$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: JDk0VWCjEw1QXhMHkr3GISvSaP9yX/uhY8YRUutN8kA= Subject key identifier: 1A:72:FE:24:99:76:45:89:F4:C5:8C:2C:23:26:9B:3B:A5:80:8B:29 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E22 Signing time: Sun 02 Nov 2025 17:50:06 +0000 Manifest this update: Sun 02 Nov 2025 17:50:06 +0000 Manifest next update: Sun 09 Nov 2025 17:50:06 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: /nHlFSSYIXeEYsmlneu3RnPFCWRvPchi1H6oSl2Dv/I=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3625 (0xe29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Nov 2 17:50:06 2025 GMT Not After : Nov 9 17:50:06 2025 GMT Subject: CN=690799ce-7cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:ff:92:87:f0:52:8c:91:1a:78:28:52:8f: c1:fd:e3:a4:88:13:77:2d:91:67:11:84:aa:28:ac: af:c5:b2:02:7c:fc:3e:e4:da:e1:db:74:a2:19:c8: f6:27:ee:82:19:c1:b4:25:10:6b:f0:9c:19:91:f0: 63:71:92:ca:d3:26:da:f6:6c:40:16:d2:31:ae:33: cb:7c:25:2d:09:56:4b:0b:10:58:7d:07:95:c2:55: ed:a1:f1:58:91:0b:e2:53:7b:a6:eb:7f:b3:ed:56: eb:f5:10:94:16:71:8b:7b:17:4f:34:7b:5b:4b:85: fe:3c:e0:6b:ce:7c:80:63:84:4c:e8:4f:1f:72:97: 65:db:ae:9c:82:5a:82:d2:b5:9e:95:4b:2b:52:f4: 88:db:47:c6:36:2a:0c:15:ea:bc:e0:bb:21:43:5a: 89:7b:c1:ba:90:5d:f4:ac:36:4d:ad:47:ad:6a:f2: fb:2a:20:fd:16:dc:92:b7:4c:38:7a:90:e3:05:81: c2:f1:f0:4d:f7:d7:db:55:c9:f1:19:e3:ae:53:8f: da:ae:5c:6c:e0:c5:82:74:3d:cd:82:2d:e2:63:c4: 1d:da:27:16:b5:31:4c:e0:80:ce:d8:e2:34:e2:8a: 79:07:09:1d:62:4c:d7:a6:9a:1d:46:87:5e:6a:d5: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:FE:24:99:76:45:89:F4:C5:8C:2C:23:26:9B:3B:A5:80:8B:29 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f8:95:97:48:c0:95:7c:ee:02:9d:a5:21:c2:a5:90:94:13: 8f:45:b8:e1:33:23:03:89:7d:64:ca:27:d2:3a:30:83:ba:65: 2a:15:52:e7:1c:3e:bf:8a:96:de:4e:5a:ab:0e:92:a9:cb:1b: 6c:a0:5a:78:3c:a8:2c:b1:35:1a:09:bd:e2:67:c8:d1:90:c2: 60:c3:15:ec:f1:c1:23:ea:e4:24:86:53:3d:86:a6:32:55:4d: 0f:54:2d:09:e0:a1:55:cb:3f:4c:50:d4:60:3f:07:73:a6:8e: 6f:f0:d1:c2:5b:2d:9d:07:40:2e:50:d7:e1:76:46:2e:f2:85: ef:3a:2f:58:18:66:a1:25:1c:76:1f:b0:2f:4a:c3:b3:ab:1d: af:1b:ab:a7:38:24:7c:b4:cb:d7:1b:e3:25:d3:8b:bf:88:75: 91:51:06:b8:7a:92:93:e0:c9:15:e5:f2:ff:3a:00:0f:28:fe: 6b:d9:8e:a3:dc:0a:aa:36:56:a6:3c:b7:f1:3b:19:fb:f3:0f: 11:ba:02:22:fe:c9:49:8d:3b:02:c6:00:9d:73:3f:67:ec:25: c6:e5:4d:e1:fe:94:14:5b:b4:3c:e8:1e:b7:2a:ee:3a:29:e2: 39:6a:bd:90:1c:a6:23:ff:d0:c7:ad:96:39:11:03:6e:d7:dc: 35:a7:ea:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUxMTAyMTc1MDA2WhcNMjUxMTA5MTc1MDA2WjAYMRYwFAYD VQQDEw02OTA3OTljZS03Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pP/kofwUoyRGngoUo/B/eOkiBN3LZFnEYSqKKyvxbICfPw+5Nrh23SiGcj2 J+6CGcG0JRBr8JwZkfBjcZLK0yba9mxAFtIxrjPLfCUtCVZLCxBYfQeVwlXtofFY kQviU3um63+z7Vbr9RCUFnGLexdPNHtbS4X+POBrznyAY4RM6E8fcpdl266cglqC 0rWelUsrUvSI20fGNioMFeq84LshQ1qJe8G6kF30rDZNrUetavL7KiD9FtySt0w4 epDjBYHC8fBN99fbVcnxGeOuU4/arlxs4MWCdD3Ngi3iY8Qd2icWtTFM4IDO2OI0 4op5BwkdYkzXppodRodeatVc7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpy/iSZ dkWJ9MWMLCMmmzulgIspMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu+JWXSMCVfO4CnaUhwqWQlBOPRbjhMyMDiX1kyifSOjCDumUqFVLn HD6/ipbeTlqrDpKpyxtsoFp4PKgssTUaCb3iZ8jRkMJgwxXs8cEj6uQkhlM9hqYy VU0PVC0J4KFVyz9MUNRgPwdzpo5v8NHCWy2dB0AuUNfhdkYu8oXvOi9YGGahJRx2 H7AvSsOzqx2vG6unOCR8tMvXG+Ml04u/iHWRUQa4epKT4MkV5fL/OgAPKP5r2Y6j 3AqqNlamPLfxOxn78w8RugIi/slJjTsCxgCdcz9n7CXG5U3h/pQUW7Q86B63Ku46 KeI5ar2QHKYj/9DHrZY5EQNu19w1p+qD -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:38 2025 by rpki-client