$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: +gEO+P2HPmcniwQaU13V+I+QJsmMLpE/TuzlB0ZuzzY= Subject key identifier: BF:A2:F2:B5:2F:84:F7:F0:22:1D:31:A8:69:AC:00:68:19:26:54:18 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 9F Signing time: Wed 05 Nov 2025 06:29:26 +0000 Manifest this update: Wed 05 Nov 2025 06:29:26 +0000 Manifest next update: Wed 12 Nov 2025 06:29:26 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: KTbqY0Lw/H6TF9UsFXCGcKm3o8E2upLZ97Ivsh4jmyY=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Nov 5 06:29:26 2025 GMT Not After : Nov 12 06:29:26 2025 GMT Subject: CN=690aeec6-ca64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:cb:3b:4a:64:c9:45:56:9a:fd:9c:58:9c: 9b:a4:d9:e6:b7:80:48:2a:a0:c0:5e:98:cd:39:0f: a9:b3:17:bd:9b:74:7a:50:35:bc:1a:1d:49:9c:68: d3:ce:b8:16:6c:a8:93:b9:dd:ad:2a:39:96:56:ce: 98:6b:16:ab:97:b3:23:87:4f:59:20:27:34:bd:65: 18:87:af:c5:39:02:80:d2:3f:47:69:ef:ac:44:92: ef:62:0c:e9:6c:db:fa:72:c3:69:02:56:45:c7:20: 50:c4:c9:53:fa:6d:af:88:ae:d7:4c:7d:ce:b4:e6: 1c:f0:36:49:a6:c7:0a:bc:ed:52:cf:3c:d2:cd:18: 50:f3:0f:f1:5c:e0:b6:31:bd:3f:15:5e:a1:69:f6: 40:ff:46:2b:b5:39:53:3b:9c:ad:40:4b:c8:fb:5a: 8a:16:36:1f:41:f1:76:ab:7e:d0:17:ad:40:86:b0: f9:ba:1e:af:32:df:65:28:7f:88:18:3f:25:e3:cd: 8b:ee:e1:e0:18:b0:56:05:e0:7a:db:24:50:2c:6b: 7b:07:4f:27:fb:24:ab:94:65:a4:f5:e6:4f:20:bd: 8b:73:a6:0e:84:3c:70:d1:96:74:5a:47:5c:db:d7: 30:ed:5f:8f:19:0f:a5:e6:e7:02:19:b5:7f:05:5e: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A2:F2:B5:2F:84:F7:F0:22:1D:31:A8:69:AC:00:68:19:26:54:18 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:76:cc:ed:64:aa:1d:41:ce:18:d1:d9:b0:fd:3c:ae:bd:08: 47:9a:cf:71:66:75:4b:93:5b:f2:2c:6b:50:68:ed:e2:19:bc: 92:34:b0:ca:01:ab:c5:17:2c:15:7c:69:b3:7e:ed:d7:32:cf: e0:f3:2f:2f:b7:fd:36:6e:5c:29:37:a9:f0:2a:e2:e6:47:0c: 0a:01:fd:9f:eb:f1:e5:87:c2:d2:bf:08:83:54:90:d5:87:5d: 94:0a:5c:70:bb:d4:9a:c0:12:62:38:fb:36:9e:14:b4:43:12: 5c:a6:b0:62:74:f3:c9:7e:c2:20:64:00:4c:79:fa:9c:45:22: d0:27:86:b4:0d:50:7e:06:2d:57:5f:a2:8c:c3:44:47:25:65: c5:e7:05:e2:2d:90:90:c9:60:ca:39:16:67:27:16:3a:67:06: fa:e0:47:55:53:95:0a:58:4a:19:c9:bd:2f:c0:22:bc:6b:66: c0:86:f8:70:28:a1:64:14:ad:a7:0d:a1:2c:73:02:5f:59:74: 49:2c:6b:23:d7:ca:71:4d:ad:54:09:5b:cf:a9:14:37:39:9a: 98:8d:36:d7:dc:3a:e6:6b:26:cf:04:b3:5a:d4:04:d2:08:65: 10:9f:fe:be:20:1e:7c:25:45:63:3e:1b:be:04:9b:be:dc:2d: 4b:df:3a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDY1QThEMDhCMkVDOEY0MkQ0M0I5QUE3QTQyMzUxNzJC QjdFRDE2NjUwHhcNMjUxMTA1MDYyOTI2WhcNMjUxMTEyMDYyOTI2WjAYMRYwFAYD VQQDEw02OTBhZWVjNi1jYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntjLO0pkyUVWmv2cWJybpNnmt4BIKqDAXpjNOQ+psxe9m3R6UDW8Gh1JnGjT zrgWbKiTud2tKjmWVs6Yaxarl7Mjh09ZICc0vWUYh6/FOQKA0j9Hae+sRJLvYgzp bNv6csNpAlZFxyBQxMlT+m2viK7XTH3OtOYc8DZJpscKvO1SzzzSzRhQ8w/xXOC2 Mb0/FV6hafZA/0YrtTlTO5ytQEvI+1qKFjYfQfF2q37QF61AhrD5uh6vMt9lKH+I GD8l482L7uHgGLBWBeB62yRQLGt7B08n+ySrlGWk9eZPIL2Lc6YOhDxw0ZZ0Wkdc 29cw7V+PGQ+l5ucCGbV/BV7YxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+i8rUv hPfwIh0xqGmsAGgZJlQYMB8GA1UdIwQYMBaAFGWo0IsuyPQtQ7mqekI1Fyu37RZl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82NEJBNEJBOEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlDMUR1YXA2UWpVWEs3ZnRG bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82NEJBNEJBOEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlD MUR1YXA2UWpVWEs3ZnRGbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQdsztZKodQc4Y0dmw/TyuvQhHms9xZnVLk1vyLGtQaO3iGbySNLDK AavFFywVfGmzfu3XMs/g8y8vt/02blwpN6nwKuLmRwwKAf2f6/Hlh8LSvwiDVJDV h12UClxwu9SawBJiOPs2nhS0QxJcprBidPPJfsIgZABMefqcRSLQJ4a0DVB+Bi1X X6KMw0RHJWXF5wXiLZCQyWDKORZnJxY6Zwb64EdVU5UKWEoZyb0vwCK8a2bAhvhw KKFkFK2nDaEscwJfWXRJLGsj18pxTa1UCVvPqRQ3OZqYjTbX3DrmaybPBLNa1ATS CGUQn/6+IB58JUVjPhu+BJu+3C1L3zpa -----END CERTIFICATE-----Generated at Thu Nov 6 01:35:09 2025 by rpki-client