$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: UqjXwwYN6O7OOmP09hMgHayGq3CdyqF+kFH7O2Pl5jo= Subject key identifier: C1:87:9E:2C:F7:3F:F5:99:3A:0E:D5:09:A9:CC:55:4B:7E:2D:3B:B1 Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 022A Signing time: Mon 27 Oct 2025 03:37:21 +0000 Manifest this update: Mon 27 Oct 2025 03:37:20 +0000 Manifest next update: Mon 03 Nov 2025 03:37:20 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: aw7/qm0ysiVw7weYRIo68H5cG7JPRjorqGpDJ04NANU=) 2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: TVO1eccZ7Jv3HMD56bPt9VHdqMCi+LIJ7/aVWhXVMSw=) 3: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: pgI9v9tBw4JvLouCdhmI8EFq53pssTwtUNiYfyBQjoo=) 4: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: 9HMzFEkbx1T0ynaVX6uHWObWXzc9PFPAUjEuMjKZdqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Oct 27 03:37:20 2025 GMT Not After : Nov 3 03:37:20 2025 GMT Subject: CN=68fee8f0-2635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:5b:60:03:1e:a8:6f:44:bb:14:c8:3f:95: 95:6a:91:8e:82:dd:bf:69:fd:e6:d5:13:dc:79:5c: 00:39:00:80:8c:ed:a8:6d:1d:f7:94:53:88:c1:46: 32:f5:92:f6:10:aa:e4:a6:9d:cf:10:43:99:a8:ca: 17:28:b7:b7:b8:92:b9:cc:01:c0:4f:dd:cf:15:81: 90:86:26:5f:07:02:db:2d:a1:ee:78:0b:7a:4d:1a: 8d:9a:06:81:4f:95:38:94:4a:c7:b7:7e:24:d2:e2: 08:33:12:f5:06:7f:b2:47:f9:0b:b7:75:c3:e6:cc: c8:ac:54:ce:82:f7:df:7e:59:b4:1d:f8:97:b8:34: 54:3a:ee:b3:24:99:ad:e1:76:36:2c:79:6d:b9:bd: 82:6f:73:f0:db:a3:d5:4e:52:c1:e5:1b:1a:69:47: c6:c9:00:5b:1a:10:5b:dc:7e:38:c8:6a:3a:98:ac: ae:1f:2e:92:57:7a:0a:52:52:f5:75:09:6d:3c:7f: 23:38:be:36:81:bc:5d:12:40:88:50:8c:f0:d5:45: b9:48:a6:f2:55:ca:a3:c7:fa:99:4f:79:9b:67:4f: 33:2e:9e:4b:57:c1:39:1e:1c:29:24:91:24:e2:e0: 18:6d:cd:bd:ae:df:fc:de:9d:94:d4:4e:18:93:63: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:9E:2C:F7:3F:F5:99:3A:0E:D5:09:A9:CC:55:4B:7E:2D:3B:B1 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a4:9b:08:0d:8b:89:bd:6f:6a:25:9a:fc:be:51:d4:8d:c3: d5:57:23:46:42:26:c8:96:ba:b8:42:92:d4:cf:5c:bc:b6:e2: b0:98:00:a3:99:30:37:b1:44:ae:87:f0:33:d9:49:aa:ec:6b: cd:39:29:8f:ed:69:ec:29:ec:ca:00:37:8e:0b:27:66:f7:6c: 3b:ab:7c:c1:01:9d:0d:ee:1d:6f:60:11:e6:7c:3f:fe:9d:ed: 01:b2:52:9e:48:4a:76:60:19:06:5d:35:b8:53:c8:48:3b:32: 0d:96:36:cd:1c:e7:73:6f:63:17:b3:90:44:b4:7b:06:3e:d1: 1a:06:a2:b5:04:0a:28:e9:21:68:dd:90:3f:0d:bc:82:12:99: 02:58:fb:a1:a5:ca:db:35:3f:38:b9:bb:38:c1:61:42:89:1c: a4:eb:ec:4d:0e:1b:28:f7:6d:45:61:0e:29:7c:94:73:3f:6e: 5f:8e:bf:b8:d7:0a:44:10:c0:05:c2:2b:f6:10:4c:44:c1:73: 4b:c7:91:49:31:51:4b:c4:45:63:22:87:b3:53:d9:91:9c:dd: dc:cb:97:01:ae:2a:59:62:f0:1a:c6:ce:ed:a9:45:18:d8:5b: 8b:61:5e:ec:b0:f2:3b:c4:56:5a:3f:6d:9e:06:94:28:9a:d1: 68:2f:50:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjUxMDI3MDMzNzIwWhcNMjUxMTAzMDMzNzIwWjAYMRYwFAYD VQQDEw02OGZlZThmMC0yNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq05bYAMeqG9EuxTIP5WVapGOgt2/af3m1RPceVwAOQCAjO2obR33lFOIwUYy 9ZL2EKrkpp3PEEOZqMoXKLe3uJK5zAHAT93PFYGQhiZfBwLbLaHueAt6TRqNmgaB T5U4lErHt34k0uIIMxL1Bn+yR/kLt3XD5szIrFTOgvffflm0HfiXuDRUOu6zJJmt 4XY2LHltub2Cb3Pw26PVTlLB5RsaaUfGyQBbGhBb3H44yGo6mKyuHy6SV3oKUlL1 dQltPH8jOL42gbxdEkCIUIzw1UW5SKbyVcqjx/qZT3mbZ08zLp5LV8E5HhwpJJEk 4uAYbc29rt/83p2U1E4Yk2NvyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGHniz3 P/WZOg7VCanMVUt+LTuxMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhpJsIDYuJvW9qJZr8vlHUjcPVVyNGQibIlrq4QpLUz1y8tuKwmACj mTA3sUSuh/Az2Umq7GvNOSmP7WnsKezKADeOCydm92w7q3zBAZ0N7h1vYBHmfD/+ ne0BslKeSEp2YBkGXTW4U8hIOzINljbNHOdzb2MXs5BEtHsGPtEaBqK1BAoo6SFo 3ZA/DbyCEpkCWPuhpcrbNT84ubs4wWFCiRyk6+xNDhso921FYQ4pfJRzP25fjr+4 1wpEEMAFwiv2EExEwXNLx5FJMVFLxEVjIoezU9mRnN3cy5cBripZYvAaxs7tqUUY 2FuLYV7ssPI7xFZaP22eBpQomtFoL1C2 -----END CERTIFICATE-----Generated at Mon Oct 27 15:06:02 2025 by rpki-client