$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: 7H39eIbMguXj5tuc489WM2QLZj5JU8DA61YQehb6z9c= Subject key identifier: C8:A0:91:3A:D9:73:9D:A4:D9:4F:4A:2F:5E:44:02:91:B3:0D:A4:73 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 01BA Signing time: Sat 01 Nov 2025 03:34:47 +0000 Manifest this update: Sat 01 Nov 2025 03:34:47 +0000 Manifest next update: Sat 08 Nov 2025 03:34:47 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: /o7fCqEnoL5ZRO5Um1FyMh7xkxamiXv5F3uvpvSQkyU=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Nov 1 03:34:47 2025 GMT Not After : Nov 8 03:34:47 2025 GMT Subject: CN=69057fd7-9849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:68:df:9a:26:e3:67:0f:86:20:c4:73:40: d7:18:e0:7d:32:c7:f8:71:fd:23:83:ab:f3:70:e8: 24:d1:56:bc:f2:de:d4:c1:10:dc:ea:66:e3:08:cd: 3d:bf:ef:aa:ca:54:00:1b:5a:ed:2f:f4:b3:ff:25: f1:cb:ff:de:cc:27:7b:7f:87:ad:da:33:93:35:92: 67:54:0a:d5:f5:ae:c5:ad:88:3a:ca:50:05:62:e5: d6:7a:2f:12:86:85:aa:ed:09:ea:39:78:b5:16:f1: 11:eb:39:15:e2:94:8f:99:3a:94:8f:e8:bb:2b:14: c2:9b:5c:05:f3:ef:de:69:22:9e:89:71:21:c8:7a: 28:0a:b5:0b:47:d2:67:64:8a:28:e5:7f:fc:3a:22: 5e:0a:76:d3:4a:76:4a:af:2e:f4:b2:45:c3:7d:3d: bd:47:ba:94:6d:8a:89:0b:36:5e:38:b1:93:7b:ab: 5c:c9:82:88:a3:7d:e0:4b:11:44:b3:b8:de:bf:dd: 79:24:a4:d8:a9:b0:fb:cd:9c:66:b7:56:ce:da:14: 32:f9:b9:f3:f7:a2:7a:7c:74:2a:59:90:2c:f8:9d: cf:53:b1:aa:73:82:0e:8f:67:fd:49:45:03:82:1f: 59:75:07:02:03:e6:6b:c8:52:8e:9b:78:72:a4:fd: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:91:3A:D9:73:9D:A4:D9:4F:4A:2F:5E:44:02:91:B3:0D:A4:73 X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:7b:6c:b8:a4:a7:56:15:fa:1e:71:61:4a:37:22:e0:79:57: 18:ea:89:56:f3:1e:a9:99:df:f1:1a:6b:e8:6f:f1:46:f8:85: 14:41:b0:24:2b:a6:c3:9d:1a:75:21:7b:a7:66:f9:f4:4d:1d: 37:1d:91:45:9a:75:6c:cd:85:fb:4c:2f:f7:ee:18:aa:ed:a9: 00:0f:0c:56:8d:7e:73:91:4a:47:2e:fc:55:00:3a:10:f7:05: e3:01:4e:7f:ee:30:9a:fe:9b:f6:fc:43:85:26:14:2b:21:0d: 00:27:22:c2:f6:89:11:fa:d9:1a:ed:c1:5f:22:5b:31:91:bc: 63:23:b9:26:96:36:4b:4b:54:e1:ec:00:16:e0:d5:4b:a3:b6: c9:9b:03:84:7f:54:fc:3d:4b:c0:99:76:50:f2:85:36:b3:d0: 29:f7:44:59:bd:8c:61:46:93:5d:94:22:68:e1:a8:bb:c1:99: 61:a2:31:72:89:b8:a0:20:ac:14:a6:5f:26:2a:91:a3:8b:46: fd:b7:3a:6d:85:f9:bd:ce:01:89:cf:c8:e5:f9:50:98:25:f2: 3d:e1:bb:9e:e0:ac:53:72:d4:70:52:61:b2:f2:fc:e2:96:2b: eb:40:a6:eb:a3:9f:c6:d7:e4:9a:6a:d7:43:9e:b5:23:2c:f7: 1d:5e:6d:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUxMTAxMDMzNDQ3WhcNMjUxMTA4MDMzNDQ3WjAYMRYwFAYD VQQDEw02OTA1N2ZkNy05ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlclo35om42cPhiDEc0DXGOB9Msf4cf0jg6vzcOgk0Va88t7UwRDc6mbjCM09 v++qylQAG1rtL/Sz/yXxy//ezCd7f4et2jOTNZJnVArV9a7FrYg6ylAFYuXWei8S hoWq7QnqOXi1FvER6zkV4pSPmTqUj+i7KxTCm1wF8+/eaSKeiXEhyHooCrULR9Jn ZIoo5X/8OiJeCnbTSnZKry70skXDfT29R7qUbYqJCzZeOLGTe6tcyYKIo33gSxFE s7jev915JKTYqbD7zZxmt1bO2hQy+bnz96J6fHQqWZAs+J3PU7Gqc4IOj2f9SUUD gh9ZdQcCA+ZryFKOm3hypP2JYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMigkTrZ c52k2U9KL15EApGzDaRzMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEe2y4pKdWFfoecWFKNyLgeVcY6olW8x6pmd/xGmvob/FG+IUUQbAk K6bDnRp1IXunZvn0TR03HZFFmnVszYX7TC/37hiq7akADwxWjX5zkUpHLvxVADoQ 9wXjAU5/7jCa/pv2/EOFJhQrIQ0AJyLC9okR+tka7cFfIlsxkbxjI7kmljZLS1Th 7AAW4NVLo7bJmwOEf1T8PUvAmXZQ8oU2s9Ap90RZvYxhRpNdlCJo4ai7wZlhojFy ibigIKwUpl8mKpGji0b9tzpthfm9zgGJz8jl+VCYJfI94bue4KxTctRwUmGy8vzi livrQKbro5/G1+SaatdDnrUjLPcdXm1W -----END CERTIFICATE-----Generated at Sun Nov 2 18:20:23 2025 by rpki-client