1C/CvOY8tzSx8/Gcm7K4Pv+t0ma h2f3wYg75HD/M7KyLjYLSzrN5qDWZTCaezwNcSqfrSrq1o+c+iWzR/UqtEXS4Wlf 9vT8op94n/2UyAe96spw61IaLyQ/3gM= -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:03 2025 by rpki-client