$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json) Hash identifier: LorcjR+gcMYzJuxliG/ytA4HtrX7GmCzaywD0KjmSKY= Subject key identifier: 18:23:8D:C6:DE:F4:52:70:86:A1:74:82:3C:26:B0:6D:AE:8F:0D:BF Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft Manifest number: 06 Signing time: Mon 03 Nov 2025 08:03:46 +0000 Manifest this update: Mon 03 Nov 2025 08:03:46 +0000 Manifest next update: Mon 10 Nov 2025 08:03:46 +0000 Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: LeEkHRx2dgN/P4EN1Jvl/JRiRJxKitFo5K/xAiCVG8k=) 2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: SAspQcE3UhYSAhZA4XCGUAey+9nDMAa3DYVzr1PGnog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F Validity Not Before: Nov 3 08:03:46 2025 GMT Not After : Nov 10 08:03:46 2025 GMT Subject: CN=690861e2-6bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:f1:4c:96:3f:3b:7a:1d:a9:e7:58:55:4d: b0:3e:75:c8:4b:d3:ce:0b:30:40:dc:c0:2f:66:a4: 9a:96:dc:b4:78:39:81:fa:e3:17:ce:05:02:b0:22: 13:7d:af:1c:aa:c7:18:38:84:bc:65:25:6d:0a:7b: 84:01:ef:79:eb:2a:13:e2:f5:6c:19:38:ce:0a:c5: cc:25:3c:09:0f:1f:d5:ea:3e:c5:89:3c:5b:12:c6: d0:39:e2:85:0d:c6:22:77:a1:1a:4a:96:e0:45:75: 04:06:19:4c:37:0e:c7:6a:75:25:01:3e:54:b8:42: cb:70:ae:a9:a9:7e:24:58:5a:fc:0f:71:86:ed:b0: 0a:7e:e6:64:37:de:e6:c5:4e:38:6c:03:64:ef:07: 0c:52:a5:1f:92:d5:cf:6a:87:42:6a:43:e4:e1:9d: c2:0f:b1:1c:70:10:1c:17:33:57:00:97:26:25:1a: 5d:9e:44:53:79:58:cd:43:ab:28:5c:f3:b2:af:dc: 8f:27:c3:86:8e:9d:a5:aa:38:a2:94:05:30:8a:cd: 65:5a:be:92:2c:cf:87:e1:10:94:1e:dc:c5:f8:1f: 89:fd:1d:99:6a:30:dc:41:90:fd:0a:4e:e9:e0:06: 86:96:f4:10:48:3d:e6:63:82:92:f6:a2:85:e0:d9: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:23:8D:C6:DE:F4:52:70:86:A1:74:82:3C:26:B0:6D:AE:8F:0D:BF X509v3 Authority Key Identifier: keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:51:c8:f5:ee:fb:29:63:7b:2f:b9:54:fe:fc:f2:f3:0c:a0: 10:e1:28:58:e3:07:57:b7:24:6c:cc:7b:f0:21:63:5f:19:75: 45:a9:d0:8b:da:27:19:a5:0d:76:e0:24:20:ec:b3:da:4f:46: c2:10:5d:66:5e:b3:45:27:8c:0a:39:da:29:40:50:8a:f8:68: b3:18:ba:af:04:e1:96:0f:db:37:6c:9a:b4:85:f7:57:33:55: 4e:9f:18:3c:54:f1:c6:36:69:10:a3:b1:0b:59:e6:37:d8:6c: ab:5c:8f:2e:2a:70:89:71:d6:7c:a9:66:fb:1e:c3:4c:c9:a6: c2:aa:2c:7f:ca:a5:66:be:17:af:5e:08:69:7d:e2:ca:8f:e7: 2b:42:32:81:fe:fb:87:22:27:d3:17:c3:6e:b3:47:8a:99:45: 52:65:c1:37:cb:a2:99:67:1c:ed:cd:2d:19:b4:75:cd:27:ec: f9:01:2f:41:e9:25:3d:7b:94:81:8f:23:99:f0:92:ac:39:d0: 66:11:be:f3:ef:da:00:bc:0f:9f:e3:a9:da:af:59:be:b7:24: 55:9e:d3:16:7e:83:a7:b9:ec:d1:b6:e7:fb:2e:8f:e6:11:3e: 74:fd:2a:51:cc:9c:0b:51:4b:6c:e1:49:ed:2d:65:cc:f3:7b: 51:80:e3:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE5NDExMC8GA1UEBRMoNjZDMkRCMEQ4QjY5MEM5NTM2QjA2QUI3Q0VDNjVDMDhE NTc2M0Y0RjAeFw0yNTExMDMwODAzNDZaFw0yNTExMTAwODAzNDZaMBgxFjAUBgNV BAMTDTY5MDg2MWUyLTZiYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+DPFMlj87eh2p51hVTbA+dchL084LMEDcwC9mpJqW3LR4OYH64xfOBQKwIhN9 rxyqxxg4hLxlJW0Ke4QB73nrKhPi9WwZOM4KxcwlPAkPH9XqPsWJPFsSxtA54oUN xiJ3oRpKluBFdQQGGUw3DsdqdSUBPlS4QstwrqmpfiRYWvwPcYbtsAp+5mQ33ubF TjhsA2TvBwxSpR+S1c9qh0JqQ+ThncIPsRxwEBwXM1cAlyYlGl2eRFN5WM1Dqyhc 87Kv3I8nw4aOnaWqOKKUBTCKzWVavpIsz4fhEJQe3MX4H4n9HZlqMNxBkP0KTung BoaW9BBIPeZjgpL2ooXg2bFvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGCONxt70 UnCGoXSCPCawba6PDb8wHwYDVR0jBBgwFoAUZsLbDYtpDJU2sGq3zsZcCNV2P08w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTk0LzI5REUxMkNBQjND QTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpVMnNHcTN6c1pjQ05WMlAw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNMYkRZdHBESlUyc0dxM3pzWmNDTlYyUDA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTk0LzI5REUxMkNBQjNDQTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpV MnNHcTN6c1pjQ05WMlAwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZRyPXu+yljey+5VP788vMMoBDhKFjjB1e3JGzMe/AhY18ZdUWp0Iva JxmlDXbgJCDss9pPRsIQXWZes0UnjAo52ilAUIr4aLMYuq8E4ZYP2zdsmrSF91cz VU6fGDxU8cY2aRCjsQtZ5jfYbKtcjy4qcIlx1nypZvsew0zJpsKqLH/KpWa+F69e CGl94sqP5ytCMoH++4ciJ9MXw26zR4qZRVJlwTfLoplnHO3NLRm0dc0n7PkBL0Hp JT17lIGPI5nwkqw50GYRvvPv2gC8D5/jqdqvWb63JFWe0xZ+g6e57NG25/suj+YR PnT9KlHMnAtRS2zhSe0tZczze1GA44Q= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:44 2025 by rpki-client