$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: iCKRhGw1jkCoPL+59g9VVfXVt5St/3bfZZQO1IpOxQg= Subject key identifier: F5:6B:EC:71:0B:46:3C:A9:D2:1B:EA:41:F7:58:48:D5:88:3A:95:93 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 0463 Signing time: Sat 25 Oct 2025 03:39:14 +0000 Manifest this update: Sat 25 Oct 2025 03:39:14 +0000 Manifest next update: Sat 01 Nov 2025 03:39:14 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: sOPR0TjLjeJWJoVqeisD9k1cCcT+DJM0SHe56sZS+A0=) 2: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: kp0+gojuuIRTr6eUGBLfQa4oY8u2BrxDelQl3l3Jaqw=) 3: 46E504FC8A3D11F095CFBF20C4F9AE02.roa (hash: jP4FeomWi1qPc7Kj3fPfUBMM7SlzKOq+HZbOrQh4oSU=) 4: 88DCDDDC7CE911F0848CDE7EC4F9AE02.roa (hash: 068XltOifOso6oTe4AsLg0kZTIBf2e1T8A0/XwOlCGY=) 5: 0AC916D89EB111F0A0F4072DC4F9AE02.roa (hash: SAttJrcW9yDLwQeR6ELfn6S0PVgoMa/Mwd4bftwLjMw=) 6: 28C9E030920A11F0B546BD1DC4F9AE02.roa (hash: fj5tehx+kZefIpvOAwBpBUIWfAyDyG9608uECQgmSfs=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: S6QTpMLpdz62ri8GiqM+Xe+wKf8NXI8f+P9lrSdOodA=) 9: 48C53B8C920A11F0A7C81B36C4F9AE02.roa (hash: gRWNeP/7deVcVkkhKFjf0tGcP85FBqRzQBxXJqHov0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 03:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Oct 25 03:39:14 2025 GMT Not After : Nov 1 03:39:14 2025 GMT Subject: CN=68fc4662-beae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:2b:50:a6:51:36:55:4e:fb:3f:d1:ed:e0: 41:df:bd:0c:50:90:3a:2b:b2:cb:fe:91:3c:9f:99: 97:39:ae:0e:45:88:c4:92:24:ba:62:3c:08:91:bc: 0d:e7:c5:e3:b5:ac:5a:7e:83:31:67:49:77:b5:d0: 14:dd:a7:6f:f6:9b:73:65:84:ab:eb:98:c7:1c:d5: a3:30:ff:b2:0e:00:c1:3b:d6:fa:26:52:91:48:4d: e5:00:76:dc:92:73:87:c7:5b:2e:53:88:93:94:90: 7b:4a:60:b9:8d:43:37:93:d9:a3:0d:a7:4a:d9:16: 49:ab:6f:fd:92:65:7c:ab:38:48:93:bc:60:46:f8: d7:b9:a0:9c:ab:36:32:89:42:b5:86:d1:dc:45:3c: 86:38:80:f3:c7:05:d6:46:bb:23:58:23:94:71:ff: ef:1b:56:86:e2:21:93:fa:21:d9:d2:60:f3:a5:c8: 20:e9:f6:87:6a:99:13:ec:f1:87:f9:e6:4b:6f:ac: b4:c9:c4:c9:04:3a:e6:0d:d6:f4:53:b4:6f:76:0c: 00:b3:3d:0d:3e:03:bf:02:2c:71:48:4e:d0:20:74: 92:26:e2:5d:e3:b4:b5:e3:37:86:71:2f:d0:14:c9: 4c:14:85:0f:88:2b:13:9c:b2:04:dc:6f:e8:01:03: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6B:EC:71:0B:46:3C:A9:D2:1B:EA:41:F7:58:48:D5:88:3A:95:93 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:05:ca:97:94:f5:35:0d:6d:11:42:b5:23:5a:a5:59:80:a0: 24:18:43:aa:43:20:fe:01:14:f1:f5:62:e1:7c:9e:5b:be:d7: 3a:35:69:9b:20:57:51:3b:57:7b:ae:1c:3b:78:e6:9a:93:98: 7a:07:8d:9f:da:e6:75:86:45:92:21:0a:0d:d3:03:04:97:4f: 61:72:3d:05:d4:6f:3b:ef:c5:34:20:e4:03:9b:77:76:3c:d7: 47:85:5e:c3:be:e2:c9:ac:eb:48:00:74:db:63:fa:43:6c:0b: 9c:5b:10:20:3b:c8:98:cb:bb:28:fd:32:b1:bf:50:d4:cd:a6: 17:48:4c:d0:ea:0e:81:b4:41:21:0c:7c:4b:f8:b0:e6:0e:30: 22:e7:19:9e:e0:01:6e:95:79:26:1d:5f:61:63:4f:a0:e9:34: 81:21:89:cd:6a:7d:5a:08:1b:f0:8d:8b:d3:08:9a:07:65:bb: aa:18:ad:d6:d0:6a:00:07:4d:35:36:4f:96:61:ed:15:93:c4: d6:c8:db:8a:e2:0e:dc:21:41:f7:1b:13:5d:c0:25:1f:05:11: c5:18:d6:d3:9d:7d:83:9c:6c:48:58:08:15:c9:d8:82:49:57: 88:82:2a:78:8a:16:ea:53:58:3e:fb:29:d8:2c:da:58:55:d2: e8:d8:6d:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUxMDI1MDMzOTE0WhcNMjUxMTAxMDMzOTE0WjAYMRYwFAYD VQQDEw02OGZjNDY2Mi1iZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy30rUKZRNlVO+z/R7eBB370MUJA6K7LL/pE8n5mXOa4ORYjEkiS6YjwIkbwN 58XjtaxafoMxZ0l3tdAU3adv9ptzZYSr65jHHNWjMP+yDgDBO9b6JlKRSE3lAHbc knOHx1suU4iTlJB7SmC5jUM3k9mjDadK2RZJq2/9kmV8qzhIk7xgRvjXuaCcqzYy iUK1htHcRTyGOIDzxwXWRrsjWCOUcf/vG1aG4iGT+iHZ0mDzpcgg6faHapkT7PGH +eZLb6y0ycTJBDrmDdb0U7RvdgwAsz0NPgO/AixxSE7QIHSSJuJd47S14zeGcS/Q FMlMFIUPiCsTnLIE3G/oAQMDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVr7HEL Rjyp0hvqQfdYSNWIOpWTMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRBcqXlPU1DW0RQrUjWqVZgKAkGEOqQyD+ARTx9WLhfJ5bvtc6NWmb IFdRO1d7rhw7eOaak5h6B42f2uZ1hkWSIQoN0wMEl09hcj0F1G8778U0IOQDm3d2 PNdHhV7DvuLJrOtIAHTbY/pDbAucWxAgO8iYy7so/TKxv1DUzaYXSEzQ6g6BtEEh DHxL+LDmDjAi5xme4AFulXkmHV9hY0+g6TSBIYnNan1aCBvwjYvTCJoHZbuqGK3W 0GoAB001Nk+WYe0Vk8TWyNuK4g7cIUH3GxNdwCUfBRHFGNbTnX2DnGxIWAgVydiC SVeIgip4ihbqU1g++ynYLNpYVdLo2G1T -----END CERTIFICATE-----Generated at Sat Oct 25 10:41:57 2025 by rpki-client