$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: Cdkb0V0TGvCIr0zes/VsBP+FpLbYZVmxU48r0IFdYsw= Subject key identifier: C2:6A:1A:1F:89:FB:A3:B8:54:7B:3E:E3:50:5C:BC:31:B4:06:7E:65 Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 07CB Signing time: Sun 02 Nov 2025 21:13:07 +0000 Manifest this update: Sun 02 Nov 2025 21:13:07 +0000 Manifest next update: Sun 09 Nov 2025 21:13:07 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: 0m4TgZaUHuPItO5uO1Fp5g76f3ZEBkdiaoIXuLk/bjI=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Nov 2 21:13:07 2025 GMT Not After : Nov 9 21:13:07 2025 GMT Subject: CN=6907c963-d1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:ff:ea:35:f8:59:81:93:4f:27:ca:0d:d7: fa:8d:ff:5f:c2:b8:93:5a:35:71:d6:e8:f7:de:2d: d2:b2:e5:36:4c:53:8b:ed:5a:f9:ff:2b:e5:ff:fa: d1:b3:5c:f4:84:18:47:63:54:dd:6d:b8:f3:e2:4c: 92:9e:0f:b4:d7:e1:24:de:1c:0b:98:90:bf:5b:0b: 97:68:3c:e4:4a:a0:29:f4:1b:82:31:da:4f:12:de: a6:11:0d:12:de:27:c3:2c:67:02:ed:11:b5:0f:cd: 7c:6e:af:9f:14:0a:53:0a:ce:5a:22:3b:03:83:d7: e6:e5:40:9d:15:ef:a5:52:79:53:e2:73:ff:af:26: 80:39:12:dd:a8:32:e4:f9:58:60:fc:8a:d0:bd:33: a0:35:0c:3b:7f:ff:5f:18:a5:68:50:bd:fa:1c:7d: 7f:c6:4d:85:31:f7:52:ed:87:3e:ae:98:4e:ce:97: f7:8c:68:86:7e:09:13:f4:7a:f6:b8:2c:bd:b7:ce: 40:a7:b3:88:d7:2a:a0:e5:0d:b6:6d:ee:c9:0d:61: a9:c0:a1:97:ea:90:0a:cb:b3:54:43:20:01:62:f3: e8:16:6c:aa:f1:15:b8:a2:a1:6a:1b:b9:74:f5:cf: 19:c2:a9:29:c7:27:1f:35:a8:1d:ae:8a:25:7a:86: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:1A:1F:89:FB:A3:B8:54:7B:3E:E3:50:5C:BC:31:B4:06:7E:65 X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:27:fe:0d:97:ea:76:a9:ad:01:21:ad:43:80:04:81:ab:70: eb:5a:58:0f:35:25:50:3e:00:d3:d0:92:26:d8:68:ed:9e:ce: e4:e6:74:e0:35:26:e3:c2:cb:fd:76:22:9e:4d:77:14:ba:77: 77:f3:66:86:d8:b1:ed:ec:73:82:ef:48:70:f9:e3:cc:e0:65: ba:14:e3:9b:47:60:71:4a:26:18:ca:60:46:8c:f4:92:9f:8f: 1f:05:fb:e3:c0:6f:2e:b2:e1:46:30:ee:c4:72:54:45:7b:84: ff:f4:89:70:b4:dd:fd:ec:7a:70:15:37:60:58:51:b7:17:45: 30:cf:0d:22:f1:8e:be:79:9b:a7:f4:9f:88:4b:2f:c9:6f:1f: 9c:df:01:48:a6:67:73:46:8e:c7:ef:57:d4:09:44:5f:47:4a: ba:ad:0b:aa:f7:58:af:e5:62:03:1c:67:90:dc:90:09:2a:12: 62:51:8a:62:ee:33:d0:b1:98:69:12:b5:50:67:47:f8:2a:5f: 17:b8:43:d6:38:d4:72:1b:87:a3:d8:ce:ef:7c:14:ef:14:30: 61:06:64:33:bc:52:6e:f7:99:d6:6c:b8:94:f5:72:69:44:19: a3:4e:5e:74:88:5b:c1:59:e6:a8:4f:89:a0:26:f0:07:56:20: 2b:de:e5:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjUxMTAyMjExMzA3WhcNMjUxMTA5MjExMzA3WjAYMRYwFAYD VQQDEw02OTA3Yzk2My1kMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwr/6jX4WYGTTyfKDdf6jf9fwriTWjVx1uj33i3SsuU2TFOL7Vr5/yvl//rR s1z0hBhHY1Tdbbjz4kySng+01+Ek3hwLmJC/WwuXaDzkSqAp9BuCMdpPEt6mEQ0S 3ifDLGcC7RG1D818bq+fFApTCs5aIjsDg9fm5UCdFe+lUnlT4nP/ryaAORLdqDLk +Vhg/IrQvTOgNQw7f/9fGKVoUL36HH1/xk2FMfdS7Yc+rphOzpf3jGiGfgkT9Hr2 uCy9t85Ap7OI1yqg5Q22be7JDWGpwKGX6pAKy7NUQyABYvPoFmyq8RW4oqFqG7l0 9c8ZwqkpxycfNagdrooleobemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJqGh+J +6O4VHs+41BcvDG0Bn5lMB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiJ/4Nl+p2qa0BIa1DgASBq3DrWlgPNSVQPgDT0JIm2Gjtns7k5nTg NSbjwsv9diKeTXcUund382aG2LHt7HOC70hw+ePM4GW6FOObR2BxSiYYymBGjPSS n48fBfvjwG8usuFGMO7EclRFe4T/9IlwtN397HpwFTdgWFG3F0Uwzw0i8Y6+eZun 9J+ISy/Jbx+c3wFIpmdzRo7H71fUCURfR0q6rQuq91iv5WIDHGeQ3JAJKhJiUYpi 7jPQsZhpErVQZ0f4Kl8XuEPWONRyG4ej2M7vfBTvFDBhBmQzvFJu95nWbLiU9XJp RBmjTl50iFvBWeaoT4mgJvAHViAr3uXn -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:27 2025 by rpki-client