$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: SWwfo1DPfRQWaTfNGlyVQgIsfRN542S7+9A2I7klEuM= Subject key identifier: 0C:A5:AC:28:90:F0:08:9F:DB:02:AC:74:D9:94:95:C3:AC:A1:40:D3 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 86 Signing time: Mon 03 Nov 2025 06:39:27 +0000 Manifest this update: Mon 03 Nov 2025 06:39:26 +0000 Manifest next update: Mon 10 Nov 2025 06:39:26 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: kDx83Q/o708/ZbbR1NpUDWS/FzYoQfgwVfrMB+ZT/Mw=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Nov 3 06:39:26 2025 GMT Not After : Nov 10 06:39:26 2025 GMT Subject: CN=69084e1f-f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:c7:b1:a3:f3:5d:b7:e5:56:42:9c:d9:2e: fe:1e:af:47:86:42:48:ca:1c:5c:73:f7:3b:49:1c: 96:ca:ae:d6:62:9a:69:27:f0:11:f1:42:17:e4:73: 28:3e:60:f4:d7:07:1a:a1:14:29:36:c4:fd:d4:f6: 34:5d:28:80:12:e9:52:07:15:70:51:c7:95:12:50: ec:2d:98:0a:1a:ed:eb:13:40:24:4a:80:53:8b:4c: 37:30:f7:e8:f9:27:9d:7f:de:ad:19:4f:50:fa:25: 3d:29:71:53:98:ee:42:3c:05:62:fe:52:9d:a9:d5: 81:df:42:7b:2e:2b:7f:ef:04:05:ee:31:8c:75:29: 21:4f:5d:29:ef:03:a7:07:c4:dc:d3:ba:50:9b:a1: 7a:a1:c9:a3:d8:f5:e5:54:a6:29:aa:9d:66:86:10: c4:24:01:05:23:ed:d7:5d:f6:b5:61:9b:88:1e:aa: b7:23:6d:f7:1f:aa:8c:fe:09:fe:08:e5:ce:54:92: e5:ee:0c:51:89:59:30:05:ee:8e:cc:3b:06:d2:66: 20:11:d8:0c:d0:e9:00:52:28:fd:9a:44:aa:57:cb: 00:93:3e:8c:ca:ec:57:3e:fc:5a:00:38:d2:f0:15: 91:c4:ab:f7:12:fb:bd:12:58:12:33:ca:74:f1:aa: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A5:AC:28:90:F0:08:9F:DB:02:AC:74:D9:94:95:C3:AC:A1:40:D3 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:02:c5:7c:a5:d7:05:79:ed:54:16:9e:2b:3c:a9:96:b4:22: 5b:eb:e5:0a:30:b4:8a:8c:87:e3:7d:50:34:77:5b:ac:56:b5: 98:a6:10:c7:5a:c1:57:d9:6d:59:44:9a:b5:10:94:5b:ad:a5: 68:1e:c3:8e:6c:f3:6b:46:51:b5:f5:8a:06:6c:3e:b1:87:19: be:7e:b4:92:42:d3:f5:26:7d:d4:35:40:81:03:cc:2a:c3:47: 9c:05:5d:12:a1:0d:28:91:64:a8:f9:8a:21:c7:32:e0:a2:e2: 88:fc:b6:f5:31:01:30:be:01:8f:2b:13:f9:d2:2b:b9:38:6a: 5d:80:2c:67:3f:ca:0b:d2:51:3b:c1:7f:e8:14:2d:16:1e:90: d0:85:bd:58:13:bb:cf:c3:1b:1a:fa:8f:1b:71:64:8e:7e:65: f0:33:95:57:c6:27:68:65:08:81:6b:89:5b:f0:2b:6a:d6:31: 16:bf:b5:81:81:62:28:f4:dc:ff:c2:9b:b0:ba:c5:ea:6f:b5: 9f:27:41:29:87:77:1a:89:66:aa:56:cf:40:d2:80:f1:02:98: ca:1c:aa:da:da:fc:cf:32:2f:fe:39:de:ad:62:30:95:58:bd: 61:ef:3f:22:6b:01:91:d0:b2:98:e5:8e:a2:16:c5:0a:fa:58: 3a:aa:c4:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4 RkU3MDBCNjMwHhcNMjUxMTAzMDYzOTI2WhcNMjUxMTEwMDYzOTI2WjAYMRYwFAYD VQQDEw02OTA4NGUxZi1mMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5bHsaPzXbflVkKc2S7+Hq9HhkJIyhxcc/c7SRyWyq7WYpppJ/AR8UIX5HMo PmD01wcaoRQpNsT91PY0XSiAEulSBxVwUceVElDsLZgKGu3rE0AkSoBTi0w3MPfo +Sedf96tGU9Q+iU9KXFTmO5CPAVi/lKdqdWB30J7Lit/7wQF7jGMdSkhT10p7wOn B8Tc07pQm6F6ocmj2PXlVKYpqp1mhhDEJAEFI+3XXfa1YZuIHqq3I233H6qM/gn+ COXOVJLl7gxRiVkwBe6OzDsG0mYgEdgM0OkAUij9mkSqV8sAkz6MyuxXPvxaADjS 8BWRxKv3Evu9ElgSM8p08aodPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAylrCiQ 8Aif2wKsdNmUlcOsoUDTMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w VkdlbEpzT0NYc09QNXdDMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtAsV8pdcFee1UFp4rPKmWtCJb6+UKMLSKjIfjfVA0d1usVrWYphDH WsFX2W1ZRJq1EJRbraVoHsOObPNrRlG19YoGbD6xhxm+frSSQtP1Jn3UNUCBA8wq w0ecBV0SoQ0okWSo+YohxzLgouKI/Lb1MQEwvgGPKxP50iu5OGpdgCxnP8oL0lE7 wX/oFC0WHpDQhb1YE7vPwxsa+o8bcWSOfmXwM5VXxidoZQiBa4lb8Ctq1jEWv7WB gWIo9Nz/wpuwusXqb7WfJ0Eph3caiWaqVs9A0oDxApjKHKra2vzPMi/+Od6tYjCV WL1h7z8iawGR0LKY5Y6iFsUK+lg6qsSt -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:01 2025 by rpki-client