$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json) Hash identifier: sW8PIgpzvrlbkfKpS4GJkEeLmbVdptHFmEMbcv04azY= Subject key identifier: E5:66:7D:11:C9:CD:D2:F6:01:85:1D:9C:6C:D2:AA:3B:45:D0:7A:0B Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft Manifest number: 10 Signing time: Fri 17 Oct 2025 11:55:16 +0000 Manifest this update: Fri 17 Oct 2025 11:55:15 +0000 Manifest next update: Fri 24 Oct 2025 11:55:15 +0000 Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: jFkLLUBe/qMEeqQG0+guQKj4s4qUMdyVt9ASyPnnduk=) 2: 2159B7B8A41F11F087C1F02CC4F9AE02.roa (hash: o9+trdGZs9g/j9AiQD7kTRhw8blN1x7JWncUYHM5y3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Validity Not Before: Oct 17 11:55:15 2025 GMT Not After : Oct 24 11:55:15 2025 GMT Subject: CN=68f22ea3-98af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:32:b0:e0:73:c2:a5:71:15:b3:44:2d:96: 77:dc:ed:47:39:1a:9b:06:13:e8:8d:b1:13:74:d8: 2d:ad:c8:4e:4a:28:21:fa:0d:e0:58:b0:b5:f1:eb: 28:e6:bb:7f:a0:24:73:47:cc:b1:ed:a9:c9:01:d4: f4:f2:dd:11:ba:78:f1:70:5e:82:94:13:d6:cf:f2: 23:5e:d1:71:1f:5c:2c:11:31:ba:43:4c:8b:bb:c0: 1e:91:4f:22:7f:6c:22:21:d5:5d:e4:60:1d:77:e8: b9:db:b5:23:cd:45:0e:8c:ae:9f:8f:08:0a:77:b9: 1d:f3:59:d7:3c:1f:9a:c9:85:ed:99:5a:dd:15:f5: e0:cc:68:86:45:6f:3c:05:34:12:5c:5b:40:b7:7b: da:d8:4d:5c:81:69:75:0a:3a:b5:8d:27:a0:b1:72: 78:33:cb:61:09:d8:5e:22:23:44:4a:f4:24:7a:34: 6e:f4:bb:ce:91:38:01:dc:89:91:6c:b9:17:c3:8c: 51:40:33:d1:67:98:3c:09:24:06:aa:0f:8e:0b:9e: 86:2a:2e:d9:1c:e9:cb:02:c1:92:8f:11:48:8b:8e: ab:d6:99:77:3f:cc:42:98:0c:1b:1e:d3:2d:e4:56: d2:87:59:c5:81:51:eb:0f:0a:ce:27:d7:9f:34:cf: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:7D:11:C9:CD:D2:F6:01:85:1D:9C:6C:D2:AA:3B:45:D0:7A:0B X509v3 Authority Key Identifier: keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:1b:6a:13:ea:6f:f4:f6:3b:6c:2c:24:5b:76:db:ee:04: 29:6a:ce:7c:16:65:32:98:c7:89:08:24:17:34:a7:e8:ad:29: 4c:98:97:4a:59:52:ff:e1:20:c8:c4:28:60:d4:fa:cd:8a:93: f3:8d:fa:4c:86:d2:fb:1d:29:23:7b:ab:e3:9c:a5:8e:22:e1: 1b:00:a2:10:94:d0:07:82:fe:65:09:29:21:1c:01:c8:0a:c2: f2:81:41:fd:77:67:6a:3f:76:62:1d:93:df:80:ca:34:da:c1: ec:9e:ed:bd:c8:20:27:26:19:d9:a0:4c:b0:84:7f:b5:54:6b: a3:ff:d2:5e:d6:a5:f5:e6:bd:6a:6e:d8:da:45:16:e5:48:3d: 58:0a:be:37:11:cd:e1:1f:a1:69:3c:75:88:81:2c:08:5e:82: 5f:a6:19:80:fe:36:47:0c:ab:39:67:74:2d:9d:14:7f:da:5f: b4:c0:ec:c4:f8:03:7d:b4:6c:3e:79:fc:9b:ce:ab:3a:ae:d9: 22:90:aa:0e:17:89:88:36:f6:1c:f6:3f:5d:2d:10:86:e9:ec: 52:01:7b:db:0a:8f:fa:19:1f:d6:37:f7:bc:a3:3b:08:de:91: 13:95:cf:1f:03:c3:a6:1b:7e:e5:87:41:e4:7e:d6:c7:21:ad: 3e:d8:0f:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw RjM0NUY0MjAeFw0yNTEwMTcxMTU1MTVaFw0yNTEwMjQxMTU1MTVaMBgxFjAUBgNV BAMTDTY4ZjIyZWEzLTk4YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2wDKw4HPCpXEVs0Qtlnfc7Uc5GpsGE+iNsRN02C2tyE5KKCH6DeBYsLXx6yjm u3+gJHNHzLHtqckB1PTy3RG6ePFwXoKUE9bP8iNe0XEfXCwRMbpDTIu7wB6RTyJ/ bCIh1V3kYB136LnbtSPNRQ6Mrp+PCAp3uR3zWdc8H5rJhe2ZWt0V9eDMaIZFbzwF NBJcW0C3e9rYTVyBaXUKOrWNJ6Cxcngzy2EJ2F4iI0RK9CR6NG70u86ROAHciZFs uRfDjFFAM9FnmDwJJAaqD44LnoYqLtkc6csCwZKPEUiLjqvWmXc/zEKYDBse0y3k VtKHWcWBUesPCs4n1580z0jjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5WZ9EcnN 0vYBhR2cbNKqO0XQegswHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGS+G2oT6m/09jtsLCRbdtvuBClqznwWZTKYx4kIJBc0p+itKUyYl0pZ Uv/hIMjEKGDU+s2Kk/ON+kyG0vsdKSN7q+OcpY4i4RsAohCU0AeC/mUJKSEcAcgK wvKBQf13Z2o/dmIdk9+AyjTaweye7b3IICcmGdmgTLCEf7VUa6P/0l7WpfXmvWpu 2NpFFuVIPVgKvjcRzeEfoWk8dYiBLAhegl+mGYD+NkcMqzlndC2dFH/aX7TA7MT4 A320bD55/JvOqzqu2SKQqg4XiYg29hz2P10tEIbp7FIBe9sKj/oZH9Y397yjOwje kROVzx8Dw6YbfuWHQeR+1schrT7YD4k= -----END CERTIFICATE-----Generated at Sat Oct 18 23:29:06 2025 by rpki-client