$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: gXmh3fL4aFPL25xNCAoF/Oq0eTK62dPOxmL6hspXau4= Subject key identifier: 76:EC:E4:F6:86:20:F5:CE:77:61:2A:B2:CC:FC:16:67:10:04:D1:8F Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 63 Signing time: Sun 19 Oct 2025 10:26:38 +0000 Manifest this update: Sun 19 Oct 2025 10:26:38 +0000 Manifest next update: Sun 26 Oct 2025 10:26:38 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: MAtrI0m2ntNp/rFAL6Gm2hIdnbOkEWZGPiLNosEbcrI=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Oct 19 10:26:38 2025 GMT Not After : Oct 26 10:26:38 2025 GMT Subject: CN=68f4bcde-f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:ff:de:af:d0:c3:32:a7:1b:81:10:30:24: 49:11:f4:fc:0c:4f:16:6d:de:6b:8e:72:c9:c7:72: af:57:3b:77:7c:d1:a9:79:b6:87:55:79:32:29:22: fa:0c:a8:7a:f3:60:b1:71:ee:1c:73:d3:a7:58:5e: 92:d3:c5:42:75:8a:00:47:aa:c5:30:c5:b8:9c:5c: 85:15:ff:e3:8a:93:d5:f5:b8:d1:37:62:3b:9b:46: 5c:97:ab:a6:b1:c1:b8:0c:7b:21:68:c2:2b:b5:1d: 6a:0a:41:1c:62:5f:6d:26:bd:31:eb:40:79:8b:f7: b5:63:46:a4:05:2e:90:1a:cd:39:e6:4a:92:70:cb: 10:8e:10:a3:72:22:b8:e7:5d:d3:85:d8:62:66:d3: 12:62:01:34:7c:12:00:11:29:02:47:ee:0f:85:28: 52:13:fe:00:51:ad:b8:a4:c0:f2:02:e5:fc:17:5e: c0:21:5d:e4:c9:da:f7:e8:ff:17:1e:d3:38:3d:9a: 75:18:4b:e4:49:ff:f9:bc:96:74:0b:0a:de:6a:b0: 3d:e7:b3:85:72:d3:a4:ff:b0:b0:88:ae:68:73:02: 9d:a5:c9:12:14:b7:8c:ef:96:fb:ab:66:b2:1f:48: f7:81:eb:21:d5:b5:e6:16:29:73:8d:67:63:bd:68: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EC:E4:F6:86:20:F5:CE:77:61:2A:B2:CC:FC:16:67:10:04:D1:8F X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b6:41:33:d8:9b:47:51:52:36:cf:4d:9a:ca:9f:fe:df:d0: 6f:cc:2d:b6:66:81:fd:d7:06:58:d3:aa:8e:e0:92:51:75:6f: 74:10:96:c3:a7:3c:26:76:d4:e3:39:53:d5:05:e3:ff:6a:ba: 34:bd:fc:18:01:b5:60:ed:c1:7a:bb:9a:f3:77:c7:16:67:d6: 93:06:f7:83:39:1d:96:37:62:bd:16:1d:ff:b9:a4:86:b1:e6: 05:36:a2:04:b6:7c:e7:8b:fa:93:3e:13:94:ad:bc:61:06:ef: 4c:2d:f7:f5:3e:48:26:46:2f:30:71:11:b1:5f:93:d5:a7:09: 57:35:67:37:3a:b3:ec:b4:44:47:5a:20:a7:b8:32:be:f4:81: 2a:cc:1d:ac:5b:8e:0d:97:a7:b7:3f:7b:0a:06:ee:7e:c9:38: 21:3c:4d:b7:bf:12:1f:93:47:aa:1c:78:13:f5:a8:3e:2f:4a: e8:5d:d9:5a:21:54:db:bf:65:97:2d:34:16:2d:4a:b8:27:a1: 6a:d2:58:6c:f5:80:df:11:7f:67:49:fc:9c:36:16:b3:20:e3: b6:3f:40:2f:36:89:29:6d:ad:23:dc:01:c9:30:c6:09:12:a1: 77:dd:96:71:50:47:8b:b4:ef:7a:a7:5b:b0:23:cb:7a:26:6c: c2:58:42:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTEwMTkxMDI2MzhaFw0yNTEwMjYxMDI2MzhaMBgxFjAUBgNV BAMTDTY4ZjRiY2RlLWY3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW8//er9DDMqcbgRAwJEkR9PwMTxZt3muOcsnHcq9XO3d80al5todVeTIpIvoM qHrzYLFx7hxz06dYXpLTxUJ1igBHqsUwxbicXIUV/+OKk9X1uNE3YjubRlyXq6ax wbgMeyFowiu1HWoKQRxiX20mvTHrQHmL97VjRqQFLpAazTnmSpJwyxCOEKNyIrjn XdOF2GJm0xJiATR8EgARKQJH7g+FKFIT/gBRrbikwPIC5fwXXsAhXeTJ2vfo/xce 0zg9mnUYS+RJ//m8lnQLCt5qsD3ns4Vy06T/sLCIrmhzAp2lyRIUt4zvlvurZrIf SPeB6yHVteYWKXONZ2O9aAnBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUduzk9oYg 9c53YSqyzPwWZxAE0Y8wHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMa2QTPYm0dRUjbPTZrKn/7f0G/MLbZmgf3XBljTqo7gklF1b3QQlsOn PCZ21OM5U9UF4/9qujS9/BgBtWDtwXq7mvN3xxZn1pMG94M5HZY3Yr0WHf+5pIax 5gU2ogS2fOeL+pM+E5StvGEG70wt9/U+SCZGLzBxEbFfk9WnCVc1Zzc6s+y0REda IKe4Mr70gSrMHaxbjg2Xp7c/ewoG7n7JOCE8Tbe/Eh+TR6oceBP1qD4vSuhd2Voh VNu/ZZctNBYtSrgnoWrSWGz1gN8Rf2dJ/Jw2FrMg47Y/QC82iSltrSPcAckwxgkS oXfdlnFQR4u073qnW7Ajy3ombMJYQuw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:04 2025 by rpki-client