$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json) Hash identifier: dX4s/faz+FZuHyS05d6T6kQ9BnEvs48Rxq+IoKDN+7w= Subject key identifier: 10:94:B4:18:53:6B:51:C6:D6:E9:C2:AA:9A:D0:71:3C:D7:A6:7B:2C Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Certificate serial: 1DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft Manifest number: 1DA2 Signing time: Sun 02 Nov 2025 16:07:50 +0000 Manifest this update: Sun 02 Nov 2025 16:07:49 +0000 Manifest next update: Sun 09 Nov 2025 16:07:49 +0000 Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: vfe3kghuY3dBpkzAiFLFpwInjHrldT+VQNmyqKCEavg=) 2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: djmV6ni7hy6C8m5F1gtlxw3KFQjLB6LT9Z3a9xMILMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7597 (0x1dad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Validity Not Before: Nov 2 16:07:49 2025 GMT Not After : Nov 9 16:07:49 2025 GMT Subject: CN=690781d5-b716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:3f:d6:58:45:55:d7:01:86:54:08:a2:fb: 33:17:a9:9d:d0:d3:e0:05:7d:b7:4f:69:80:e0:8b: b3:86:49:92:7f:00:c8:ec:16:eb:bd:d0:10:79:fe: 75:47:07:20:f7:9a:15:6a:d3:c4:29:ec:f1:64:b1: 89:7c:11:04:31:97:a9:3b:16:50:fa:35:b1:71:d9: 77:90:09:29:05:2f:6d:34:df:30:6d:20:4f:9a:72: 1e:0e:07:a7:9e:de:48:2e:2c:97:93:b0:de:f2:85: 2a:9f:b2:31:4b:a0:52:4a:0f:e9:38:9c:0d:72:94: 74:88:40:93:62:2b:22:11:a9:eb:fb:38:12:14:10: 26:de:e9:08:1d:f6:0f:2c:9d:1b:18:05:42:41:88: e7:f7:ee:4d:0b:75:3a:80:3b:ba:bf:4e:60:9a:21: 3a:cb:3f:67:a1:b6:e7:57:c1:ec:68:93:80:03:f2: a5:23:83:31:15:1e:cc:39:0d:8c:94:d7:ae:20:74: a0:6d:94:76:ca:6e:19:22:a3:4b:04:97:7b:26:cf: 0a:48:19:67:f3:54:41:15:1d:40:b7:53:b0:5d:a1: 44:f5:66:29:df:db:1d:c2:63:fb:c9:bf:9b:c3:34: a2:19:99:c3:0c:2e:86:ed:da:7d:2e:a5:2e:0d:d1: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:94:B4:18:53:6B:51:C6:D6:E9:C2:AA:9A:D0:71:3C:D7:A6:7B:2C X509v3 Authority Key Identifier: keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:30:be:8d:78:83:61:ea:b1:2a:76:28:da:ea:0f:24:23:36: 80:b5:6f:d5:2d:e4:c0:92:4e:46:82:b0:31:de:f8:27:b9:3e: e4:b3:17:b6:dd:45:e5:81:92:f7:8c:23:7f:b7:81:c5:50:f0: 16:03:eb:4c:bf:fc:23:8a:75:85:4d:52:55:6e:3a:dc:18:0c: 81:cc:cf:80:c8:d9:41:1e:5e:e4:08:54:c3:90:d8:35:71:06: bd:b1:cf:7d:5b:3e:df:e3:c5:05:bc:87:8c:20:99:ee:50:ef: b2:39:e3:46:0b:d5:d2:2e:bc:e7:98:4c:f8:14:ec:3a:58:39: 94:ba:f6:f1:96:99:52:f8:36:37:85:e6:b7:47:81:61:9e:01: c7:44:ec:c7:21:00:5b:79:71:94:7f:a9:ea:b3:39:58:a6:17: 5d:50:09:72:04:c1:b9:82:f8:2d:37:42:9f:18:10:91:3d:2f: a5:fa:e8:35:57:ac:06:9f:0e:63:55:1f:e5:3f:2f:a9:b7:64: 6d:71:c3:33:0f:99:1d:f2:1e:0e:57:27:1b:08:b0:7b:64:94: d7:15:aa:fb:dc:ec:b5:81:68:a3:54:04:c8:45:cb:6f:5e:1e: 5f:df:67:ea:78:c1:eb:08:34:fa:65:c2:1f:1d:29:7f:89:18: 80:29:68:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlENEExMTAvBgNVBAUTKDY0NkIxQzQxQTgxRkY3RTU4MkI1RUNEQzFDRUY1NENF NjExNTI1NjMwHhcNMjUxMTAyMTYwNzQ5WhcNMjUxMTA5MTYwNzQ5WjAYMRYwFAYD VQQDEw02OTA3ODFkNS1iNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nk/1lhFVdcBhlQIovszF6md0NPgBX23T2mA4IuzhkmSfwDI7BbrvdAQef51 Rwcg95oVatPEKezxZLGJfBEEMZepOxZQ+jWxcdl3kAkpBS9tNN8wbSBPmnIeDgen nt5ILiyXk7De8oUqn7IxS6BSSg/pOJwNcpR0iECTYisiEanr+zgSFBAm3ukIHfYP LJ0bGAVCQYjn9+5NC3U6gDu6v05gmiE6yz9nobbnV8HsaJOAA/KlI4MxFR7MOQ2M lNeuIHSgbZR2ym4ZIqNLBJd7Js8KSBln81RBFR1At1OwXaFE9WYp39sdwmP7yb+b wzSiGZnDDC6G7dp9LqUuDdG2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCUtBhT a1HG1unCqprQcTzXpnssMB8GA1UdIwQYMBaAFGRrHEGoH/flgrXs3BzvVM5hFSVj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUQ0QS8yNDgxMDNBNEFD OTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjktV0N0ZXpjSE85VXptRVZK V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pHc2NRYWdmOS1XQ3RlemNITzlVem1FVkpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUQ0QS8yNDgxMDNBNEFDOTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjkt V0N0ZXpjSE85VXptRVZKV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCML6NeINh6rEqdija6g8kIzaAtW/VLeTAkk5GgrAx3vgnuT7ksxe2 3UXlgZL3jCN/t4HFUPAWA+tMv/wjinWFTVJVbjrcGAyBzM+AyNlBHl7kCFTDkNg1 cQa9sc99Wz7f48UFvIeMIJnuUO+yOeNGC9XSLrznmEz4FOw6WDmUuvbxlplS+DY3 hea3R4FhngHHROzHIQBbeXGUf6nqszlYphddUAlyBMG5gvgtN0KfGBCRPS+l+ug1 V6wGnw5jVR/lPy+pt2RtccMzD5kd8h4OVycbCLB7ZJTXFar73Oy1gWijVATIRctv Xh5f32fqeMHrCDT6ZcIfHSl/iRiAKWiY -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:09 2025 by rpki-client