$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: 6FL4UL0fF/0LWFihE8Bky4Cz85FxOc4a/pMh+9c3sro= Subject key identifier: 89:CF:D6:03:3D:AF:C6:04:31:3D:75:75:13:83:D2:E2:23:FB:15:67 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: 0100 Signing time: Mon 03 Nov 2025 05:03:08 +0000 Manifest this update: Mon 03 Nov 2025 05:03:07 +0000 Manifest next update: Mon 10 Nov 2025 05:03:07 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: Zaqn0ydz8denjLPSjzmL9KpmAu6bb5sKiDxa9XIk9do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Nov 3 05:03:07 2025 GMT Not After : Nov 10 05:03:07 2025 GMT Subject: CN=6908378c-455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:59:1c:68:07:eb:f6:05:ea:80:26:6f:39:c2: 09:fd:73:5e:da:fc:21:6d:5f:e2:d5:08:64:51:75: 34:f9:fb:75:b6:86:0c:65:e6:ce:c4:92:09:4f:5e: 4f:30:a7:57:ce:ed:9b:3d:db:7a:30:0c:96:56:43: 9e:64:30:26:e3:0b:45:a5:d8:3e:0e:28:9b:cf:28: 4f:bf:c4:04:f8:d6:bb:a0:0b:48:62:ed:8d:43:81: c2:5c:47:49:37:83:3a:61:b6:b0:af:73:83:d6:54: db:ae:04:c1:67:f4:8f:9e:2e:94:d1:fe:51:20:b7: ed:55:b5:fa:22:5e:5e:c8:2e:7a:54:4f:07:3d:4e: 91:4b:0d:23:29:9c:a8:ba:a0:f7:29:82:c4:0f:0d: 4b:f7:29:b5:d4:59:57:19:25:6c:c8:de:bd:c4:1c: 8f:e1:59:62:49:f5:06:68:4d:85:d4:ea:86:5d:d6: b7:4c:41:3e:b9:72:5b:7f:f8:20:01:9e:d6:65:96: 5b:e5:a0:5c:c7:31:57:30:05:93:d7:02:43:78:af: 64:c7:8e:de:6c:da:6a:2e:94:6c:85:50:2c:dc:ea: 39:f0:63:3b:b9:c6:d2:7f:bb:85:85:c7:2c:5f:37: 1a:e2:8c:d1:54:78:ac:a2:79:40:e2:cf:03:78:ac: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:D6:03:3D:AF:C6:04:31:3D:75:75:13:83:D2:E2:23:FB:15:67 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f2:51:f2:ca:cd:01:65:26:9e:c2:06:57:f6:01:59:42:13: f2:38:ea:7c:98:83:fb:05:08:f8:b9:cc:c9:ca:2c:74:c7:b4: 2b:13:16:ed:2e:2e:e5:72:cd:58:a3:5f:7f:68:ee:91:22:bd: 57:40:48:5f:71:06:bf:8e:1a:c8:bf:4c:86:92:a0:bf:c4:cf: b2:2e:e3:c2:da:40:e8:1b:3c:f4:a7:18:51:05:2d:40:68:fb: 4e:40:1e:6a:cc:b3:e7:cf:f4:b9:02:d8:fd:ae:3a:9d:49:a4: 29:44:b7:83:a3:99:d7:7a:0b:da:b9:88:e6:40:f4:d9:f8:b8: 0d:b6:16:8e:64:9f:81:29:68:8e:12:93:f4:b3:c2:dc:ce:66: 2c:d6:4f:f9:3b:4f:62:83:87:a5:09:1e:f6:e0:42:33:ed:15: 47:59:9b:6d:e2:4e:78:98:e1:1a:9b:85:f9:4a:44:14:2d:d5: 1b:69:d4:25:b7:75:98:23:df:c2:95:80:a2:ef:b5:29:8b:1f: 83:41:e0:d5:f6:55:c4:11:95:2b:15:14:f8:ec:79:38:56:3b: 88:0d:13:83:65:0a:4a:5f:e2:83:35:80:e8:be:93:53:ee:67: 91:1d:20:04:a4:d3:1b:24:85:4a:26:df:bd:09:85:3f:ca:7c: 05:64:13:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUxMTAzMDUwMzA3WhcNMjUxMTEwMDUwMzA3WjAYMRYwFAYD VQQDEw02OTA4Mzc4Yy00NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lkcaAfr9gXqgCZvOcIJ/XNe2vwhbV/i1QhkUXU0+ft1toYMZebOxJIJT15P MKdXzu2bPdt6MAyWVkOeZDAm4wtFpdg+DiibzyhPv8QE+Na7oAtIYu2NQ4HCXEdJ N4M6Ybawr3OD1lTbrgTBZ/SPni6U0f5RILftVbX6Il5eyC56VE8HPU6RSw0jKZyo uqD3KYLEDw1L9ym11FlXGSVsyN69xByP4VliSfUGaE2F1OqGXda3TEE+uXJbf/gg AZ7WZZZb5aBcxzFXMAWT1wJDeK9kx47ebNpqLpRshVAs3Oo58GM7ucbSf7uFhccs Xzca4ozRVHisonlA4s8DeKxx9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInP1gM9 r8YEMT11dROD0uIj+xVnMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl8lHyys0BZSaewgZX9gFZQhPyOOp8mIP7BQj4uczJyix0x7QrExbt Li7lcs1Yo19/aO6RIr1XQEhfcQa/jhrIv0yGkqC/xM+yLuPC2kDoGzz0pxhRBS1A aPtOQB5qzLPnz/S5Atj9rjqdSaQpRLeDo5nXegvauYjmQPTZ+LgNthaOZJ+BKWiO EpP0s8LczmYs1k/5O09ig4elCR724EIz7RVHWZtt4k54mOEam4X5SkQULdUbadQl t3WYI9/ClYCi77Upix+DQeDV9lXEEZUrFRT47Hk4VjuIDRODZQpKX+KDNYDovpNT 7meRHSAEpNMbJIVKJt+9CYU/ynwFZBMl -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:46 2025 by rpki-client