$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: o0rVt+zLuCVEZJHsi076JO5drxXNCGCD7ITSLuFf1Y8= Subject key identifier: FF:A0:3F:FB:67:CF:69:76:F1:C2:B1:CF:63:63:A4:D3:3D:F5:E4:30 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 1508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 14E7 Signing time: Sun 26 Oct 2025 17:05:00 +0000 Manifest this update: Sun 26 Oct 2025 17:05:00 +0000 Manifest next update: Sun 02 Nov 2025 17:05:00 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: iVL1wMuUCPcuJBzSwMkn1BzCp03fWFKC/ToHQUfthiA=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5384 (0x1508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Oct 26 17:05:00 2025 GMT Not After : Nov 2 17:05:00 2025 GMT Subject: CN=68fe54bc-8bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:9c:39:04:ee:ca:25:3a:9f:af:61:9a:ab: 3b:de:18:e3:68:00:e8:66:7a:1d:1a:39:49:95:7e: 20:d0:c6:09:f0:b1:ec:8d:12:62:fa:2b:9b:42:62: e3:9c:f0:9c:eb:47:3d:a9:4e:f2:01:57:78:95:63: a7:bc:83:03:46:9b:21:41:cd:bc:78:8d:43:0b:ba: 38:65:e9:48:51:fb:56:c7:25:0a:de:80:c0:98:99: 3f:80:ba:20:8b:fd:ae:2e:77:ca:2c:48:7c:d4:ab: 25:8a:a4:4a:be:68:33:c6:36:65:59:35:c9:cd:73: 50:d8:ff:50:9a:bb:2b:60:1e:c3:7d:7b:76:21:d6: ee:52:b6:4c:16:68:6f:2a:4c:a2:eb:a7:ca:21:9a: 39:d6:8e:55:59:f6:9a:3a:3c:a4:25:82:c1:fa:c7: 5b:85:4e:7e:d4:af:6d:73:b4:0a:93:fa:89:9e:d5: 27:78:b3:60:d8:65:5b:f4:64:38:5b:d2:89:9e:86: a6:26:93:fa:e8:9c:d1:dc:c5:3a:68:21:a8:b0:9e: ee:fd:25:9e:58:38:f2:18:c2:c5:9d:4c:93:63:5d: fb:16:56:ab:01:26:37:e2:43:34:e2:09:67:62:39: f5:22:40:4c:1a:fc:f0:85:42:45:63:2e:5d:a2:07: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:3F:FB:67:CF:69:76:F1:C2:B1:CF:63:63:A4:D3:3D:F5:E4:30 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a1:fc:2c:f5:26:81:8e:b0:79:24:cf:4d:76:03:3b:cc:a4: 37:68:cf:ff:90:b2:bb:69:7b:9b:5d:eb:8f:01:83:d4:36:6b: f4:37:57:95:fe:ce:47:0d:b7:68:a4:4b:c0:4f:c4:99:c8:4f: 76:06:67:ba:5d:74:05:73:fb:3c:d3:da:3c:85:29:22:3e:23: 13:aa:bf:26:2c:45:89:15:03:2f:e0:fd:a5:03:df:19:37:b4: db:3c:b3:1a:76:1f:cf:59:5f:27:b9:ee:ac:f8:fe:49:0b:1e: 09:e7:90:68:43:50:13:73:86:af:f4:a1:28:9b:e1:c9:2c:fb: 4d:99:21:4f:fe:0d:62:ee:4f:a3:97:8f:a6:54:7d:d2:7c:e1: d6:e9:12:a5:2f:f3:f2:64:69:e2:51:c2:eb:26:41:24:f1:bd: 4a:43:97:83:b3:69:3b:e7:50:a5:16:19:d5:3b:a0:90:fa:50: 39:55:7a:52:10:f0:ce:b2:4c:b0:a6:dc:54:e0:c7:20:5d:d4: db:9f:f9:4a:3b:72:8d:e8:42:4f:b9:bf:36:87:7f:a0:f9:d9: 30:81:a3:c0:89:41:fe:d3:68:48:72:5b:ce:e7:36:b8:a1:c5: 04:40:7b:83:0f:57:de:59:61:19:0e:26:72:ee:75:33:5c:8c: 2f:7b:24:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUxMDI2MTcwNTAwWhcNMjUxMTAyMTcwNTAwWjAYMRYwFAYD VQQDEw02OGZlNTRiYy04YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rmcOQTuyiU6n69hmqs73hjjaADoZnodGjlJlX4g0MYJ8LHsjRJi+iubQmLj nPCc60c9qU7yAVd4lWOnvIMDRpshQc28eI1DC7o4ZelIUftWxyUK3oDAmJk/gLog i/2uLnfKLEh81KsliqRKvmgzxjZlWTXJzXNQ2P9QmrsrYB7DfXt2IdbuUrZMFmhv Kkyi66fKIZo51o5VWfaaOjykJYLB+sdbhU5+1K9tc7QKk/qJntUneLNg2GVb9GQ4 W9KJnoamJpP66JzR3MU6aCGosJ7u/SWeWDjyGMLFnUyTY137FlarASY34kM04gln Yjn1IkBMGvzwhUJFYy5dogcvDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+gP/tn z2l28cKxz2NjpNM99eQwMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ofws9SaBjrB5JM9NdgM7zKQ3aM//kLK7aXubXeuPAYPUNmv0N1eV /s5HDbdopEvAT8SZyE92Bme6XXQFc/s809o8hSkiPiMTqr8mLEWJFQMv4P2lA98Z N7TbPLMadh/PWV8nue6s+P5JCx4J55BoQ1ATc4av9KEom+HJLPtNmSFP/g1i7k+j l4+mVH3SfOHW6RKlL/PyZGniUcLrJkEk8b1KQ5eDs2k751ClFhnVO6CQ+lA5VXpS EPDOskywptxU4McgXdTbn/lKO3KN6EJPub82h3+g+dkwgaPAiUH+02hIclvO5za4 ocUEQHuDD1feWWEZDiZy7nUzXIwveyRm -----END CERTIFICATE-----Generated at Tue Oct 28 09:27:09 2025 by rpki-client