$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: PWiT0OhFfodqZo/7Tzx/B4/00HAfXqX8Q7SYJN7g+Zk= Subject key identifier: 51:09:62:EE:1C:9C:40:84:F9:91:D1:15:C5:5A:F2:56:34:ED:8E:F2 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0C8E Signing time: Wed 22 Oct 2025 18:50:40 +0000 Manifest this update: Wed 22 Oct 2025 18:50:39 +0000 Manifest next update: Wed 29 Oct 2025 18:50:39 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: Xek2T2SvLc1sVYqLow310h5Ce39wFL+/yOf9RnAxb/8=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: QfGMdR7Uov5mHwO7nve3pQizSQl2DkOhX5cYoqv4O50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Oct 22 18:50:39 2025 GMT Not After : Oct 29 18:50:39 2025 GMT Subject: CN=68f92780-cf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:55:df:ba:dc:cc:a3:fd:73:44:5a:3a:4d: 27:8e:fd:7c:42:2e:82:9f:41:6e:68:7f:99:a6:c6: 0e:20:8c:02:a0:29:a2:46:74:12:55:34:85:6b:ca: ef:b6:18:0c:f1:6c:ce:c1:b8:c1:d4:17:db:96:41: fb:70:8c:42:38:82:d5:4a:75:3d:c1:27:82:dd:f4: c6:7d:cf:1a:f2:80:29:36:42:f8:25:0b:bb:e8:1d: a1:b8:d5:a8:3f:d0:04:61:e0:42:ea:c3:67:c8:21: a6:c6:77:47:91:97:48:24:bd:b8:7f:94:4e:4e:f7: b2:e7:61:cb:87:72:3b:2f:fb:30:fe:9e:26:52:f6: d0:24:64:30:b9:f4:82:91:cd:df:cc:59:6a:69:99: 51:6b:23:77:46:24:55:ad:0b:41:72:68:46:c6:4b: 53:e9:6a:33:79:ec:ce:c7:8e:bc:ae:49:03:fc:97: d8:6c:04:6b:6d:5c:c8:39:ff:2d:9a:fd:0c:3d:ad: 53:26:b4:83:c7:47:2f:54:19:e0:25:3e:6e:35:e3: 21:2f:20:66:52:5c:36:13:45:cf:18:85:b6:01:33: 74:00:95:f1:02:77:1e:af:b5:9c:d8:92:3d:a5:cf: 38:82:7c:4f:a6:73:00:ad:93:00:73:ee:a5:09:c2: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:09:62:EE:1C:9C:40:84:F9:91:D1:15:C5:5A:F2:56:34:ED:8E:F2 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:ed:91:f5:e7:ab:52:96:af:39:ce:0e:e2:ee:55:ae:f0: 8f:b4:b0:c1:b2:38:8d:25:00:31:65:56:25:9f:ed:3d:b9:40: 5c:eb:87:fc:44:d1:6d:2f:d5:4b:b9:0b:48:b5:60:b3:91:39: 2c:a8:1c:02:03:7f:9e:c9:83:8a:53:dd:37:d1:05:33:f6:5b: 15:96:7d:01:c6:4e:cc:78:94:b3:e9:b1:c9:21:ae:81:ad:db: c8:41:07:54:a2:66:40:6f:80:3d:95:4a:56:63:44:62:21:13: b2:a0:7f:73:bc:c0:a0:19:1d:c8:25:62:a8:d6:c5:f2:8c:80: 0d:df:ad:cd:9b:44:12:7f:2a:78:09:ee:75:0e:96:17:a7:c9: 63:b1:a7:78:b5:70:37:a2:c4:8f:db:15:15:f2:83:57:ca:4c: 07:92:3a:5b:be:3c:be:be:e5:37:43:4f:9d:bd:22:24:b3:1e: e5:ff:55:51:72:c6:3c:b6:7e:10:f0:16:97:4f:c4:0c:c8:01: 5d:fa:2c:11:26:aa:3a:2b:16:6e:90:80:71:4c:7a:68:7c:a9: 47:6d:73:4a:45:a3:36:fb:ff:da:c1:09:fd:c1:56:13:bc:2b: d6:16:5d:53:1a:2a:91:54:13:1f:77:92:50:d9:39:cf:22:5c: 02:c5:5e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjUxMDIyMTg1MDM5WhcNMjUxMDI5MTg1MDM5WjAYMRYwFAYD VQQDEw02OGY5Mjc4MC1jZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA045V37rczKP9c0RaOk0njv18Qi6Cn0FuaH+ZpsYOIIwCoCmiRnQSVTSFa8rv thgM8WzOwbjB1BfblkH7cIxCOILVSnU9wSeC3fTGfc8a8oApNkL4JQu76B2huNWo P9AEYeBC6sNnyCGmxndHkZdIJL24f5ROTvey52HLh3I7L/sw/p4mUvbQJGQwufSC kc3fzFlqaZlRayN3RiRVrQtBcmhGxktT6WozeezOx468rkkD/JfYbARrbVzIOf8t mv0MPa1TJrSDx0cvVBngJT5uNeMhLyBmUlw2E0XPGIW2ATN0AJXxAncer7Wc2JI9 pc84gnxPpnMArZMAc+6lCcI94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEJYu4c nECE+ZHRFcVa8lY07Y7yMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABbO2R9eerUpavOc4O4u5VrvCPtLDBsjiNJQAxZVYln+09uUBc64f8 RNFtL9VLuQtItWCzkTksqBwCA3+eyYOKU9030QUz9lsVln0Bxk7MeJSz6bHJIa6B rdvIQQdUomZAb4A9lUpWY0RiIROyoH9zvMCgGR3IJWKo1sXyjIAN363Nm0QSfyp4 Ce51DpYXp8ljsad4tXA3osSP2xUV8oNXykwHkjpbvjy+vuU3Q0+dvSIksx7l/1VR csY8tn4Q8BaXT8QMyAFd+iwRJqo6KxZukIBxTHpofKlHbXNKRaM2+//awQn9wVYT vCvWFl1TGiqRVBMfd5JQ2TnPIlwCxV4T -----END CERTIFICATE-----Generated at Thu Oct 23 05:30:13 2025 by rpki-client