$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: UHWyOSkjT+6pojJikKr198A3h5ymZSBvUipyNptVbX8= Subject key identifier: 2E:08:D8:E7:E5:9D:F6:63:5B:7F:CA:FE:72:37:E3:83:0E:5D:13:02 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 05A2 Signing time: Sun 02 Nov 2025 23:07:54 +0000 Manifest this update: Sun 02 Nov 2025 23:07:53 +0000 Manifest next update: Sun 09 Nov 2025 23:07:53 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: Bv6nK0jlYwyv6iltvQmC9LKLuTa8UkqG1q5VM8c/UiI=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Nov 2 23:07:53 2025 GMT Not After : Nov 9 23:07:53 2025 GMT Subject: CN=6907e44a-5b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:03:ce:63:39:10:6f:b7:4b:15:ea:f6:f2: 7d:93:c1:c5:a3:5c:7d:e1:8d:05:58:52:a5:7e:ae: 95:cd:6b:38:9b:d7:3b:cf:ee:2c:5b:8e:35:56:b5: af:a9:5a:bd:95:cc:b9:01:b5:24:2d:ed:ef:46:de: 8e:dd:0c:20:17:36:9b:40:ce:41:0a:15:a6:fa:d9: 09:54:11:c6:74:80:d4:69:e4:66:59:a4:1a:25:7a: 87:1b:69:d4:1e:d0:1d:b6:5b:ab:bd:31:24:c7:07: 63:ec:3a:2c:44:49:56:cc:a1:f2:59:08:4f:78:88: 3f:fd:bc:93:16:0c:c3:24:ca:51:8c:12:7c:6b:d3: bd:33:de:ff:e3:46:ab:45:63:5c:6e:b4:13:21:23: 97:61:8a:d8:9a:8a:e4:e7:a8:0e:36:d9:19:5b:66: af:79:9b:37:44:d4:e2:ad:b2:1e:49:2a:f5:b5:4e: 0d:da:b1:13:6b:dd:f1:b9:3a:99:f6:0c:b4:c4:a3: d6:c4:e3:e8:4a:84:61:43:a2:e1:58:fa:cc:ad:e1: a6:d9:2a:fc:cf:ef:39:00:67:02:c6:5c:87:cf:4e: 90:f2:f3:19:f5:0c:82:d1:4a:9f:a1:7f:5c:8f:e4: d3:ad:d7:1e:cb:8e:c0:37:88:78:92:8b:d1:3c:58: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:08:D8:E7:E5:9D:F6:63:5B:7F:CA:FE:72:37:E3:83:0E:5D:13:02 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:0e:cc:08:0a:5b:81:eb:d2:a4:f4:72:87:3e:1e:11:cf:de: 43:37:cd:6f:8c:75:54:f1:ea:13:b9:55:f0:6c:8b:04:a5:89: 73:b1:cc:f8:cc:a9:be:e2:c8:d0:b4:f6:f4:46:bc:49:31:aa: b1:f7:3c:37:19:e1:22:cd:2d:39:0f:7e:4a:fb:2f:78:a4:c3: 7b:45:10:11:d8:6f:bb:84:90:f9:4b:fa:c1:a4:be:be:a9:a1: 3f:6d:9a:b8:48:7e:ab:a7:a9:3e:12:a8:da:34:8c:13:06:ca: a3:01:93:f8:e1:1f:9c:32:3a:44:57:ab:e8:ae:9e:20:2c:02: 07:5c:bf:b4:4b:70:65:8f:46:10:d9:70:af:b9:20:a9:f1:ec: 94:e5:0e:f4:3e:39:2b:a2:77:d1:6f:74:ed:8e:24:0b:0d:38: f1:53:67:b8:49:89:f1:25:74:4a:78:72:4e:69:cd:e2:de:5a: 94:2f:8b:4a:8f:c3:8b:6d:67:06:e7:33:a7:f8:a5:c9:74:73: f5:d0:01:14:cd:f5:1d:92:eb:61:71:2f:94:56:1e:3d:74:83: 05:95:c3:8e:75:70:e3:fc:21:6e:8e:d9:9a:53:e8:48:47:ef: 35:cb:74:4d:b5:5b:35:3d:e2:0d:04:db:f1:b1:29:e3:24:bb: 64:e7:dc:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUxMTAyMjMwNzUzWhcNMjUxMTA5MjMwNzUzWjAYMRYwFAYD VQQDEw02OTA3ZTQ0YS01YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwADzmM5EG+3SxXq9vJ9k8HFo1x94Y0FWFKlfq6VzWs4m9c7z+4sW441VrWv qVq9lcy5AbUkLe3vRt6O3QwgFzabQM5BChWm+tkJVBHGdIDUaeRmWaQaJXqHG2nU HtAdtlurvTEkxwdj7DosRElWzKHyWQhPeIg//byTFgzDJMpRjBJ8a9O9M97/40ar RWNcbrQTISOXYYrYmork56gONtkZW2aveZs3RNTirbIeSSr1tU4N2rETa93xuTqZ 9gy0xKPWxOPoSoRhQ6LhWPrMreGm2Sr8z+85AGcCxlyHz06Q8vMZ9QyC0UqfoX9c j+TTrdcey47AN4h4kovRPFg91QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4I2Ofl nfZjW3/K/nI344MOXRMCMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDrDswICluB69Kk9HKHPh4Rz95DN81vjHVU8eoTuVXwbIsEpYlzscz4 zKm+4sjQtPb0RrxJMaqx9zw3GeEizS05D35K+y94pMN7RRAR2G+7hJD5S/rBpL6+ qaE/bZq4SH6rp6k+EqjaNIwTBsqjAZP44R+cMjpEV6vorp4gLAIHXL+0S3Blj0YQ 2XCvuSCp8eyU5Q70PjkronfRb3TtjiQLDTjxU2e4SYnxJXRKeHJOac3i3lqUL4tK j8OLbWcG5zOn+KXJdHP10AEUzfUdkuthcS+UVh49dIMFlcOOdXDj/CFujtmaU+hI R+81y3RNtVs1PeINBNvxsSnjJLtk59xm -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:37 2025 by rpki-client