$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: j6rrpev45hWveFm47tJDc11d7MBDpVVQkKpbAOrT+xM= Subject key identifier: 78:C0:B9:54:6A:E3:2C:BE:79:50:E3:86:E5:02:E6:B6:14:42:EF:1A Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0263 Signing time: Sun 19 Oct 2025 03:55:59 +0000 Manifest this update: Sun 19 Oct 2025 03:55:59 +0000 Manifest next update: Sun 26 Oct 2025 03:55:59 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: g+7Auh1GrZhDmeKeiEw1M3AsiI7s2mETEYtrXZd30+4=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Oct 19 03:55:59 2025 GMT Not After : Oct 26 03:55:59 2025 GMT Subject: CN=68f4614f-5f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:19:16:79:48:51:f8:17:0b:47:62:36:e4: 2e:62:ab:fa:39:eb:24:74:ed:8b:d1:ee:e1:68:66: 08:68:ae:31:e2:65:e6:7b:dd:dc:61:9b:a2:62:ad: 69:f3:04:65:21:cc:10:51:54:5a:bd:7c:9a:e6:98: e2:85:2e:3a:00:15:cf:e8:56:37:64:f0:ca:42:bf: 21:6d:13:12:e8:d9:a1:89:e8:8d:77:0e:36:af:61: 9a:98:60:25:fd:eb:ac:5a:ab:d4:4c:ac:df:30:7f: 02:df:99:ca:35:32:c3:ff:c9:d3:8a:fb:d7:53:fd: e4:bf:bb:13:c5:d0:87:35:36:10:a4:1d:2b:4e:9b: f1:31:8d:1d:a1:8c:8a:46:94:fb:72:74:fe:48:50: 23:08:de:41:b1:cd:21:a5:06:dc:ef:36:ed:8d:bc: 10:02:b8:a8:a7:66:31:d8:2f:6e:bc:32:40:af:c3: a8:c4:51:34:42:5a:35:cf:ef:78:42:c5:79:99:c7: 41:93:41:56:f7:0e:58:a3:72:b3:78:c7:39:22:67: 1f:74:5a:f3:07:80:7b:00:96:9b:58:ce:5e:df:6f: 4d:26:d6:87:45:92:37:98:42:02:7d:02:65:7f:6d: ad:e9:eb:ef:70:26:68:0c:c2:c0:e6:96:1a:85:c5: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C0:B9:54:6A:E3:2C:BE:79:50:E3:86:E5:02:E6:B6:14:42:EF:1A X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e8:8b:1f:f9:03:2c:9d:93:54:46:bd:60:e2:b7:de:ac:88: 67:ab:d8:af:15:55:ff:65:8a:f4:2d:23:70:40:3b:d1:19:35: e8:57:43:8a:3b:db:32:ed:2e:6f:bc:6c:be:ff:5c:b5:09:f6: 27:c3:84:e8:35:f1:5e:c5:93:ca:8d:aa:01:1e:a1:ca:bb:9a: ea:54:70:fd:5b:3e:01:fe:5d:00:5c:a9:41:eb:cd:06:0b:ee: b6:7f:12:5d:16:4d:d3:b9:46:12:46:f5:8e:d8:1c:23:ce:44: 7a:02:cd:aa:61:18:5c:2a:c6:c7:f6:65:8c:ba:b2:4e:0a:68: c3:da:50:6a:0f:b3:76:66:22:31:c4:e0:fc:3b:35:d3:41:08: c1:7d:1f:02:d3:60:28:57:63:55:e0:31:fe:03:86:9c:65:d9: 6d:00:5e:4c:9e:bd:e7:07:70:05:38:0a:de:cd:08:ff:67:a2: b9:11:48:bb:8a:29:f8:f6:51:20:d0:ec:6f:a0:1d:4f:6c:aa: ff:42:50:69:ca:40:0f:98:4b:ca:a1:64:54:58:99:d2:10:8f: 24:70:5f:e7:86:65:40:97:90:34:38:f6:44:15:39:18:4e:dc: 1c:f7:ac:9a:21:cb:0b:36:e8:9d:1a:bc:84:4c:5e:3c:d8:cb: fa:c7:dd:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUxMDE5MDM1NTU5WhcNMjUxMDI2MDM1NTU5WjAYMRYwFAYD VQQDEw02OGY0NjE0Zi01ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19UZFnlIUfgXC0diNuQuYqv6OeskdO2L0e7haGYIaK4x4mXme93cYZuiYq1p 8wRlIcwQUVRavXya5pjihS46ABXP6FY3ZPDKQr8hbRMS6NmhieiNdw42r2GamGAl /eusWqvUTKzfMH8C35nKNTLD/8nTivvXU/3kv7sTxdCHNTYQpB0rTpvxMY0doYyK RpT7cnT+SFAjCN5Bsc0hpQbc7zbtjbwQAriop2Yx2C9uvDJAr8OoxFE0Qlo1z+94 QsV5mcdBk0FW9w5Yo3KzeMc5ImcfdFrzB4B7AJabWM5e329NJtaHRZI3mEICfQJl f22t6evvcCZoDMLA5pYahcVSVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjAuVRq 4yy+eVDjhuUC5rYUQu8aMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE6Isf+QMsnZNURr1g4rferIhnq9ivFVX/ZYr0LSNwQDvRGTXoV0OK O9sy7S5vvGy+/1y1CfYnw4ToNfFexZPKjaoBHqHKu5rqVHD9Wz4B/l0AXKlB680G C+62fxJdFk3TuUYSRvWO2BwjzkR6As2qYRhcKsbH9mWMurJOCmjD2lBqD7N2ZiIx xOD8OzXTQQjBfR8C02AoV2NV4DH+A4acZdltAF5Mnr3nB3AFOArezQj/Z6K5EUi7 iin49lEg0OxvoB1PbKr/QlBpykAPmEvKoWRUWJnSEI8kcF/nhmVAl5A0OPZEFTkY Ttwc96yaIcsLNuidGryETF482Mv6x90R -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:44 2025 by rpki-client