$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: yHVdOR8AJi6At006SUdGfvcO7jctKXGhxLM5TDB4G8U= Subject key identifier: 8B:1E:09:E4:9F:E8:56:42:25:4E:A3:6F:7D:8A:DA:0D:AD:FE:0B:CD Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 010C Signing time: Mon 03 Nov 2025 04:58:56 +0000 Manifest this update: Mon 03 Nov 2025 04:58:56 +0000 Manifest next update: Mon 10 Nov 2025 04:58:56 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: uEpORVecvu0Ar8zR6/IOPZ/+d/EsWixvrOKKshYrmwU=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Nov 3 04:58:56 2025 GMT Not After : Nov 10 04:58:56 2025 GMT Subject: CN=69083690-7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:71:cf:48:fd:4a:94:f4:dc:10:1c:0b:b5: 42:b8:19:d8:ad:a0:96:85:0b:55:33:70:96:63:d0: 0b:c8:6f:0f:46:2e:e5:14:3f:03:c2:f2:30:26:96: 30:8d:95:ed:d0:f5:8e:a5:c5:02:3b:78:a1:26:b8: 67:70:8c:45:73:59:b9:ca:ed:91:4e:9d:33:a3:c1: 82:af:fc:2f:21:64:88:89:bd:e8:0b:f6:e5:33:cb: 2e:9e:90:ee:fc:d5:6b:44:60:0c:0d:04:f9:46:20: c7:6f:ce:b3:96:dc:8e:36:63:48:61:94:a8:d5:86: 80:f8:8c:e8:21:e6:08:a5:21:8e:aa:e7:5f:83:11: af:00:65:ec:e8:0b:cf:dd:b5:c3:be:7c:b1:dc:ea: 5d:09:94:ca:9a:42:ec:01:94:66:e3:18:26:82:1e: 87:15:8e:24:48:62:c8:38:db:ab:34:0e:ba:54:05: 7f:53:ec:e7:f8:42:60:98:0f:1c:8b:22:69:24:7a: 45:09:81:ac:d6:46:59:64:be:bf:a6:d6:ef:fa:95: 0f:2e:cf:f6:c3:a6:1d:e6:3e:3b:06:91:aa:e7:fe: c2:c7:21:b9:ef:9a:89:dc:c4:ff:17:14:6a:11:07: ad:52:3f:87:a7:59:66:8c:05:c1:d2:a6:66:6d:6d: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1E:09:E4:9F:E8:56:42:25:4E:A3:6F:7D:8A:DA:0D:AD:FE:0B:CD X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ed:c9:a8:15:ae:35:56:f7:aa:30:8b:9a:64:11:1e:3b:87: 6e:b3:08:bb:f1:bb:65:79:cd:0a:cb:8b:ef:1c:42:ab:30:b8: a9:a8:3d:35:48:41:c4:7b:e9:74:00:6f:fa:d3:68:f9:19:e1: be:5c:ff:03:1f:ef:a8:7d:ec:20:e6:62:77:fe:cc:95:e3:7a: 7b:e2:9c:28:64:a6:3d:25:ff:c6:62:e6:75:83:94:52:f4:de: 54:1b:15:87:23:09:bb:d6:8c:ac:78:92:73:5e:4b:2d:0e:e5: 44:33:0c:cf:4c:2a:05:5a:64:00:4c:46:d5:63:1d:cd:c8:b6: 44:cb:10:92:37:9b:63:f3:9b:36:1b:af:1e:ca:2f:15:a8:4a: 1f:c5:1f:1e:b4:f8:62:1e:cb:96:df:2a:65:a0:c6:fe:83:20: 51:19:db:40:06:0c:88:94:80:2d:f9:14:77:55:87:ad:8a:03: cc:19:8d:0f:1c:b3:c6:d2:56:b5:40:1b:69:57:32:8f:df:06: b1:4f:b8:e9:83:47:cb:3f:bd:47:1e:5f:db:96:3b:5c:7c:13: 2a:ba:61:9c:3d:32:b0:ac:53:05:4d:d5:14:a2:9b:2f:f6:f7: b3:5a:06:8b:fd:32:a7:c1:f7:bc:61:95:23:be:48:89:11:c0: 66:73:74:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUxMTAzMDQ1ODU2WhcNMjUxMTEwMDQ1ODU2WjAYMRYwFAYD VQQDEw02OTA4MzY5MC03MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qhxz0j9SpT03BAcC7VCuBnYraCWhQtVM3CWY9ALyG8PRi7lFD8DwvIwJpYw jZXt0PWOpcUCO3ihJrhncIxFc1m5yu2RTp0zo8GCr/wvIWSIib3oC/blM8sunpDu /NVrRGAMDQT5RiDHb86zltyONmNIYZSo1YaA+IzoIeYIpSGOqudfgxGvAGXs6AvP 3bXDvnyx3OpdCZTKmkLsAZRm4xgmgh6HFY4kSGLIONurNA66VAV/U+zn+EJgmA8c iyJpJHpFCYGs1kZZZL6/ptbv+pUPLs/2w6Yd5j47BpGq5/7CxyG575qJ3MT/FxRq EQetUj+Hp1lmjAXB0qZmbW0QJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIseCeSf 6FZCJU6jb32K2g2t/gvNMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf7cmoFa41VveqMIuaZBEeO4duswi78btlec0Ky4vvHEKrMLipqD01 SEHEe+l0AG/602j5GeG+XP8DH++ofewg5mJ3/syV43p74pwoZKY9Jf/GYuZ1g5RS 9N5UGxWHIwm71oyseJJzXkstDuVEMwzPTCoFWmQATEbVYx3NyLZEyxCSN5tj85s2 G68eyi8VqEofxR8etPhiHsuW3yploMb+gyBRGdtABgyIlIAt+RR3VYetigPMGY0P HLPG0la1QBtpVzKP3waxT7jpg0fLP71HHl/bljtcfBMqumGcPTKwrFMFTdUUopsv 9vezWgaL/TKnwfe8YZUjvkiJEcBmc3R1 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:34 2025 by rpki-client