$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: MqG1bSUVXsyhnIFKfJQzFak1tW9tDyfwqwmIR4v/hQA= Subject key identifier: E6:4A:E6:06:49:97:35:28:15:08:12:A8:95:52:2E:60:B5:30:90:54 Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 0694 Signing time: Fri 24 Oct 2025 23:54:06 +0000 Manifest this update: Fri 24 Oct 2025 23:54:05 +0000 Manifest next update: Fri 31 Oct 2025 23:54:05 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: 8jv7l8A3nMP32D8MgJQqzzi4oyRhnHG86xy8949jJDg=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: 3IT5sXfzQ0Hxvtz12P+0YoEVny7bB7FC9cV7U/XrkKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 23:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Oct 24 23:54:05 2025 GMT Not After : Oct 31 23:54:05 2025 GMT Subject: CN=68fc119d-d829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:23:19:e2:4f:b4:73:fc:88:cc:cc:75:4d: 97:56:79:79:5f:2e:0d:2f:49:72:0b:e1:68:2f:1e: 23:d1:45:10:07:a6:c5:21:fd:84:a7:8f:fe:49:03: 16:d9:87:e1:4f:77:4e:bf:f0:9e:b5:6e:df:2b:bd: cd:f2:44:7b:25:ac:52:d1:1c:b3:b9:62:93:a6:43: fc:e1:2f:4b:79:f6:f5:41:4b:6b:47:2c:ed:66:c6: 78:30:a6:3a:17:12:5a:b5:19:57:a7:d3:cf:f9:3c: 8c:c7:62:b6:f5:cd:8b:0d:bd:49:61:65:8d:4c:41: 90:1c:42:60:5b:05:dd:d6:65:f5:cb:ec:ab:a3:43: bb:bd:4c:1e:12:d2:f7:59:bc:9e:9f:60:52:8c:ef: af:40:6d:ed:ee:31:15:01:ed:cb:95:f7:94:1a:d8: 92:d4:3f:ef:b9:7b:b2:6e:c6:84:89:2b:69:10:fd: da:ff:28:5f:32:80:86:c9:99:18:f5:d1:2c:96:f9: 86:80:bf:f4:8f:60:7b:e2:fa:54:92:25:e2:dc:65: 6e:6e:f5:f2:96:e9:60:42:a2:2d:40:43:da:9c:d5: c0:a3:fd:7e:df:75:f7:81:8f:38:84:50:ca:ba:63: 55:8c:2d:d1:4d:da:aa:fd:5e:b7:dd:57:d6:09:ce: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4A:E6:06:49:97:35:28:15:08:12:A8:95:52:2E:60:B5:30:90:54 X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d9:4b:5d:24:57:a4:8c:01:9c:00:65:db:9d:f5:e7:15:42: 80:3f:d6:57:94:5a:eb:41:b2:7e:09:df:1d:1a:b6:7e:80:31: f9:23:08:7c:d2:56:1b:3c:a1:f6:a9:1a:df:87:8d:82:d4:f1: 1e:96:79:1f:cc:9d:77:35:34:9e:8a:f6:cd:49:ab:9a:cc:c4: ac:1e:00:a7:76:bb:95:85:16:2b:dc:10:c2:ad:2f:37:74:ff: 58:4a:83:7a:be:0d:15:0f:82:a7:bb:d5:c1:04:d2:1a:7c:5a: f1:97:12:a7:62:71:2a:a6:cb:7e:11:f0:b5:83:58:de:9d:d8: 6b:6c:0a:e7:2f:0a:08:39:1b:2f:48:23:25:ac:2d:e7:77:94: fe:b9:a4:4a:63:c7:02:e7:4d:27:62:f8:13:1f:e0:3c:38:54: 0a:ed:cc:a4:08:a1:b7:2d:b9:3e:1a:18:ea:f3:aa:dc:3b:1f: d9:cf:59:5a:8a:e6:2e:0e:7b:15:a3:81:73:02:47:8d:0f:72: df:8d:a0:77:3a:3b:16:e5:9a:51:d3:4b:be:e3:04:90:3c:f6: d3:39:8c:f8:1c:94:09:8c:0f:28:f8:68:c5:3b:b3:83:db:07: f3:40:1e:48:61:46:19:be:ef:6f:13:f0:c1:aa:c9:77:cc:76: 86:8c:14:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjUxMDI0MjM1NDA1WhcNMjUxMDMxMjM1NDA1WjAYMRYwFAYD VQQDEw02OGZjMTE5ZC1kODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7UjGeJPtHP8iMzMdU2XVnl5Xy4NL0lyC+FoLx4j0UUQB6bFIf2Ep4/+SQMW 2YfhT3dOv/CetW7fK73N8kR7JaxS0RyzuWKTpkP84S9Lefb1QUtrRyztZsZ4MKY6 FxJatRlXp9PP+TyMx2K29c2LDb1JYWWNTEGQHEJgWwXd1mX1y+yro0O7vUweEtL3 Wbyen2BSjO+vQG3t7jEVAe3LlfeUGtiS1D/vuXuybsaEiStpEP3a/yhfMoCGyZkY 9dEslvmGgL/0j2B74vpUkiXi3GVubvXylulgQqItQEPanNXAo/1+33X3gY84hFDK umNVjC3RTdqq/V633VfWCc7b2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZK5gZJ lzUoFQgSqJVSLmC1MJBUMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX2UtdJFekjAGcAGXbnfXnFUKAP9ZXlFrrQbJ+Cd8dGrZ+gDH5Iwh8 0lYbPKH2qRrfh42C1PEelnkfzJ13NTSeivbNSauazMSsHgCndruVhRYr3BDCrS83 dP9YSoN6vg0VD4Knu9XBBNIafFrxlxKnYnEqpst+EfC1g1jendhrbArnLwoIORsv SCMlrC3nd5T+uaRKY8cC500nYvgTH+A8OFQK7cykCKG3Lbk+Ghjq86rcOx/Zz1la iuYuDnsVo4FzAkeND3LfjaB3OjsW5ZpR00u+4wSQPPbTOYz4HJQJjA8o+GjFO7OD 2wfzQB5IYUYZvu9vE/DBqsl3zHaGjBR0 -----END CERTIFICATE-----Generated at Sat Oct 25 11:29:45 2025 by rpki-client