$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: RWbqR0gH0p+5vvHDnwBNsrNJ3f2B81hFPi8KCbVLEeM= Subject key identifier: DC:46:3F:C5:CF:2A:8E:9C:19:E6:34:A9:D8:FD:6D:2B:37:94:34:9E Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: C4 Signing time: Wed 05 Nov 2025 06:07:11 +0000 Manifest this update: Wed 05 Nov 2025 06:07:10 +0000 Manifest next update: Wed 12 Nov 2025 06:07:10 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: JhEvRPXfCfhkOMfAf4gC1DShFFMWHalDvqqgNA7C484=) 2: 088C9298981611EFBE510B59C4F9AE02.roa (hash: +mzl+XLmGyaMauQYRfPSe1wPo0jhs14C721ea24fx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Nov 5 06:07:10 2025 GMT Not After : Nov 12 06:07:10 2025 GMT Subject: CN=690ae98f-63c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:53:bd:69:7d:d2:26:94:f0:38:c8:a6:6d: b8:0b:06:45:1b:fe:cb:67:dd:85:14:6d:be:53:1b: 3e:4c:09:68:91:b3:e9:38:19:8d:98:43:c3:03:7b: 29:22:4d:6e:e0:0f:c4:8c:25:e4:50:8a:df:62:06: fb:71:60:38:26:24:5d:ca:dc:59:44:95:1f:7b:96: 4d:07:45:a1:57:91:eb:f7:48:95:99:ac:39:d5:83: 95:4e:91:09:b3:81:a6:ac:43:79:9d:24:25:2b:f8: e6:83:e2:3a:70:f7:2d:f2:14:85:df:23:cd:a8:82: 4f:f3:46:dc:04:67:73:7e:eb:ac:f7:f6:95:77:09: bf:57:e2:3b:47:26:04:68:9b:21:45:0f:34:b1:75: c4:3a:64:a1:df:2b:7c:e9:b4:37:76:5d:78:66:b6: 9e:7b:cf:dc:de:7a:11:57:d3:d2:66:b7:23:e4:8c: 41:2a:22:d0:2f:cb:63:26:75:b4:c3:0c:9a:fe:7d: 3a:54:d0:a8:55:0a:e8:07:81:bb:79:60:29:71:ea: f7:66:84:36:5e:e5:76:9c:61:bf:86:15:cb:68:ad: ef:b1:57:46:35:cb:bb:98:a9:50:ab:c1:3b:95:bc: 5a:e7:1c:19:d5:24:6d:52:7b:07:e4:6b:23:de:47: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:46:3F:C5:CF:2A:8E:9C:19:E6:34:A9:D8:FD:6D:2B:37:94:34:9E X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9e:41:34:7b:9b:9a:ef:ab:4d:e5:18:77:fe:98:69:98:f9: 05:cf:2c:5b:f2:99:44:7d:c1:11:69:8f:6c:5f:d4:45:0f:e8: 80:92:d2:0b:d3:43:88:04:46:f1:ac:75:07:38:c6:c9:df:8c: 22:e2:24:f6:29:76:fe:1e:e7:5e:a2:cd:b2:d8:43:66:f2:9a: 04:0b:4e:89:71:17:dd:49:81:c0:50:b7:67:43:c0:6e:ea:cb: 61:30:6d:b9:4c:24:25:b3:6c:1d:3f:e3:f5:97:64:45:a3:f4: bf:36:dd:e9:2e:89:aa:aa:6f:88:49:a7:bb:54:f6:02:46:21: c8:2c:bb:99:b1:08:ee:98:6e:48:5b:76:46:5d:89:cb:b7:a9: 83:85:48:3e:44:67:18:a7:95:e9:83:1c:c7:79:6d:2a:c2:33: 59:74:36:38:4d:4a:c7:31:fb:8a:b4:8d:2b:f0:1c:cc:9a:5b: 8c:cb:dc:52:40:11:e9:d9:88:c9:3c:48:3d:6f:b5:3b:90:86: be:48:59:b3:d7:1d:a4:32:2c:da:1f:40:35:44:b0:68:76:23: a0:0f:4a:a5:7d:ce:87:cd:04:79:c5:bb:fe:f5:25:71:69:25: 8e:99:fe:9b:16:97:50:cf:9a:0b:06:dc:e5:6c:61:d2:cf:8b: aa:9f:78:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjUxMTA1MDYwNzEwWhcNMjUxMTEyMDYwNzEwWjAYMRYwFAYD VQQDEw02OTBhZTk4Zi02M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVZTvWl90iaU8DjIpm24CwZFG/7LZ92FFG2+Uxs+TAlokbPpOBmNmEPDA3sp Ik1u4A/EjCXkUIrfYgb7cWA4JiRdytxZRJUfe5ZNB0WhV5Hr90iVmaw51YOVTpEJ s4GmrEN5nSQlK/jmg+I6cPct8hSF3yPNqIJP80bcBGdzfuus9/aVdwm/V+I7RyYE aJshRQ80sXXEOmSh3yt86bQ3dl14Zraee8/c3noRV9PSZrcj5IxBKiLQL8tjJnW0 wwya/n06VNCoVQroB4G7eWApcer3ZoQ2XuV2nGG/hhXLaK3vsVdGNcu7mKlQq8E7 lbxa5xwZ1SRtUnsH5Gsj3kcdzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxGP8XP Ko6cGeY0qdj9bSs3lDSeMB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnkE0e5ua76tN5Rh3/phpmPkFzyxb8plEfcERaY9sX9RFD+iAktIL 00OIBEbxrHUHOMbJ34wi4iT2KXb+Hudeos2y2ENm8poEC06JcRfdSYHAULdnQ8Bu 6sthMG25TCQls2wdP+P1l2RFo/S/Nt3pLomqqm+ISae7VPYCRiHILLuZsQjumG5I W3ZGXYnLt6mDhUg+RGcYp5XpgxzHeW0qwjNZdDY4TUrHMfuKtI0r8BzMmluMy9xS QBHp2YjJPEg9b7U7kIa+SFmz1x2kMizaH0A1RLBodiOgD0qlfc6HzQR5xbv+9SVx aSWOmf6bFpdQz5oLBtzlbGHSz4uqn3hZ -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:34 2025 by rpki-client