$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: 2jQG17F+i4An8ihRlZSP2caGI74oiCcXmXPl7gTlprY= Subject key identifier: DE:CA:05:DF:78:DA:46:38:14:24:D3:49:01:AF:FB:8D:47:54:71:4F Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B5D Signing time: Sun 02 Nov 2025 16:17:16 +0000 Manifest this update: Sun 02 Nov 2025 16:17:16 +0000 Manifest next update: Sun 09 Nov 2025 16:17:16 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: JIJlE8NOxxxhbG1qPZM//9hWX0ryz8/1nm4VaFTBXTw=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7029 (0x1b75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Nov 2 16:17:16 2025 GMT Not After : Nov 9 16:17:16 2025 GMT Subject: CN=6907840c-1f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:00:68:cb:14:ea:07:e4:a1:96:80:fe:8f: 50:76:51:64:c1:e4:14:90:16:89:9c:2a:dd:52:3d: 24:8d:48:24:a0:f7:cd:55:ce:c6:e4:a9:e6:93:7c: c9:d8:9c:ec:5a:af:bc:26:ea:62:1b:6d:a4:2d:7a: 7e:3f:82:7d:67:b3:e0:d7:c4:42:50:45:40:13:b5: 03:97:b6:9d:9b:12:e6:98:e6:cc:90:89:ae:9f:ed: 50:3e:39:3d:c8:b8:aa:bb:50:45:56:c2:6b:7e:3c: fd:05:27:8d:9c:38:cb:2a:8b:f5:e1:87:8b:69:af: ae:9b:1c:0b:6d:8c:c9:b7:1f:ab:16:a0:55:7c:75: 16:6f:0b:20:14:f8:a6:8e:6c:a1:87:6d:11:6c:be: 9f:83:3a:9e:c1:83:5f:49:fa:3b:3d:2c:5c:44:af: c5:45:7b:e7:df:39:41:21:8f:4e:31:2b:a4:d0:7f: 5d:6c:42:94:08:f2:2c:88:69:98:52:f5:0e:72:d6: 80:eb:6e:6e:f9:a6:93:ed:d0:bd:88:e5:97:e5:b4: f0:2c:41:db:3a:0d:6a:f5:54:13:7b:e4:ad:ae:eb: d3:3b:df:ee:b1:f4:92:ed:71:31:d6:2e:1f:53:7f: 5a:be:eb:90:9a:5f:e2:ee:fd:9f:0d:19:4d:ee:97: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:05:DF:78:DA:46:38:14:24:D3:49:01:AF:FB:8D:47:54:71:4F X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:86:20:08:1f:b7:93:f5:4c:af:8a:f1:52:34:bd:15:fe:52: a3:5e:40:d6:6f:ad:87:32:a0:cc:cf:ec:08:b6:71:cd:cc:90: ff:10:e5:e7:b5:ec:c8:35:d9:e4:34:d0:31:cf:84:fa:35:1d: bc:02:1e:81:61:64:f3:a2:ac:f1:b6:c2:5b:c8:5e:be:0b:be: 25:36:af:ac:cf:f4:04:b6:b0:5c:18:be:cf:fd:21:52:57:ae: b1:7c:5f:91:90:00:4d:a2:85:bc:ed:78:90:b4:b2:4b:e3:49: 7e:7a:63:66:1a:fc:e6:3b:c9:6f:ad:60:b2:d9:1e:51:bb:78: ec:8e:2e:60:76:37:8c:30:a4:09:8c:92:80:fa:70:cd:d1:10: 53:32:81:8e:bb:ba:8b:d8:cd:06:28:3b:89:88:32:16:fb:c6: c1:0f:f4:8a:e0:c3:da:72:42:c7:70:cb:c4:c8:98:e7:d0:60: 5a:17:59:4f:75:00:55:41:0a:3a:8d:e9:aa:b9:47:f3:4c:8d: e0:8f:cc:b8:52:71:46:6d:36:67:e8:6e:da:10:9d:0e:13:61: 34:ec:6d:b9:c9:3b:d8:86:f1:d6:b7:cf:a8:2e:e3:63:a4:27: 0c:b1:cb:fd:7d:d2:ef:d4:bd:64:09:87:3c:45:b2:eb:d7:74: 51:c8:1f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUxMTAyMTYxNzE2WhcNMjUxMTA5MTYxNzE2WjAYMRYwFAYD VQQDEw02OTA3ODQwYy0xZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBYAaMsU6gfkoZaA/o9QdlFkweQUkBaJnCrdUj0kjUgkoPfNVc7G5Knmk3zJ 2JzsWq+8JupiG22kLXp+P4J9Z7Pg18RCUEVAE7UDl7admxLmmObMkImun+1QPjk9 yLiqu1BFVsJrfjz9BSeNnDjLKov14YeLaa+umxwLbYzJtx+rFqBVfHUWbwsgFPim jmyhh20RbL6fgzqewYNfSfo7PSxcRK/FRXvn3zlBIY9OMSuk0H9dbEKUCPIsiGmY UvUOctaA625u+aaT7dC9iOWX5bTwLEHbOg1q9VQTe+StruvTO9/usfSS7XEx1i4f U39avuuQml/i7v2fDRlN7pfbLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7KBd94 2kY4FCTTSQGv+41HVHFPMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2hiAIH7eT9UyvivFSNL0V/lKjXkDWb62HMqDMz+wItnHNzJD/EOXn tezINdnkNNAxz4T6NR28Ah6BYWTzoqzxtsJbyF6+C74lNq+sz/QEtrBcGL7P/SFS V66xfF+RkABNooW87XiQtLJL40l+emNmGvzmO8lvrWCy2R5Ru3jsji5gdjeMMKQJ jJKA+nDN0RBTMoGOu7qL2M0GKDuJiDIW+8bBD/SK4MPackLHcMvEyJjn0GBaF1lP dQBVQQo6jemquUfzTI3gj8y4UnFGbTZn6G7aEJ0OE2E07G25yTvYhvHWt8+oLuNj pCcMscv9fdLv1L1kCYc8RbLr13RRyB/z -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:11 2025 by rpki-client