$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft File: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json) Hash identifier: oZewtLHNDjJ5EBkNmSPrdVmAAs4E68gyf3HeGpo/jPs= Subject key identifier: 03:E7:2A:07:21:D6:18:1A:D1:C0:A7:2A:64:77:52:39:4B:E7:94:43 Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 Certificate issuer: /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft Manifest number: 07DE Signing time: Sun 02 Nov 2025 21:09:16 +0000 Manifest this update: Sun 02 Nov 2025 21:09:16 +0000 Manifest next update: Sun 09 Nov 2025 21:09:16 +0000 Files and hashes: 1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: 0eiC8rmzP+w1dpCB9soRbV9ixmBpvenSaCH8QoyDlyA=) 2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: eWRDLsuHoJc/nz9fA7Tw+nXYU13UB2p69Sw5UsXcXsQ=) 3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: qfHny3neEqciJUugDLFWYSVPfWoplVFPNaZG5R/1xwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Validity Not Before: Nov 2 21:09:16 2025 GMT Not After : Nov 9 21:09:16 2025 GMT Subject: CN=6907c87c-fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:ff:e6:a2:d5:7a:95:64:b7:60:ab:f5:db: 6c:88:0c:6e:7e:a2:be:55:3a:a8:ff:04:a1:24:93: 77:cc:5d:11:c6:6a:93:5e:eb:81:85:d6:90:4d:82: 23:2b:67:ec:c1:12:08:82:81:11:ee:e3:ac:23:07: f5:3c:02:e7:e5:13:e0:aa:84:0e:0e:61:39:6b:cc: 53:7c:24:dc:fd:d4:ac:d5:eb:a0:66:db:d6:94:ea: 21:cb:24:69:84:c6:d5:79:0c:3d:da:85:01:8e:62: da:80:12:f1:94:53:aa:6e:14:af:d5:e4:7d:59:bb: ad:23:a9:5a:90:b9:87:f4:24:5f:c2:9e:fe:9e:fd: f7:49:88:a0:2b:3d:03:0b:12:87:11:fb:0c:74:c7: cf:e2:12:5e:bb:32:cc:d0:d2:51:8d:91:ad:24:61: aa:22:1b:35:9a:bb:d7:6e:84:ba:68:58:e3:b6:c4: fb:6b:0c:7e:79:62:7c:e1:1b:57:d9:d9:b3:df:63: 3f:1c:84:00:1a:52:f3:50:47:94:42:90:6b:dd:47: 93:10:08:11:8e:6d:39:de:51:4d:9f:04:45:38:30: 07:f5:a2:69:c6:5a:34:f0:b1:2f:08:11:1d:36:73: 86:40:4d:ef:6e:6b:ee:31:cf:93:d4:64:b1:39:1d: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E7:2A:07:21:D6:18:1A:D1:C0:A7:2A:64:77:52:39:4B:E7:94:43 X509v3 Authority Key Identifier: keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:16:fc:58:ee:30:ef:e8:92:92:45:8a:4a:62:3d:78:3f:32: c2:df:6e:65:8a:fc:ff:b7:51:cf:32:a9:2f:e9:f9:69:65:59: d6:dd:de:74:7f:67:13:1c:76:58:ec:12:72:1b:97:17:64:73: 3e:e4:e3:23:fd:56:38:f2:36:bc:8f:59:72:66:b7:d8:9b:07: 95:35:80:3b:ab:97:5b:e6:42:8a:e6:91:b2:68:39:ee:5f:4a: 17:f8:da:0e:67:f2:69:74:c0:8e:23:83:29:32:6c:fd:40:51: f1:ed:bb:5d:1e:c6:73:62:63:4e:f4:9d:7a:31:7f:d4:da:7e: 2e:cc:59:b9:3b:94:96:a8:dd:83:3c:b8:d3:87:33:59:ec:c8: c8:cb:e5:11:b6:fd:8a:14:87:20:0a:0e:70:27:ba:1b:9e:45: 03:9c:93:56:d4:af:00:63:93:b6:16:39:35:9a:39:bd:1a:17: 9d:24:4c:61:02:30:5b:d8:62:7f:6b:9a:39:ce:0d:2d:74:75: 7b:66:af:82:a3:7f:a9:ed:a4:9a:3c:f3:b6:04:71:27:67:48: 2e:70:a8:cd:2a:aa:36:86:d3:ee:21:85:f7:81:8e:45:79:8f: 22:a8:df:d4:59:26:0b:c6:8a:93:4c:be:8b:f1:3c:a9:bc:1d: 93:0a:57:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE M0UzRUJFQTQwHhcNMjUxMTAyMjEwOTE2WhcNMjUxMTA5MjEwOTE2WjAYMRYwFAYD VQQDEw02OTA3Yzg3Yy1mYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Xn/5qLVepVkt2Cr9dtsiAxufqK+VTqo/wShJJN3zF0RxmqTXuuBhdaQTYIj K2fswRIIgoER7uOsIwf1PALn5RPgqoQODmE5a8xTfCTc/dSs1eugZtvWlOohyyRp hMbVeQw92oUBjmLagBLxlFOqbhSv1eR9WbutI6lakLmH9CRfwp7+nv33SYigKz0D CxKHEfsMdMfP4hJeuzLM0NJRjZGtJGGqIhs1mrvXboS6aFjjtsT7awx+eWJ84RtX 2dmz32M/HIQAGlLzUEeUQpBr3UeTEAgRjm053lFNnwRFODAH9aJpxlo08LEvCBEd NnOGQE3vbmvuMc+T1GSxOR0tRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPnKgch 1hga0cCnKmR3UjlL55RDMB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQ5Ni83NTY2RjUyNjBEREIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0x VXl6ejZ4MWZ1OWZUNC12cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZFvxY7jDv6JKSRYpKYj14PzLC325livz/t1HPMqkv6flpZVnW3d50 f2cTHHZY7BJyG5cXZHM+5OMj/VY48ja8j1lyZrfYmweVNYA7q5db5kKK5pGyaDnu X0oX+NoOZ/JpdMCOI4MpMmz9QFHx7btdHsZzYmNO9J16MX/U2n4uzFm5O5SWqN2D PLjThzNZ7MjIy+URtv2KFIcgCg5wJ7obnkUDnJNW1K8AY5O2Fjk1mjm9GhedJExh AjBb2GJ/a5o5zg0tdHV7Zq+Co3+p7aSaPPO2BHEnZ0gucKjNKqo2htPuIYX3gY5F eY8iqN/UWSYLxoqTTL6L8TypvB2TCldz -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:45 2025 by rpki-client