$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: t+BCeu8syDcRdcyHStXkermYv3UbytRVdJ+gJvZQoR0= Subject key identifier: E3:52:ED:39:23:45:3A:C6:0C:DD:8D:1F:EF:80:9F:17:F8:99:D6:42 Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 0945 Signing time: Tue 04 Nov 2025 20:17:33 +0000 Manifest this update: Tue 04 Nov 2025 20:17:33 +0000 Manifest next update: Tue 11 Nov 2025 20:17:33 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: z5PgIKYGOLEhl+0Ovd7YYx8otuD6I9OjwisfIXHflj0=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: WjFZEedMDw0JbPWqqHGuTrg3MKW0ZTVgSyL2yBJOKwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Nov 4 20:17:33 2025 GMT Not After : Nov 11 20:17:33 2025 GMT Subject: CN=690a5f5d-bb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:8d:02:d1:75:62:d0:2f:31:eb:c2:3c:cf: f7:ff:a5:04:44:7b:f2:5b:ef:aa:9d:20:7b:a1:fb: c0:30:f2:88:3f:1a:37:f5:6e:a0:23:91:f6:d5:6c: 87:d6:0a:31:20:48:3d:98:af:97:2a:02:e9:23:9f: df:01:56:9a:c9:df:39:c7:36:ef:22:11:ed:fe:b5: 1a:55:03:b0:38:4c:7f:7e:9a:99:40:5d:d8:38:45: c1:05:6c:fa:27:7b:37:a8:c1:f8:aa:85:cb:0b:7f: d2:96:ea:b5:29:52:83:9a:da:b2:fc:0b:aa:df:12: b3:fa:18:6d:c5:09:e2:c2:ed:f5:99:7a:56:06:be: 9d:5c:59:8f:84:fe:43:c3:00:bb:bd:a0:f8:00:c9: 3a:86:d9:50:15:a3:01:2a:6b:69:d7:e4:e8:b7:c6: af:9a:da:4b:ce:08:32:12:ce:59:51:51:bc:29:31: bd:0c:d6:51:16:80:33:cc:e8:a1:f6:a2:14:60:47: b5:bc:85:f8:ac:30:0a:a2:7c:82:9d:8a:0e:8b:5c: 21:1c:cf:fc:c4:a6:57:e6:ce:44:c9:f6:b4:d0:7a: 76:67:8c:b5:f6:5e:ee:93:4a:5d:02:f6:12:2b:25: 8b:5f:db:5b:46:09:15:f3:f1:3e:b3:dc:e1:29:f1: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:ED:39:23:45:3A:C6:0C:DD:8D:1F:EF:80:9F:17:F8:99:D6:42 X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ff:0e:3a:cf:41:5d:fa:a6:c1:c9:be:38:6b:5e:5e:a9:2e: ab:e9:a9:64:02:1c:27:19:c1:4a:ef:34:b1:22:00:2e:57:18: 17:64:1f:f3:29:e3:a3:02:36:5f:0e:51:90:23:1b:fe:0a:5d: 16:01:ca:55:98:dd:90:70:13:26:7c:d0:9b:28:3d:cb:11:fb: f1:a4:90:a1:3a:e0:11:35:ca:ce:92:6e:79:6d:bb:67:d1:64: ac:40:df:2b:b8:21:5d:64:45:3c:ad:65:17:7e:1b:a5:52:11: de:18:09:1c:1b:34:0e:4a:de:44:30:da:37:9c:34:d7:0e:56: 3f:6b:6c:64:1b:18:6c:e8:a1:fa:30:ca:45:2f:48:68:13:2d: 36:11:86:5c:4f:f7:cb:75:a4:b6:c8:05:53:d4:db:21:b2:e3: df:c2:c4:3f:21:40:c2:6b:26:5e:3a:86:95:54:22:40:70:35: 8d:73:7f:88:07:f6:e4:51:77:95:97:8b:30:72:fb:e9:d9:97: c2:41:c6:cd:cf:94:73:d0:6b:f1:07:d3:82:5d:15:e0:8d:fc: 7b:4c:02:54:39:06:b7:61:5f:06:1c:ae:5b:d7:c7:e5:7f:55: 07:0b:1d:99:db:c0:28:76:0c:7a:54:1f:2e:b0:81:77:44:98: 42:6b:d9:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUxMTA0MjAxNzMzWhcNMjUxMTExMjAxNzMzWjAYMRYwFAYD VQQDEw02OTBhNWY1ZC1iYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBqNAtF1YtAvMevCPM/3/6UERHvyW++qnSB7ofvAMPKIPxo39W6gI5H21WyH 1goxIEg9mK+XKgLpI5/fAVaayd85xzbvIhHt/rUaVQOwOEx/fpqZQF3YOEXBBWz6 J3s3qMH4qoXLC3/Sluq1KVKDmtqy/Auq3xKz+hhtxQniwu31mXpWBr6dXFmPhP5D wwC7vaD4AMk6htlQFaMBKmtp1+Tot8avmtpLzggyEs5ZUVG8KTG9DNZRFoAzzOih 9qIUYEe1vIX4rDAKonyCnYoOi1whHM/8xKZX5s5Eyfa00Hp2Z4y19l7uk0pdAvYS KyWLX9tbRgkV8/E+s9zhKfFIawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONS7Tkj RTrGDN2NH++Anxf4mdZCMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw/w46z0Fd+qbByb44a15eqS6r6alkAhwnGcFK7zSxIgAuVxgXZB/z KeOjAjZfDlGQIxv+Cl0WAcpVmN2QcBMmfNCbKD3LEfvxpJChOuARNcrOkm55bbtn 0WSsQN8ruCFdZEU8rWUXfhulUhHeGAkcGzQOSt5EMNo3nDTXDlY/a2xkGxhs6KH6 MMpFL0hoEy02EYZcT/fLdaS2yAVT1NshsuPfwsQ/IUDCayZeOoaVVCJAcDWNc3+I B/bkUXeVl4swcvvp2ZfCQcbNz5Rz0GvxB9OCXRXgjfx7TAJUOQa3YV8GHK5b18fl f1UHCx2Z28Aodgx6VB8usIF3RJhCa9kr -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:28 2025 by rpki-client