$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: klRbGVxlzHZSN+17sgk9pQORohjTpFmRES/cZchOZCs= Subject key identifier: C0:2A:98:FE:5A:91:A9:26:66:6D:B8:51:C6:41:A3:9C:1D:CA:4A:DE Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 02C1 Signing time: Mon 03 Nov 2025 01:22:29 +0000 Manifest this update: Mon 03 Nov 2025 01:22:29 +0000 Manifest next update: Mon 10 Nov 2025 01:22:29 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: GK/QJIViDk+oMDJF+I797j29Ys0V4BDQvB2GNHg61ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Nov 3 01:22:29 2025 GMT Not After : Nov 10 01:22:29 2025 GMT Subject: CN=690803d5-a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:c0:4b:21:f1:f1:ac:66:c5:f1:d7:8f:a1: a4:39:46:e8:68:e0:12:9b:2c:33:25:2d:58:52:e9: c7:43:02:10:f2:e4:ff:ce:3f:74:1e:09:34:5d:5f: 3e:52:84:14:ff:ef:e3:f2:3c:3c:36:7e:b9:23:10: 4c:2d:89:cb:93:ce:20:e7:e8:6f:04:0f:24:19:06: 8d:d3:0e:7e:46:af:ab:7c:c3:10:c4:7a:8f:44:b9: 48:c2:06:7e:f5:65:2e:5f:4f:38:d2:5c:44:7d:45: 38:73:b9:bc:1b:bd:15:54:bb:75:52:cb:55:66:9b: 1e:57:62:bf:58:a4:f2:ea:c6:8f:a5:2d:52:e4:cd: bc:9a:ca:52:5f:41:ae:c5:32:91:7c:bc:a3:02:3f: 0d:3c:b6:57:a7:bd:ac:6d:85:13:b4:6c:ff:f3:8d: c4:ec:a1:f8:05:dd:79:9a:a8:5d:63:8e:3a:c7:fc: 75:eb:bb:7f:88:bc:77:9a:60:9c:6e:c1:4b:54:2d: c0:6e:c4:5d:10:29:3f:74:29:44:a8:1f:7d:6f:4b: 95:3d:48:65:18:0e:57:33:00:55:1d:8e:61:1f:20: 43:6c:37:6d:6a:17:41:a2:38:f9:92:e9:08:92:9d: c4:a8:31:7a:bc:fe:b1:3a:53:43:18:84:e8:ec:1c: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2A:98:FE:5A:91:A9:26:66:6D:B8:51:C6:41:A3:9C:1D:CA:4A:DE X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:df:40:ea:44:07:0a:62:d9:f8:9b:2c:5c:4e:cd:cd:dc: ab:73:66:dd:62:57:57:f6:68:48:e6:1d:79:d5:4c:9e:73:8b: e3:cd:cb:be:6c:4e:31:f4:83:3e:cf:09:00:e9:c8:e9:aa:8d: 05:00:c2:2e:b8:3e:d0:12:c0:ae:86:91:41:62:70:8d:f3:11: e2:51:c1:21:03:fa:8c:32:78:f8:24:4c:85:6a:3f:c4:6e:3a: 96:ba:1c:51:62:18:12:c5:9c:d9:6f:ba:40:d4:03:ba:c6:76: f4:d5:2c:24:b2:6e:bf:50:01:85:d5:1a:4b:4f:31:a4:8a:e6: 34:42:3d:58:57:ca:bd:5a:2b:22:eb:51:62:a7:ee:09:ca:d2: 96:ec:aa:20:a5:4c:86:7d:e3:ad:02:b6:01:b9:16:6a:0f:b4: 5d:db:7c:b2:85:2e:42:25:43:88:4a:49:ea:53:6d:b4:8c:25: ad:d2:13:dc:d3:cf:da:63:de:fc:c7:19:be:4b:f4:ca:bf:ec: f0:44:62:ff:a0:ab:25:32:47:d3:c3:05:39:e3:ec:51:71:ac: 08:61:b5:ec:1c:b5:50:e3:d7:b1:d3:a2:f2:12:2b:76:3e:53: c1:1b:56:b5:3c:68:c2:82:05:94:81:80:f6:2e:11:ba:43:b8: ba:b6:a3:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUxMTAzMDEyMjI5WhcNMjUxMTEwMDEyMjI5WjAYMRYwFAYD VQQDEw02OTA4MDNkNS1hNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCzASyHx8axmxfHXj6GkOUboaOASmywzJS1YUunHQwIQ8uT/zj90Hgk0XV8+ UoQU/+/j8jw8Nn65IxBMLYnLk84g5+hvBA8kGQaN0w5+Rq+rfMMQxHqPRLlIwgZ+ 9WUuX0840lxEfUU4c7m8G70VVLt1UstVZpseV2K/WKTy6saPpS1S5M28mspSX0Gu xTKRfLyjAj8NPLZXp72sbYUTtGz/843E7KH4Bd15mqhdY446x/x167t/iLx3mmCc bsFLVC3AbsRdECk/dClEqB99b0uVPUhlGA5XMwBVHY5hHyBDbDdtahdBojj5kukI kp3EqDF6vP6xOlNDGITo7BwXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAqmP5a kakmZm24UcZBo5wdykreMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHwt9A6kQHCmLZ+JssXE7Nzdyrc2bdYldX9mhI5h151Uyec4vjzcu+ bE4x9IM+zwkA6cjpqo0FAMIuuD7QEsCuhpFBYnCN8xHiUcEhA/qMMnj4JEyFaj/E bjqWuhxRYhgSxZzZb7pA1AO6xnb01Swksm6/UAGF1RpLTzGkiuY0Qj1YV8q9Wisi 61Fip+4JytKW7KogpUyGfeOtArYBuRZqD7Rd23yyhS5CJUOISknqU220jCWt0hPc 08/aY978xxm+S/TKv+zwRGL/oKslMkfTwwU54+xRcawIYbXsHLVQ49ex06LyEit2 PlPBG1a1PGjCggWUgYD2LhG6Q7i6tqM7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:24 2025 by rpki-client