$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: BbGGd9RnPIAU2avuAAxDDSuBn9oQ//XP1NSCBeMPFUA= Subject key identifier: D9:C5:33:A0:97:64:3F:0C:15:08:87:D3:83:31:C2:F2:42:76:33:09 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: B0 Signing time: Sun 19 Oct 2025 09:16:42 +0000 Manifest this update: Sun 19 Oct 2025 09:16:42 +0000 Manifest next update: Sun 26 Oct 2025 09:16:42 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: nT4qkcetcD0c4PUjmY7AEDYG4T9MaG6f2eV60xYWck4=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Oct 19 09:16:42 2025 GMT Not After : Oct 26 09:16:42 2025 GMT Subject: CN=68f4ac7a-1c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:4f:01:48:4e:0c:ce:a7:09:43:ad:bc:63: 11:e5:9e:04:a7:f5:12:1e:09:93:72:fa:a0:5f:66: 98:5d:55:c8:90:8a:41:9b:0e:c6:80:2a:d8:04:5f: ce:dc:fe:24:51:38:fc:32:8a:53:aa:5f:b1:27:cb: eb:e8:f4:2f:6d:1c:02:ad:5b:75:5f:b7:be:f8:93: 42:48:10:0d:0b:76:aa:e3:1f:0b:f1:b2:49:ea:df: 20:d9:bd:31:d6:9e:16:5b:10:b2:18:fd:04:bb:40: a7:f9:a3:67:12:b9:40:bd:26:3a:9c:a4:cd:00:ba: a7:78:b1:52:2f:03:f3:ed:ad:00:3d:04:85:3d:d1: e3:4c:68:29:a2:bf:d4:33:9b:c8:90:76:d5:37:48: 25:20:12:e0:9f:ba:b0:ab:e4:16:88:c9:53:66:7c: 0b:74:de:d8:8b:41:e6:6e:af:7b:17:21:99:3a:93: 19:42:51:ee:4b:c9:a8:4c:54:54:15:7c:ad:73:13: 1d:dd:0f:58:54:8c:8e:7a:91:40:fa:f3:4b:06:9f: 57:d1:8f:54:90:59:5f:18:34:05:7d:30:21:86:39: c0:0e:1d:17:0d:a6:47:3c:40:86:4e:89:d7:a1:36: f1:1b:37:00:9a:62:8f:c4:a3:df:9c:70:75:db:85: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C5:33:A0:97:64:3F:0C:15:08:87:D3:83:31:C2:F2:42:76:33:09 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:80:35:51:ab:8b:87:b6:3f:1e:50:b3:50:80:e4:0f:b5:4a: ab:93:00:d0:76:f1:a4:82:24:0e:83:cb:40:94:d0:a3:20:d4: af:f4:e5:ee:b1:d7:38:03:1d:59:d1:39:c2:f3:01:d2:3b:50: 74:d7:76:d7:e9:6c:1f:9a:d0:b0:3e:ad:18:7a:f1:e7:dd:15: c5:8d:de:d5:4a:24:f1:64:be:41:5e:2a:4d:70:2b:c3:77:f1: 4a:e0:58:c8:44:8e:46:50:f2:32:28:ac:3f:fe:c9:a9:8c:65: 0d:c8:09:86:67:4d:bb:31:16:ed:39:dd:46:6c:7e:17:f9:08: d3:e9:09:52:bd:40:3b:a4:48:37:3a:14:7e:8f:f1:0a:9b:4e: 1f:60:c8:b6:59:51:3f:dd:df:ad:16:d8:6c:f0:70:a6:12:75: 0d:ea:35:bc:11:58:aa:d7:c1:1d:42:32:21:fb:70:64:86:cf: b3:75:6e:24:bb:e9:f8:09:d9:a4:e3:18:5b:c1:e9:8f:f5:c7: 4d:4e:55:54:a5:bd:c4:3b:da:be:0a:4a:57:fc:8d:12:83:ef: 95:d8:89:e6:90:4f:0b:4c:24:f1:82:e0:52:59:8d:5c:be:99: 05:65:8b:f8:c0:20:57:b3:c3:ce:c9:9e:f3:1a:91:da:f2:7d: a6:db:22:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjUxMDE5MDkxNjQyWhcNMjUxMDI2MDkxNjQyWjAYMRYwFAYD VQQDEw02OGY0YWM3YS0xYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiFPAUhODM6nCUOtvGMR5Z4Ep/USHgmTcvqgX2aYXVXIkIpBmw7GgCrYBF/O 3P4kUTj8MopTql+xJ8vr6PQvbRwCrVt1X7e++JNCSBANC3aq4x8L8bJJ6t8g2b0x 1p4WWxCyGP0Eu0Cn+aNnErlAvSY6nKTNALqneLFSLwPz7a0APQSFPdHjTGgpor/U M5vIkHbVN0glIBLgn7qwq+QWiMlTZnwLdN7Yi0Hmbq97FyGZOpMZQlHuS8moTFRU FXytcxMd3Q9YVIyOepFA+vNLBp9X0Y9UkFlfGDQFfTAhhjnADh0XDaZHPECGTonX oTbxGzcAmmKPxKPfnHB124X6+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnFM6CX ZD8MFQiH04MxwvJCdjMJMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcgDVRq4uHtj8eULNQgOQPtUqrkwDQdvGkgiQOg8tAlNCjINSv9OXu sdc4Ax1Z0TnC8wHSO1B013bX6WwfmtCwPq0YevHn3RXFjd7VSiTxZL5BXipNcCvD d/FK4FjIRI5GUPIyKKw//smpjGUNyAmGZ027MRbtOd1GbH4X+QjT6QlSvUA7pEg3 OhR+j/EKm04fYMi2WVE/3d+tFths8HCmEnUN6jW8EViq18EdQjIh+3Bkhs+zdW4k u+n4Cdmk4xhbwemP9cdNTlVUpb3EO9q+CkpX/I0Sg++V2InmkE8LTCTxguBSWY1c vpkFZYv4wCBXs8POyZ7zGpHa8n2m2yJe -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:18 2025 by rpki-client