$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: mu/hMdWoxJ6GWwMA8ewafJjh8D+R85620SmBYocvN3k= Subject key identifier: DA:6A:78:74:03:62:AA:6F:C1:2E:68:D0:F8:FE:C6:42:EA:1D:51:DA Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 13C3 Signing time: Sat 18 Oct 2025 17:27:37 +0000 Manifest this update: Sat 18 Oct 2025 17:27:36 +0000 Manifest next update: Sat 25 Oct 2025 17:27:36 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: dVqpVzJAc+b4W7H0n11RBL+SCsWCQ41dDnqOdjZria8=) 2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=) 3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=) 4: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5110 (0x13f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Oct 18 17:27:36 2025 GMT Not After : Oct 25 17:27:36 2025 GMT Subject: CN=68f3ce09-f358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:84:1c:b5:fb:2a:9b:16:8f:c4:f7:05:11: 05:fb:5c:c6:11:1d:2a:15:36:3a:07:ad:e8:77:3d: 40:ab:67:b9:9b:a8:cb:fa:cf:79:09:39:cf:20:2d: 5c:b1:ea:1c:30:56:47:9f:90:15:26:e3:26:97:ff: c8:11:59:ed:33:9f:30:e6:8e:3a:cf:90:a3:75:19: 9e:ba:6a:f2:07:1a:0c:fb:47:63:77:aa:3a:88:c3: 8e:21:af:17:c2:00:59:b3:6c:9c:06:b0:ad:75:bb: c6:d4:36:e7:75:91:34:12:f5:2a:d6:e6:e1:aa:c5: 47:11:94:49:bf:dd:9c:b6:09:31:a3:0b:24:57:90: 05:79:3e:45:97:24:ea:38:48:5c:c7:f1:c7:6a:83: 5a:3b:f7:70:f4:7d:fc:6e:e8:4f:29:c7:4d:1e:d1: 0b:3f:ab:1d:42:62:2b:54:af:be:d0:db:02:c5:cd: 22:c0:b9:ee:45:41:51:77:2b:3a:cf:63:6d:93:fa: 18:e9:5a:04:09:47:ec:5f:62:9c:1e:93:f5:a2:f8: 29:93:a0:7b:72:6d:cf:41:59:b8:0f:e9:71:e5:6d: c0:8f:cc:9c:f8:ae:c8:54:68:64:22:75:7a:4b:72: c6:6e:23:5a:81:ba:c1:36:2c:fd:77:5f:63:82:32: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6A:78:74:03:62:AA:6F:C1:2E:68:D0:F8:FE:C6:42:EA:1D:51:DA X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:26:f4:f5:95:b7:83:81:38:f8:dd:98:43:6c:5f:de:33:af: 03:13:1c:08:dc:1e:fd:74:a8:09:6d:b6:13:2b:62:86:d3:aa: 47:b0:f7:df:7f:06:a1:62:f9:45:13:48:55:77:97:c4:3b:6d: e0:6b:aa:f5:43:93:44:0b:87:b9:0f:4f:b9:3f:82:de:e2:10: 61:68:ca:71:ba:8b:76:a6:71:82:31:51:2e:82:7e:de:15:e4: 63:41:9e:32:d0:e6:20:79:9b:33:aa:66:ac:3c:67:ef:ad:31: 97:f9:06:df:9a:79:ad:bf:ae:92:7f:dc:e4:2e:ee:1e:8d:29: 81:90:72:97:9e:a9:c6:98:d9:83:b3:ea:91:24:0f:2f:bc:ec: de:41:cc:7d:c6:e1:4e:60:13:ed:60:a2:36:e2:d4:6c:85:85: f9:18:7c:a6:d2:6f:2e:f0:73:b3:47:d1:a7:a4:f8:6b:57:97: 51:7c:35:21:f3:66:d4:a0:db:35:ec:ae:2e:3b:8c:a7:68:71: c7:fd:95:76:ec:6f:24:c6:6e:d0:2c:c8:9b:1a:fa:c7:7c:20: 51:ef:d2:28:84:64:b2:c7:00:c2:5e:44:02:11:dc:5c:e0:b3: b7:7e:2d:70:03:b3:64:90:92:0f:22:cf:20:0f:ec:0a:6c:31: 72:5a:e6:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUxMDE4MTcyNzM2WhcNMjUxMDI1MTcyNzM2WjAYMRYwFAYD VQQDEw02OGYzY2UwOS1mMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRKEHLX7KpsWj8T3BREF+1zGER0qFTY6B63odz1Aq2e5m6jL+s95CTnPIC1c seocMFZHn5AVJuMml//IEVntM58w5o46z5CjdRmeumryBxoM+0djd6o6iMOOIa8X wgBZs2ycBrCtdbvG1DbndZE0EvUq1ubhqsVHEZRJv92ctgkxowskV5AFeT5FlyTq OEhcx/HHaoNaO/dw9H38buhPKcdNHtELP6sdQmIrVK++0NsCxc0iwLnuRUFRdys6 z2Ntk/oY6VoECUfsX2KcHpP1ovgpk6B7cm3PQVm4D+lx5W3Aj8yc+K7IVGhkInV6 S3LGbiNagbrBNiz9d19jgjLIvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpqeHQD YqpvwS5o0Pj+xkLqHVHaMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4JvT1lbeDgTj43ZhDbF/eM68DExwI3B79dKgJbbYTK2KG06pHsPff fwahYvlFE0hVd5fEO23ga6r1Q5NEC4e5D0+5P4Le4hBhaMpxuot2pnGCMVEugn7e FeRjQZ4y0OYgeZszqmasPGfvrTGX+Qbfmnmtv66Sf9zkLu4ejSmBkHKXnqnGmNmD s+qRJA8vvOzeQcx9xuFOYBPtYKI24tRshYX5GHym0m8u8HOzR9GnpPhrV5dRfDUh 82bUoNs17K4uO4ynaHHH/ZV27G8kxm7QLMibGvrHfCBR79IohGSyxwDCXkQCEdxc 4LO3fi1wA7NkkJIPIs8gD+wKbDFyWuZV -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:35 2025 by rpki-client