$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: 9O0wjMb+fjAe7mkPEqjWHPPg+RzY5husfwQYrYJg5W8= Subject key identifier: B8:D1:25:A3:D4:3D:D2:B8:73:D3:57:14:73:6F:C6:D6:A9:4E:DF:42 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: F3 Signing time: Wed 17 Sep 2025 05:52:52 +0000 Manifest this update: Wed 17 Sep 2025 05:52:52 +0000 Manifest next update: Wed 24 Sep 2025 05:52:52 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: xtskdTdB67Il4Y+XGwPHm5ebvvoTOuXXJXmVd+KA6cE=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Sep 17 05:52:52 2025 GMT Not After : Sep 24 05:52:52 2025 GMT Subject: CN=68ca4cb4-f643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:dc:04:b6:85:f0:7d:57:ca:dc:04:d3:4a: ea:7d:47:5b:13:21:dc:42:f6:f2:fb:e3:3e:5c:92: 8c:cc:3b:46:ec:90:7b:2d:0f:48:0c:e6:64:2a:d5: 17:a8:b3:fc:a9:89:9b:c3:02:df:41:ab:c2:07:3b: 63:52:e8:ac:26:eb:b0:02:f6:20:58:23:57:61:66: 0b:33:ca:d6:bf:cc:0e:b7:a1:32:82:cf:d9:86:37: 22:a0:06:ba:6f:e3:05:d0:5c:e7:07:65:8f:f4:e8: 96:2c:67:26:05:72:d4:6d:e8:e2:96:94:5e:95:ae: 20:17:d4:dd:ad:73:bb:50:84:d6:9a:b7:8f:e6:6e: bf:6b:fe:b0:a2:6e:88:e0:41:10:3a:b6:1d:47:05: 11:45:f3:87:46:45:36:b6:4d:18:69:e9:55:f6:6a: 52:84:fa:7c:99:d3:01:bb:98:8e:d2:22:1d:3b:c3: 56:fc:f1:e3:86:f5:a8:93:92:d5:59:2a:93:24:db: 7b:ef:10:d2:9a:f5:57:98:59:68:7b:96:cf:8b:23: 67:22:13:b6:bc:aa:5e:a6:c9:ee:09:ff:da:0c:71: 6b:c4:7c:1c:99:aa:76:97:8b:4f:d7:2a:da:75:b0: fb:05:ec:19:ac:d8:cb:e2:37:7a:8d:61:a7:f8:60: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:25:A3:D4:3D:D2:B8:73:D3:57:14:73:6F:C6:D6:A9:4E:DF:42 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:98:bf:32:20:83:ee:45:44:0b:89:f3:7c:60:46:17:15:84: 33:99:46:76:55:9c:7d:fa:bb:13:63:f0:58:d9:b4:c8:e5:10: 2c:6a:44:26:8c:00:03:2f:ef:71:7d:f9:a3:df:87:63:31:a8: b9:52:57:65:f1:cd:f9:86:81:b7:ff:53:f4:d9:50:00:0f:08: 30:b0:17:b6:63:9e:48:e2:5f:98:b6:23:bc:f0:66:fa:3e:89: f0:74:05:fa:c5:9d:54:18:71:8a:a1:e1:f6:ad:cf:61:a9:69: 30:10:41:7d:20:b7:78:eb:69:40:a7:ac:14:6c:38:75:bd:01: 0d:b0:4f:be:4f:f5:09:c1:95:ba:df:59:ef:61:be:2a:36:86: d4:00:27:0e:d1:59:4c:70:c7:09:f6:b8:1b:8d:88:61:fb:36: 5f:3b:27:5e:3e:cf:5b:43:ba:2f:db:9e:50:e2:fd:20:59:7c: 61:ff:e2:e5:a2:4e:e2:e7:c2:fd:bf:09:d6:a3:ab:5f:42:e1: 01:2d:c9:ae:88:aa:9d:6a:43:c7:59:79:58:4d:2d:bc:65:8f: 64:f4:a0:f1:ae:98:5c:c4:ea:8e:f0:59:d8:ce:54:a2:33:37: 99:88:41:8c:5e:6b:00:72:e5:68:69:43:66:ef:72:19:5b:51: 3c:1e:45:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwOTE3MDU1MjUyWhcNMjUwOTI0MDU1MjUyWjAYMRYwFAYD VQQDEw02OGNhNGNiNC1mNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jHcBLaF8H1XytwE00rqfUdbEyHcQvby++M+XJKMzDtG7JB7LQ9IDOZkKtUX qLP8qYmbwwLfQavCBztjUuisJuuwAvYgWCNXYWYLM8rWv8wOt6Eygs/ZhjcioAa6 b+MF0FznB2WP9OiWLGcmBXLUbejilpRela4gF9TdrXO7UITWmreP5m6/a/6wom6I 4EEQOrYdRwURRfOHRkU2tk0YaelV9mpShPp8mdMBu5iO0iIdO8NW/PHjhvWok5LV WSqTJNt77xDSmvVXmFloe5bPiyNnIhO2vKpepsnuCf/aDHFrxHwcmap2l4tP1yra dbD7BewZrNjL4jd6jWGn+GDaMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjRJaPU PdK4c9NXFHNvxtapTt9CMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEmL8yIIPuRUQLifN8YEYXFYQzmUZ2VZx9+rsTY/BY2bTI5RAsakQm jAADL+9xffmj34djMai5Uldl8c35hoG3/1P02VAADwgwsBe2Y55I4l+YtiO88Gb6 PonwdAX6xZ1UGHGKoeH2rc9hqWkwEEF9ILd462lAp6wUbDh1vQENsE++T/UJwZW6 31nvYb4qNobUACcO0VlMcMcJ9rgbjYhh+zZfOydePs9bQ7ov255Q4v0gWXxh/+Ll ok7i58L9vwnWo6tfQuEBLcmuiKqdakPHWXlYTS28ZY9k9KDxrphcxOqO8FnYzlSi MzeZiEGMXmsAcuVoaUNm73IZW1E8HkVV -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:23 2025 by rpki-client