$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json) Hash identifier: mTpT+GIgBHW3tVYTz0DFdxUFwtuYZc/o8OLkU9QoiVI= Subject key identifier: AC:30:F3:BC:EC:9A:BF:C1:E0:BC:85:91:12:C3:3E:EE:99:91:A7:41 Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 Certificate issuer: /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft Manifest number: 09C1 Signing time: Wed 22 Oct 2025 20:42:29 +0000 Manifest this update: Wed 22 Oct 2025 20:42:28 +0000 Manifest next update: Wed 29 Oct 2025 20:42:28 +0000 Files and hashes: 1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: nOIzx8ihSKkxJn8zeALiEM0s9As68nhyV5AOngcrDHk=) 2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: h/RxqPeNlZHrrroyidunxTzpRf8yC4MSHRaPkbI0Oxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Validity Not Before: Oct 22 20:42:28 2025 GMT Not After : Oct 29 20:42:28 2025 GMT Subject: CN=68f941b4-598b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:b4:f7:a5:b0:6f:fa:9b:79:d3:da:b0:ea: 86:19:a5:24:4b:63:fd:de:8a:d4:e5:cc:11:0c:f9: c9:08:a4:d4:ad:d3:7f:fe:31:16:a4:dc:7d:b6:3e: c6:45:67:b3:dd:60:05:15:1c:27:f4:a1:9b:03:73: 9c:cd:f6:04:8e:98:1e:46:01:b6:5d:bd:73:a5:22: 30:a9:b4:4e:1e:0f:3e:69:7c:67:08:0f:ef:12:b1: 3a:87:cf:05:f0:9f:5c:0e:3e:9a:2d:02:f6:e6:13: f2:d1:c4:5a:08:61:43:65:21:67:b8:4d:c9:42:eb: eb:53:23:52:07:77:3d:25:e4:55:9c:5b:93:0d:ec: a7:a3:aa:ec:14:57:b6:99:08:03:17:1a:6b:21:cc: 34:2a:01:8d:27:b5:e2:8e:90:a6:06:5f:5c:85:ec: b6:d0:17:6c:2a:ae:31:9d:3c:74:85:a0:61:a9:45: 08:64:c2:e6:d1:cc:16:6e:fa:be:bb:af:77:28:f7: fa:7e:dc:a9:ac:ef:3a:ba:a8:6a:36:94:52:bc:67: 06:83:5c:7e:df:cb:14:cb:0a:ae:2b:6d:be:7d:de: 8c:29:d9:4b:3d:c9:98:3d:b1:d8:1c:e3:f5:12:7a: 27:ae:2d:af:93:22:f9:09:92:9f:43:9e:e0:cc:48: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:F3:BC:EC:9A:BF:C1:E0:BC:85:91:12:C3:3E:EE:99:91:A7:41 X509v3 Authority Key Identifier: keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e7:d3:c3:73:51:5c:bc:68:ba:12:61:12:f4:06:79:f6:19: f6:9a:90:4a:dc:1d:eb:9b:37:2a:cf:ac:4a:38:e2:2b:18:da: 5f:9c:56:ee:1e:c7:fa:16:76:b7:39:40:82:c5:a9:a5:b3:42: e3:36:bb:c2:38:f4:00:65:bc:07:20:d9:d4:2b:4e:01:8a:b0: 9e:f1:8d:ce:92:74:b9:70:58:77:7a:0e:a5:6c:3c:88:11:c8: b6:82:69:95:b5:8f:5f:2d:0d:8d:12:85:18:0b:3c:a5:7a:fe: 49:b4:ab:2d:1d:66:6c:0d:2d:dc:30:54:43:f3:14:27:ce:62: 12:cc:94:c7:a1:34:7d:8b:8e:01:9c:c2:e6:4a:1c:2d:25:d6: 67:5d:45:8f:44:d5:0f:df:83:55:2d:82:6d:52:53:22:05:af: 27:11:8b:07:95:21:f9:32:c0:cd:e5:b3:13:73:bd:ff:a0:a2: 9d:a3:6f:55:06:62:f6:05:2b:a8:0a:8a:c6:4a:26:21:f0:0a: 04:d3:2d:5a:86:f6:17:47:84:ae:f9:fc:dc:53:98:af:f0:fd: 32:e6:a1:04:34:05:23:7d:08:ca:05:55:ce:f8:79:b5:90:6f: 73:d9:a3:73:bf:d0:86:2f:aa:9a:51:cc:7f:6d:70:89:cc:ed: c5:e8:6f:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0FFNjExMC8GA1UEBRMoNjRDQTU0MjZBQzdBNTUwQkRBMTA1M0EwMTI4MzE0NEUy RENEMkJENzAeFw0yNTEwMjIyMDQyMjhaFw0yNTEwMjkyMDQyMjhaMBgxFjAUBgNV BAMTDTY4Zjk0MWI0LTU5OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7TrT3pbBv+pt509qw6oYZpSRLY/3eitTlzBEM+ckIpNSt03/+MRak3H22PsZF Z7PdYAUVHCf0oZsDc5zN9gSOmB5GAbZdvXOlIjCptE4eDz5pfGcID+8SsTqHzwXw n1wOPpotAvbmE/LRxFoIYUNlIWe4TclC6+tTI1IHdz0l5FWcW5MN7KejquwUV7aZ CAMXGmshzDQqAY0nteKOkKYGX1yF7LbQF2wqrjGdPHSFoGGpRQhkwubRzBZu+r67 r3co9/p+3Kms7zq6qGo2lFK8ZwaDXH7fyxTLCq4rbb593owp2Us9yZg9sdgc4/US eieuLa+TIvkJkp9DnuDMSD2fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrDDzvOya v8HgvIWREsM+7pmRp0EwHwYDVR0jBBgwFoAUZMpUJqx6VQvaEFOgEoMUTi3NK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQUU2LzY1RDA0NEM0OTQx ODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2YUVGT2dFb01VVGkzTks5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1wVUpxeDZWUXZhRUZPZ0VvTVVUaTNOSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD QUU2LzY1RDA0NEM0OTQxODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2 YUVGT2dFb01VVGkzTks5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALTn08NzUVy8aLoSYRL0Bnn2GfaakErcHeubNyrPrEo44isY2l+cVu4e x/oWdrc5QILFqaWzQuM2u8I49ABlvAcg2dQrTgGKsJ7xjc6SdLlwWHd6DqVsPIgR yLaCaZW1j18tDY0ShRgLPKV6/km0qy0dZmwNLdwwVEPzFCfOYhLMlMehNH2LjgGc wuZKHC0l1mddRY9E1Q/fg1Utgm1SUyIFrycRiweVIfkywM3lsxNzvf+gop2jb1UG YvYFK6gKisZKJiHwCgTTLVqG9hdHhK75/NxTmK/w/TLmoQQ0BSN9CMoFVc74ebWQ b3PZo3O/0IYvqppRzH9tcInM7cXob34= -----END CERTIFICATE-----Generated at Thu Oct 23 04:59:45 2025 by rpki-client