$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: JCBdYR5PQTp7au/QZp6Ooaaxr+aZ43rE/hl1wIsDfag= Subject key identifier: B2:7F:B9:5A:4D:E8:E2:9A:9C:8C:A8:3C:3B:40:AA:76:EC:69:A7:34 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 01DD Signing time: Mon 03 Nov 2025 03:17:28 +0000 Manifest this update: Mon 03 Nov 2025 03:17:27 +0000 Manifest next update: Mon 10 Nov 2025 03:17:27 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: QSY1jfpC9U4FABlJJtBKgF1JusDzI54okNIDdfIw1XY=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: dEO++79BUk5ahAousLOU8sxWcE1quKezgUCE1Hu7wA4=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: R4Ljm5NeP4Hir9hOIaavj4Ei4Fp/DK7rq1sAkkj7t6M=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: 6T5VqQ+edZ6pbmeIW8IszEM8XpwV+NQ6Abfc3d497aM=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: UBOFGSoa96Dj5GakGMm+C82OJl4KIG2NerG7i5z19VI=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: yx0ON/sLrcGZFA/S/wuCK9bR9AtwCeJiAtm+emoP2GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Nov 3 03:17:27 2025 GMT Not After : Nov 10 03:17:27 2025 GMT Subject: CN=69081ec8-0f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:ba:05:2a:d1:04:de:dd:7e:4b:46:a0:32: 1c:ff:52:49:dc:d8:36:5c:d0:a1:41:25:4c:e7:cd: 69:aa:95:d4:8d:82:5c:7a:95:dd:eb:21:6b:c8:53: 5c:cc:80:3a:c3:d8:54:6b:18:ba:a6:8e:44:e3:7f: 45:16:f8:47:8a:54:b2:c6:47:bd:5e:b2:e8:e7:11: 57:31:de:19:c6:bc:22:25:06:99:4c:bf:69:30:d9: f5:cc:6d:d0:75:b3:8c:91:f6:b4:35:9a:e0:e3:40: 19:59:1d:79:c8:a6:ee:b3:d4:2f:bc:f5:e9:a2:67: 0b:33:37:36:8a:2c:12:67:1d:62:9f:2e:89:13:bc: cd:e3:e1:8b:57:75:65:ee:9d:ea:2f:48:4a:7b:e4: 9b:96:ef:dd:08:53:52:2f:17:0f:93:5f:67:a0:73: 16:76:da:7a:49:77:94:e5:63:d4:e5:6d:5b:fe:d5: ee:ec:38:41:b6:c9:7c:cb:f6:a4:df:e5:18:7d:7b: 25:4e:a3:d8:aa:9f:17:be:31:4f:a8:17:fc:03:60: a4:10:f0:ca:05:b1:00:9a:c2:f0:1f:10:33:3a:55: cb:1f:f7:c1:1c:3e:d0:a3:fb:a9:7f:64:f1:52:70: d5:7e:7b:85:e9:17:6c:82:e4:87:50:50:82:c8:43: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:B9:5A:4D:E8:E2:9A:9C:8C:A8:3C:3B:40:AA:76:EC:69:A7:34 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f5:73:84:03:ac:9e:34:6a:6f:23:6c:df:50:b6:6c:5a:7d: 5a:86:03:72:5a:8d:60:b3:42:b1:72:e3:6a:89:32:ae:4b:4c: 39:cf:e1:3e:bb:2e:dc:65:b0:0f:65:63:d5:56:ef:da:7c:27: 75:f3:e3:bf:67:8e:14:34:90:1b:44:31:a6:5b:09:d1:30:3c: b7:5e:76:eb:e3:73:f3:65:51:8a:78:43:18:3a:30:66:a1:0f: 12:a5:78:aa:fd:5c:d2:f7:8d:fc:9a:64:c6:2e:d1:60:31:0a: a0:44:10:e0:b9:80:92:ea:fe:72:68:4d:39:3d:c2:56:e4:29: f1:16:3f:47:2e:ae:c0:16:38:40:9c:d2:0e:0a:c4:e8:61:ee: f7:b7:b2:ed:ed:94:a5:6c:7e:72:29:4f:d5:d5:d8:15:60:75: fb:7b:2b:ea:f7:07:79:2f:ca:c7:5a:8c:c7:95:59:01:77:39: b7:0a:56:4e:0d:c4:3f:46:7c:48:04:d9:7b:58:27:e0:ca:c3: 45:cd:49:e9:74:c9:cc:03:3f:01:9a:30:cd:21:5f:01:47:ba: 52:17:d5:7e:4a:3c:af:9e:4d:ea:c2:76:72:7b:00:7a:75:51: 56:f1:c1:bd:f0:a7:fb:d5:f1:35:db:2c:93:4f:b3:16:39:94: 5b:a7:80:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUxMTAzMDMxNzI3WhcNMjUxMTEwMDMxNzI3WjAYMRYwFAYD VQQDEw02OTA4MWVjOC0wZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoli6BSrRBN7dfktGoDIc/1JJ3Ng2XNChQSVM581pqpXUjYJcepXd6yFryFNc zIA6w9hUaxi6po5E439FFvhHilSyxke9XrLo5xFXMd4ZxrwiJQaZTL9pMNn1zG3Q dbOMkfa0NZrg40AZWR15yKbus9QvvPXpomcLMzc2iiwSZx1iny6JE7zN4+GLV3Vl 7p3qL0hKe+Sblu/dCFNSLxcPk19noHMWdtp6SXeU5WPU5W1b/tXu7DhBtsl8y/ak 3+UYfXslTqPYqp8XvjFPqBf8A2CkEPDKBbEAmsLwHxAzOlXLH/fBHD7Qo/upf2Tx UnDVfnuF6RdsguSHUFCCyEMljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ/uVpN 6OKanIyoPDtAqnbsaac0MB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk9XOEA6yeNGpvI2zfULZsWn1ahgNyWo1gs0KxcuNqiTKuS0w5z+E+ uy7cZbAPZWPVVu/afCd18+O/Z44UNJAbRDGmWwnRMDy3Xnbr43PzZVGKeEMYOjBm oQ8SpXiq/VzS9438mmTGLtFgMQqgRBDguYCS6v5yaE05PcJW5CnxFj9HLq7AFjhA nNIOCsToYe73t7Lt7ZSlbH5yKU/V1dgVYHX7eyvq9wd5L8rHWozHlVkBdzm3ClZO DcQ/RnxIBNl7WCfgysNFzUnpdMnMAz8BmjDNIV8BR7pSF9V+Sjyvnk3qwnZyewB6 dVFW8cG98Kf71fE12yyTT7MWOZRbp4Be -----END CERTIFICATE-----Generated at Tue Nov 4 08:33:11 2025 by rpki-client