$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: E4Lx4KPhlM2bj6BxO/TE38VxVfDtsKeg0XfZtIpMefw= Subject key identifier: CC:70:61:43:07:A2:89:A5:A7:9B:78:DA:17:DC:68:2D:6B:A6:36:D9 Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 067A Signing time: Sun 19 Oct 2025 00:00:55 +0000 Manifest this update: Sun 19 Oct 2025 00:00:54 +0000 Manifest next update: Sun 26 Oct 2025 00:00:54 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: QTv+K75PitFsb/JaRtMEuApFTxTDNGNEkRKWVeTpH54=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: uX4YBH0d+v8XToflAmrr4PhcL0IestKtYL1AND4wHQk=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: 9GO3C9V25OtteOw/nfxFM0HH3LdeEcdPNGN7kiYXrI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Oct 19 00:00:54 2025 GMT Not After : Oct 26 00:00:54 2025 GMT Subject: CN=68f42a36-a496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:ff:ea:69:7c:d5:d2:ad:d9:d1:26:3d:73: 01:77:86:96:83:cf:eb:ea:8a:39:8a:63:6d:e0:bb: ae:39:d1:39:74:c6:0a:78:6d:fe:86:4a:ea:af:09: ba:29:db:14:10:95:b5:22:4f:20:71:b3:72:86:93: 19:4b:bc:34:5d:97:62:d6:8b:05:fe:b4:ef:38:d6: a2:e1:9c:ef:6e:2a:0d:ed:8e:91:f6:34:84:f0:62: 9b:c9:87:fb:af:83:a5:87:96:c8:0f:fe:69:53:2c: 42:eb:ef:04:f2:21:2c:19:30:b3:61:44:8e:3b:37: e4:f6:26:72:95:ae:e0:cf:cd:f5:de:1c:16:5d:29: d3:56:df:72:bc:2b:d0:d1:ed:f4:7b:23:3a:9a:8e: 9a:e4:d6:d9:60:cb:a0:c9:1b:12:8e:f5:6e:21:31: a0:64:45:81:01:2e:ae:2b:0e:88:6a:ae:11:0b:94: ba:5f:65:72:d2:33:53:9e:5d:b3:2c:00:a3:6a:2a: 9b:95:c7:27:b4:a8:aa:32:a9:5b:0f:10:e6:80:b5: 3f:09:7c:5e:b6:f9:68:23:b0:1c:e8:de:64:89:6a: b9:1c:a3:31:75:1b:52:3b:2f:ea:14:1b:ab:88:91: 3a:fa:3f:d5:6c:7a:3b:17:94:64:71:40:c3:21:df: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:70:61:43:07:A2:89:A5:A7:9B:78:DA:17:DC:68:2D:6B:A6:36:D9 X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a2:58:27:08:05:05:04:0f:9a:fc:bb:b3:c1:64:a9:19:67: 39:ab:87:88:e3:79:5b:c3:d4:2c:1e:d2:4f:7a:47:24:18:1a: 66:6b:08:af:75:62:75:af:00:5b:5a:3b:b9:29:a0:28:64:e5: e1:b3:37:ce:d6:5a:55:80:af:76:5c:92:b8:f8:24:e3:72:ce: 48:33:40:39:c4:b3:e6:28:87:46:f0:f7:34:9c:0e:a7:97:34: 56:83:e8:11:6b:f9:0a:d7:d9:a9:d6:3d:e0:e3:23:b1:b4:cd: ba:16:b2:f9:f3:9d:8d:ba:3c:f0:7f:96:a5:a5:2c:0a:62:bc: 77:ea:f5:59:27:2a:e6:97:86:d3:8e:02:c6:4b:ae:54:72:11: 68:52:08:a4:84:ac:7f:40:f1:20:e9:e2:93:2d:03:8e:91:29: 43:73:0d:c9:c6:c7:43:0b:2e:37:ee:4e:9d:38:b9:7f:46:86: 68:aa:10:82:39:dc:9b:48:56:ae:73:c6:1e:36:b1:39:81:27: 06:d1:48:2f:6e:d8:90:42:9e:1a:ed:01:50:e9:b4:1b:33:f3: a8:3f:ba:41:ec:94:6a:07:da:31:33:89:23:43:8a:60:e1:e8: f2:c9:82:18:ae:46:85:9e:44:96:9d:ea:61:a0:3c:20:f6:cb: db:78:f7:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjUxMDE5MDAwMDU0WhcNMjUxMDI2MDAwMDU0WjAYMRYwFAYD VQQDEw02OGY0MmEzNi1hNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt57/6ml81dKt2dEmPXMBd4aWg8/r6oo5imNt4LuuOdE5dMYKeG3+hkrqrwm6 KdsUEJW1Ik8gcbNyhpMZS7w0XZdi1osF/rTvONai4ZzvbioN7Y6R9jSE8GKbyYf7 r4Olh5bID/5pUyxC6+8E8iEsGTCzYUSOOzfk9iZyla7gz8313hwWXSnTVt9yvCvQ 0e30eyM6mo6a5NbZYMugyRsSjvVuITGgZEWBAS6uKw6Iaq4RC5S6X2Vy0jNTnl2z LACjaiqblccntKiqMqlbDxDmgLU/CXxetvloI7Ac6N5kiWq5HKMxdRtSOy/qFBur iJE6+j/VbHo7F5RkcUDDId9o+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxwYUMH oomlp5t42hfcaC1rpjbZMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcolgnCAUFBA+a/LuzwWSpGWc5q4eI43lbw9QsHtJPekckGBpmawiv dWJ1rwBbWju5KaAoZOXhszfO1lpVgK92XJK4+CTjcs5IM0A5xLPmKIdG8Pc0nA6n lzRWg+gRa/kK19mp1j3g4yOxtM26FrL5852Nujzwf5alpSwKYrx36vVZJyrml4bT jgLGS65UchFoUgikhKx/QPEg6eKTLQOOkSlDcw3JxsdDCy437k6dOLl/RoZoqhCC OdybSFauc8YeNrE5gScG0UgvbtiQQp4a7QFQ6bQbM/OoP7pB7JRqB9oxM4kjQ4pg 4ejyyYIYrkaFnkSWnephoDwg9svbePf6 -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:45 2025 by rpki-client