$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: cyZ6824tdortdGqE9bqgetw3rlmQNk7GWyHunDpxj94= Subject key identifier: D1:62:A9:27:05:DA:FB:FD:20:0C:46:74:18:42:7A:91:EE:29:06:F1 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 08F0 Signing time: Sat 18 Oct 2025 21:27:09 +0000 Manifest this update: Sat 18 Oct 2025 21:27:09 +0000 Manifest next update: Sat 25 Oct 2025 21:27:09 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: S/V1aUQyobfP12NNGrOHpIImxwbLt5Qto8NuXqlO6ZI=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Oct 18 21:27:09 2025 GMT Not After : Oct 25 21:27:09 2025 GMT Subject: CN=68f4062d-533c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:73:51:d6:7c:3d:1c:24:2f:c7:46:73:d1: dd:0e:98:30:14:41:77:96:c7:dc:99:d0:f3:a6:c7: 7b:06:68:35:db:66:f7:9a:ec:40:10:b7:07:cc:d5: 34:2b:99:ed:c6:03:ed:e4:94:df:72:0e:0d:60:49: 6b:94:09:25:fb:06:2c:9a:4c:29:77:eb:04:fc:2b: de:c8:6b:53:d7:3b:bb:07:c8:41:2e:a6:2f:8a:cc: 0a:0e:e7:ed:d8:f6:cd:c3:ba:81:72:a1:2d:63:02: 9a:ca:8c:85:03:8e:67:4b:9b:4c:34:33:f9:8f:8a: 08:c2:39:1b:63:52:eb:9d:1b:89:79:16:c1:6e:c9: d2:e9:54:c2:e6:f8:53:33:75:27:84:29:28:a2:16: d0:c8:78:70:19:f6:cf:16:c4:f1:e9:e4:c3:f5:9c: fc:09:e2:b5:5e:73:a1:43:a7:4e:eb:d7:3b:ca:ee: 75:5c:1c:a0:2b:0b:90:f6:71:d5:65:f8:ed:19:e4: 24:cb:f5:b9:ed:c0:a7:7e:7e:3e:45:f2:7a:1e:6c: 73:b3:4d:af:7e:b9:81:ca:fd:67:a1:a6:ab:ce:b0: 7d:04:72:f2:1f:de:2d:8c:2b:85:6d:ad:b6:4e:61: a5:ad:cf:de:73:50:c5:e3:e5:1a:29:4c:4b:4f:2a: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:62:A9:27:05:DA:FB:FD:20:0C:46:74:18:42:7A:91:EE:29:06:F1 X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:54:94:e9:c2:59:a4:0d:c9:14:14:29:f5:99:37:54:8b:ef: ba:f2:b7:b4:7c:f0:f8:78:6f:b1:51:28:2d:a9:df:30:eb:e8: e7:15:62:1f:70:6c:58:87:96:2c:2c:35:38:b0:29:0a:67:a8: 4c:e4:6f:2c:26:0a:27:08:74:df:da:b4:b8:ca:ed:f8:36:d1: c4:bf:56:44:b1:d4:4d:c6:ad:94:9b:7c:c1:a1:55:f6:ac:c8: cf:d3:c7:56:15:92:5d:ec:02:5b:bc:27:f4:4b:d7:a1:28:ca: d6:a8:aa:86:62:e5:13:cd:44:a9:df:aa:4e:1f:d2:4c:ec:75: fa:6b:ab:d3:67:5c:c9:e5:7d:3e:9c:0b:9c:4e:c4:4d:7b:fe: 66:6e:b9:a4:6b:1c:9b:ec:4f:25:c6:c6:2e:82:b3:4f:84:f5: fd:bc:7c:72:b4:5c:e0:5a:8c:6c:a4:8e:79:2f:fd:df:a2:c9: 3a:f9:90:91:d4:2f:1e:a2:ad:7f:5f:57:c0:0e:be:62:d4:5a: 7a:99:d6:9c:53:a8:4f:03:3d:98:0e:ac:3b:c7:4c:d8:76:5e: 17:3c:67:ab:14:8b:69:2f:28:6f:d0:ce:6d:ac:a0:27:46:24: dc:96:45:72:28:92:82:59:28:a0:6f:a1:cd:41:fe:8d:ef:1e: 21:df:0b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjUxMDE4MjEyNzA5WhcNMjUxMDI1MjEyNzA5WjAYMRYwFAYD VQQDEw02OGY0MDYyZC01MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOhzUdZ8PRwkL8dGc9HdDpgwFEF3lsfcmdDzpsd7Bmg122b3muxAELcHzNU0 K5ntxgPt5JTfcg4NYElrlAkl+wYsmkwpd+sE/CveyGtT1zu7B8hBLqYviswKDuft 2PbNw7qBcqEtYwKayoyFA45nS5tMNDP5j4oIwjkbY1LrnRuJeRbBbsnS6VTC5vhT M3UnhCkoohbQyHhwGfbPFsTx6eTD9Zz8CeK1XnOhQ6dO69c7yu51XBygKwuQ9nHV ZfjtGeQky/W57cCnfn4+RfJ6Hmxzs02vfrmByv1noaarzrB9BHLyH94tjCuFba22 TmGlrc/ec1DF4+UaKUxLTyohlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFiqScF 2vv9IAxGdBhCepHuKQbxMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhVJTpwlmkDckUFCn1mTdUi++68re0fPD4eG+xUSgtqd8w6+jnFWIf cGxYh5YsLDU4sCkKZ6hM5G8sJgonCHTf2rS4yu34NtHEv1ZEsdRNxq2Um3zBoVX2 rMjP08dWFZJd7AJbvCf0S9ehKMrWqKqGYuUTzUSp36pOH9JM7HX6a6vTZ1zJ5X0+ nAucTsRNe/5mbrmkaxyb7E8lxsYugrNPhPX9vHxytFzgWoxspI55L/3fosk6+ZCR 1C8eoq1/X1fADr5i1Fp6mdacU6hPAz2YDqw7x0zYdl4XPGerFItpLyhv0M5trKAn RiTclkVyKJKCWSigb6HNQf6N7x4h3wuK -----END CERTIFICATE-----Generated at Mon Oct 20 19:24:58 2025 by rpki-client