$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: tukl2VVnd9J80mXgmb7gC7dN4oQuTxXXFyMMozxRE+Q= Subject key identifier: 70:35:5B:97:D4:28:F5:31:4E:08:3C:42:B4:49:80:0C:DD:42:03:08 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 0488 Signing time: Sun 19 Oct 2025 01:58:59 +0000 Manifest this update: Sun 19 Oct 2025 01:58:58 +0000 Manifest next update: Sun 26 Oct 2025 01:58:58 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: TOGSJv3Sh152oAMUmkJJTxYtq3CcNVZYqFoIhr36e8Y=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Oct 19 01:58:58 2025 GMT Not After : Oct 26 01:58:58 2025 GMT Subject: CN=68f445e2-46e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0f:ac:56:ad:c0:87:79:03:d8:47:16:20:e3: c9:3f:27:3f:b9:43:92:90:bd:07:8a:f6:59:b5:01: 9a:45:44:c7:ff:0d:5e:8d:f0:7a:b8:aa:16:13:80: 09:31:ee:05:b7:61:8b:f7:a1:f6:60:37:e4:85:5b: 15:14:93:1a:9c:57:83:5a:12:52:a6:da:02:fb:21: 8b:89:8b:05:0d:39:e9:c6:c2:08:78:3b:ae:87:ac: 10:b0:9d:71:2c:a8:fd:8e:cc:9e:89:02:fb:88:72: 94:3d:b9:f1:09:83:3d:f5:74:6e:12:f8:9d:03:4c: 60:cc:2e:bb:74:b6:c1:f9:6c:e7:0d:47:fb:d5:70: 45:3f:b3:26:37:d0:72:aa:52:25:7c:b0:a1:3f:11: 66:11:1c:4e:b6:ed:75:88:03:33:71:bc:44:3d:53: 60:1b:cc:14:51:0c:5f:3c:05:cd:51:55:78:30:f7: a5:32:5a:97:95:5d:3a:3d:00:fe:35:5f:75:54:34: 1b:77:62:c6:dd:9d:22:0c:3a:3e:51:cd:5d:84:dc: 53:80:0a:82:29:80:a1:72:c4:c2:10:0d:10:01:93: a8:0e:9a:78:c0:5c:16:d4:55:69:21:54:6c:d0:88: 21:25:d3:15:64:6d:32:9f:cf:12:27:ac:f6:ea:a5: bf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:35:5B:97:D4:28:F5:31:4E:08:3C:42:B4:49:80:0C:DD:42:03:08 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:54:22:54:21:56:ec:f2:07:9b:95:20:e1:1e:99:be:d7:b1: c0:4a:c5:1b:f8:98:c3:5c:4b:be:6d:94:81:57:ca:66:65:8e: 55:58:ae:f0:d0:17:ba:d6:bc:15:d5:bf:68:9e:28:7a:07:12: 97:da:b3:c3:b5:66:4f:89:78:6a:6a:3c:41:55:b9:10:6f:7b: eb:ac:4b:bf:31:8a:37:4a:87:a3:f2:ff:72:15:92:67:96:74: d1:50:8d:b5:ed:d3:e7:87:30:29:be:8a:55:d6:54:95:68:41: af:4d:c2:9a:c7:70:ae:7d:b2:84:16:51:72:cc:3b:91:a3:c1: 27:19:73:93:56:7e:99:9c:6d:bd:e0:f3:53:06:e1:4e:5c:c9: 87:9b:66:59:fe:dd:08:25:a0:80:0d:1e:cb:b3:69:9c:6e:3e: c3:32:70:5d:82:5e:dc:1d:2f:1e:8c:43:ab:bc:64:20:37:ef: 5f:6f:5d:6a:bc:4f:66:62:9b:0d:aa:9f:9c:d1:a5:75:bd:f6: e0:26:83:03:f9:e7:a7:50:b4:cf:79:ad:d8:d9:54:8e:a0:76: f0:3a:53:00:cb:16:f7:04:0c:33:44:ab:42:80:fb:75:c4:09: ee:7d:a5:e6:2b:f6:e4:2d:ac:fe:eb:8f:03:a2:88:7e:ce:0f: bd:05:1d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUxMDE5MDE1ODU4WhcNMjUxMDI2MDE1ODU4WjAYMRYwFAYD VQQDEw02OGY0NDVlMi00NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6g+sVq3Ah3kD2EcWIOPJPyc/uUOSkL0HivZZtQGaRUTH/w1ejfB6uKoWE4AJ Me4Ft2GL96H2YDfkhVsVFJManFeDWhJSptoC+yGLiYsFDTnpxsIIeDuuh6wQsJ1x LKj9jsyeiQL7iHKUPbnxCYM99XRuEvidA0xgzC67dLbB+WznDUf71XBFP7MmN9By qlIlfLChPxFmERxOtu11iAMzcbxEPVNgG8wUUQxfPAXNUVV4MPelMlqXlV06PQD+ NV91VDQbd2LG3Z0iDDo+Uc1dhNxTgAqCKYChcsTCEA0QAZOoDpp4wFwW1FVpIVRs 0IghJdMVZG0yn88SJ6z26qW/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHA1W5fU KPUxTgg8QrRJgAzdQgMIMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClVCJUIVbs8geblSDhHpm+17HASsUb+JjDXEu+bZSBV8pmZY5VWK7w 0Be61rwV1b9onih6BxKX2rPDtWZPiXhqajxBVbkQb3vrrEu/MYo3Soej8v9yFZJn lnTRUI217dPnhzApvopV1lSVaEGvTcKax3CufbKEFlFyzDuRo8EnGXOTVn6ZnG29 4PNTBuFOXMmHm2ZZ/t0IJaCADR7Ls2mcbj7DMnBdgl7cHS8ejEOrvGQgN+9fb11q vE9mYpsNqp+c0aV1vfbgJoMD+eenULTPea3Y2VSOoHbwOlMAyxb3BAwzRKtCgPt1 xAnufaXmK/bkLaz+648Dooh+zg+9BR1Q -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:04 2025 by rpki-client