$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: SMeOC+bn3qsuSQbxDNI6dBu6U88Z3t3ds5xmWOvXp0Y= Subject key identifier: B2:0E:86:F3:C0:15:2A:8D:A9:84:43:59:D1:08:FB:BE:7D:34:FE:3C Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 09F1 Signing time: Thu 18 Sep 2025 20:07:36 +0000 Manifest this update: Thu 18 Sep 2025 20:07:36 +0000 Manifest next update: Thu 25 Sep 2025 20:07:36 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: o2tJX55jSHnt8BWheTXle0XYGTXtgD74OPbRmcEQo04=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Sep 18 20:07:36 2025 GMT Not After : Sep 25 20:07:36 2025 GMT Subject: CN=68cc6688-1484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:41:93:3a:f3:fb:d3:9e:47:d5:5f:4a:f6: 50:fe:57:1c:36:66:be:0b:ef:04:ec:c6:04:7c:df: 6b:5a:34:ce:15:22:88:be:9a:b7:fd:9e:9e:8d:40: dd:bb:a8:3a:ff:51:6d:a5:0b:7f:de:93:cd:8f:5c: fd:ca:3f:b6:e0:b6:69:64:d6:4b:2c:e3:86:c3:67: fe:09:dd:dd:8f:d8:6a:b5:a7:70:b9:12:a7:10:18: 5b:c3:c4:7b:db:d6:7b:54:53:9d:34:38:38:8e:13: 50:0e:25:52:0f:c5:e3:00:a7:a5:f4:53:e7:b3:7d: 84:82:f0:ba:63:e6:20:00:c1:3a:0a:b6:08:8b:4e: 98:36:dd:3b:48:c8:f1:c3:4a:54:be:e8:8a:87:fa: 64:da:8f:d2:35:cd:a4:74:35:eb:6b:3c:f3:31:b3: d2:07:24:8d:16:19:c8:6e:ad:62:57:e3:6f:19:c8: 9a:b9:e6:10:f2:f1:46:11:fa:27:69:b8:4b:a6:ac: 7e:57:c6:88:01:ea:01:b4:74:18:f3:2c:b7:7f:10: 4d:b7:86:2f:b1:41:df:e5:66:9f:46:28:5f:b7:b4: fe:bc:dd:e2:89:fe:e4:29:e7:2b:13:d6:a6:5c:9c: fa:84:3c:1f:e6:57:b3:e6:f6:f3:14:e1:f2:78:bc: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0E:86:F3:C0:15:2A:8D:A9:84:43:59:D1:08:FB:BE:7D:34:FE:3C X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:77:b0:32:1a:a5:27:00:b1:56:a3:76:34:10:98:79:b2:b4: 54:85:22:b6:7e:31:f0:a0:35:26:4c:1a:bf:a7:1a:65:f2:f5: d4:04:d5:01:0e:aa:4b:3f:36:a7:e8:fc:0b:41:26:5c:ea:64: f4:86:1a:8c:9b:32:14:bd:20:31:f1:56:1f:0a:7b:00:86:13: 5a:4c:8f:bc:fa:b9:a6:d0:dd:b0:64:56:3d:29:4e:62:f6:f2: 6c:dc:27:18:ec:c4:f7:91:a2:8f:60:c5:1e:5c:21:21:1e:9c: 89:91:6b:5b:65:f2:81:2d:68:aa:f6:b4:b7:bd:5b:d1:75:56: c2:f8:ae:1a:05:0f:93:9f:a3:50:42:c1:16:82:56:63:74:19: 7f:4c:f3:a6:4a:71:a3:dd:91:e4:67:28:cf:40:76:11:4a:3e: 06:1f:01:d9:ca:21:fa:a4:87:f6:1a:5d:6b:e8:24:06:57:29: 17:77:1c:a4:18:e4:c7:f5:f8:e9:ac:e7:c8:70:e8:84:0f:13: 7f:2d:17:37:3d:bd:7b:b7:79:a3:f5:ed:30:00:81:f6:23:f1: 45:5f:38:db:53:a1:e4:30:61:c9:91:7a:55:f0:fe:15:4f:9e: 60:f6:a2:21:8c:fc:f6:6f:e4:79:4b:57:01:0c:10:db:87:09: b8:7e:e3:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUwOTE4MjAwNzM2WhcNMjUwOTI1MjAwNzM2WjAYMRYwFAYD VQQDEw02OGNjNjY4OC0xNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunhBkzrz+9OeR9VfSvZQ/lccNma+C+8E7MYEfN9rWjTOFSKIvpq3/Z6ejUDd u6g6/1FtpQt/3pPNj1z9yj+24LZpZNZLLOOGw2f+Cd3dj9hqtadwuRKnEBhbw8R7 29Z7VFOdNDg4jhNQDiVSD8XjAKel9FPns32EgvC6Y+YgAME6CrYIi06YNt07SMjx w0pUvuiKh/pk2o/SNc2kdDXrazzzMbPSBySNFhnIbq1iV+NvGciaueYQ8vFGEfon abhLpqx+V8aIAeoBtHQY8yy3fxBNt4YvsUHf5WafRihft7T+vN3iif7kKecrE9am XJz6hDwf5lez5vbzFOHyeLztmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIOhvPA FSqNqYRDWdEI+759NP48MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMd7AyGqUnALFWo3Y0EJh5srRUhSK2fjHwoDUmTBq/pxpl8vXUBNUB DqpLPzan6PwLQSZc6mT0hhqMmzIUvSAx8VYfCnsAhhNaTI+8+rmm0N2wZFY9KU5i 9vJs3CcY7MT3kaKPYMUeXCEhHpyJkWtbZfKBLWiq9rS3vVvRdVbC+K4aBQ+Tn6NQ QsEWglZjdBl/TPOmSnGj3ZHkZyjPQHYRSj4GHwHZyiH6pIf2Gl1r6CQGVykXdxyk GOTH9fjprOfIcOiEDxN/LRc3Pb17t3mj9e0wAIH2I/FFXzjbU6HkMGHJkXpV8P4V T55g9qIhjPz2b+R5S1cBDBDbhwm4fuMq -----END CERTIFICATE-----Generated at Fri Sep 19 05:14:04 2025 by rpki-client