$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: itDspjwJcH67QwbpKFN8fs4zwxepWMClWSLiggCruWE= Subject key identifier: E1:F7:41:07:FD:33:7E:85:9A:25:7E:A8:82:18:D0:5B:EA:C7:FE:D5 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E0B Signing time: Thu 18 Sep 2025 18:01:02 +0000 Manifest this update: Thu 18 Sep 2025 18:01:01 +0000 Manifest next update: Thu 25 Sep 2025 18:01:01 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: wfoh0tcP9anQdCsz33jD+/6zzVc12VPcB5IvvDbHidc=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3602 (0xe12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Sep 18 18:01:01 2025 GMT Not After : Sep 25 18:01:01 2025 GMT Subject: CN=68cc48dd-5d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:60:74:3c:07:4f:a5:59:cb:b3:19:e1:de: 7a:e8:8d:c8:a8:9b:62:54:33:8a:3a:9d:b9:44:08: 13:91:42:12:0b:cd:c8:48:92:20:3b:f8:3b:d5:77: 34:a2:f2:c0:e8:dd:78:bc:0b:21:c8:8d:f5:24:5b: 5f:76:a5:1a:f9:4e:b9:c5:75:94:04:e9:d1:cd:61: 69:19:c8:7b:2a:d8:30:2d:f0:dd:b7:8b:be:60:ce: c3:ab:23:3b:aa:15:85:13:20:b4:d3:28:11:3f:10: ec:07:30:fd:c7:9c:ca:10:ef:46:e9:4b:0a:e1:8a: e5:62:01:86:3e:7f:83:b6:fe:65:6b:41:32:3e:90: 25:ce:2b:45:55:23:a4:95:72:ce:a8:44:4b:06:1a: 70:42:64:7a:82:4b:d9:56:06:0c:d8:73:3e:b6:68: 9c:85:f4:44:b0:0e:fe:26:21:10:72:aa:19:d3:6b: 5a:46:74:b4:ad:78:c5:d6:c6:f3:e4:e0:cc:05:a5: 51:04:a6:b2:8d:b5:f8:d9:8c:36:62:7a:77:42:e8: 0f:b8:73:b5:f2:98:4a:ea:ab:c3:46:4a:90:31:71: d1:28:32:0a:3b:6b:f2:aa:69:77:3b:25:fb:6d:11: 9d:66:0f:46:b3:8b:e2:ed:95:e8:f4:8e:80:04:b9: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F7:41:07:FD:33:7E:85:9A:25:7E:A8:82:18:D0:5B:EA:C7:FE:D5 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e4:fa:58:42:eb:0c:95:c2:41:38:c8:4e:49:08:b1:24:9b: c0:b6:62:15:e2:17:d8:c4:62:81:53:38:a2:7c:1e:73:a3:89: 38:a7:90:d4:0a:d0:42:26:78:45:4b:a8:ab:2c:a8:84:84:84: bc:77:d2:88:0a:d6:2d:2c:db:43:9a:8e:24:9c:56:7b:48:ac: 37:a6:ca:1c:2b:e3:5c:aa:58:d5:c8:df:41:f7:f5:8a:f8:e4: 9f:18:2c:c5:f6:81:c1:26:83:a7:5d:f4:00:9a:ab:10:61:e4: 3e:74:a8:d5:e5:ba:be:21:ae:37:6c:e7:69:fd:88:30:f2:2a: e9:ac:d5:00:f7:e3:5e:89:3e:b2:28:9d:37:60:32:0a:7b:c6: 5e:ba:56:db:89:8a:92:a7:19:9a:7e:75:61:c1:2a:32:87:58: 63:7f:21:d5:df:9c:c8:af:db:6b:a7:7a:3d:f2:63:20:c4:d3: a5:01:a1:00:18:cc:ac:d0:23:aa:c8:28:64:f6:e5:ca:26:f5: 3a:0f:eb:82:ce:71:91:84:31:fb:c1:1f:e1:5e:d9:cd:e1:49: e2:54:01:a0:12:de:d7:7b:83:0c:a0:04:17:f1:c1:a7:35:56: 55:f8:f0:56:0f:6c:ba:7a:e9:06:80:2a:e9:e0:e5:a4:3c:15: 62:b2:d6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUwOTE4MTgwMTAxWhcNMjUwOTI1MTgwMTAxWjAYMRYwFAYD VQQDEw02OGNjNDhkZC01ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47BgdDwHT6VZy7MZ4d566I3IqJtiVDOKOp25RAgTkUISC83ISJIgO/g71Xc0 ovLA6N14vAshyI31JFtfdqUa+U65xXWUBOnRzWFpGch7KtgwLfDdt4u+YM7DqyM7 qhWFEyC00ygRPxDsBzD9x5zKEO9G6UsK4YrlYgGGPn+Dtv5la0EyPpAlzitFVSOk lXLOqERLBhpwQmR6gkvZVgYM2HM+tmichfREsA7+JiEQcqoZ02taRnS0rXjF1sbz 5ODMBaVRBKayjbX42Yw2Ynp3QugPuHO18phK6qvDRkqQMXHRKDIKO2vyqml3OyX7 bRGdZg9Gs4vi7ZXo9I6ABLlIowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH3QQf9 M36FmiV+qIIY0Fvqx/7VMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI5PpYQusMlcJBOMhOSQixJJvAtmIV4hfYxGKBUziifB5zo4k4p5DU CtBCJnhFS6irLKiEhIS8d9KICtYtLNtDmo4knFZ7SKw3psocK+NcqljVyN9B9/WK +OSfGCzF9oHBJoOnXfQAmqsQYeQ+dKjV5bq+Ia43bOdp/Ygw8irprNUA9+NeiT6y KJ03YDIKe8ZeulbbiYqSpxmafnVhwSoyh1hjfyHV35zIr9trp3o98mMgxNOlAaEA GMys0COqyChk9uXKJvU6D+uCznGRhDH7wR/hXtnN4UniVAGgEt7Xe4MMoAQX8cGn NVZV+PBWD2y6eukGgCrp4OWkPBVistYC -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:32 2025 by rpki-client