$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: q65EbZu0QVM78it+P6eG/PqeyijUuzM31f6AqZyVygU= Subject key identifier: E9:2D:DD:06:0D:22:C8:76:09:32:9B:78:63:DC:CD:97:E2:0C:05:7C Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A08 Signing time: Sun 02 Nov 2025 19:47:46 +0000 Manifest this update: Sun 02 Nov 2025 19:47:46 +0000 Manifest next update: Sun 09 Nov 2025 19:47:46 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: UvpoJyRG/dV8pVL3st1mTeQA34P36FzvFnWCvQP67ig=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Nov 2 19:47:46 2025 GMT Not After : Nov 9 19:47:46 2025 GMT Subject: CN=6907b562-ddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:15:88:30:00:4a:36:bf:15:e1:2c:8d:b1: f0:7e:10:48:f3:f0:c5:1b:01:ca:9d:45:c3:3f:88: a5:42:0c:08:6f:bb:1e:1b:a4:82:95:d4:5c:84:cd: d2:36:a4:06:0d:4d:30:07:9e:b4:69:9a:c7:b1:0d: c1:96:65:47:5e:c9:4a:98:a3:d0:5e:10:d3:5b:dd: 64:bf:97:1b:5f:f6:61:fa:9f:03:9b:b4:0d:22:6a: 28:b3:d9:77:e7:46:e0:d5:d4:9c:0e:83:21:66:69: 16:22:8a:3f:82:ce:93:58:a7:65:b9:b2:a0:f2:21: 56:4c:dd:70:93:d5:fe:dd:2d:ef:41:42:fd:f4:eb: 21:25:43:b7:37:14:89:4b:0b:3c:de:42:ef:0c:74: bc:4b:7c:4d:31:db:89:ba:1f:12:0d:e7:f3:99:02: 47:c5:68:c4:25:0d:79:af:ce:bf:41:7b:12:4d:ce: 4f:11:9b:43:ea:49:41:d5:1c:ad:38:d6:e8:07:4d: 68:6d:66:a4:b3:8a:f4:83:c3:5c:57:31:07:35:79: 62:c5:d6:3f:ae:6e:1c:83:56:4f:1f:cd:18:5f:2f: bd:60:4c:67:69:7a:ff:c7:c3:6a:0b:83:4d:d0:6c: a1:4a:c6:b3:79:7d:87:79:d9:02:8d:f1:79:58:70: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2D:DD:06:0D:22:C8:76:09:32:9B:78:63:DC:CD:97:E2:0C:05:7C X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ff:56:50:b7:e9:7c:f0:22:94:ae:d0:42:af:32:05:6e:7b: 5a:35:87:59:8e:78:a1:ac:7e:f1:dc:04:41:d8:95:9d:73:35: f7:51:65:df:26:b7:ee:ab:da:64:31:24:18:f3:2e:b0:2d:6a: cf:1d:68:90:6a:d4:b4:05:bc:ea:f1:5e:96:1e:4c:be:c2:f0: ec:04:9f:f3:83:21:fa:93:5e:df:83:4c:53:44:40:0f:da:44: 41:c5:c7:94:18:f7:c1:20:cb:fc:ec:79:34:9d:56:9d:48:dd: b6:80:18:f4:fc:3a:0c:1a:d2:35:06:c0:60:59:41:89:f6:c2: 9a:e7:01:44:a7:7b:a0:d0:9f:91:80:e4:6b:ce:8e:f4:14:c0: 32:5f:f1:f3:4a:20:85:5c:35:bc:46:23:f0:34:c0:e7:9d:a5: 00:6b:03:e7:ff:22:d2:f3:17:74:3f:59:ba:21:1b:13:cd:de: 05:d5:98:99:77:7e:e4:d3:04:60:11:8f:de:61:51:a2:60:4c: 5f:59:26:61:0d:7f:75:35:db:2c:92:35:c6:57:a7:30:0f:ee: b9:7b:3d:16:a1:1e:b8:58:f2:85:b3:fd:23:69:ae:ff:1f:53: 9b:8d:52:ca:5c:d9:bf:ee:ea:2d:7a:80:64:39:82:6f:94:58: 70:9a:70:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUxMTAyMTk0NzQ2WhcNMjUxMTA5MTk0NzQ2WjAYMRYwFAYD VQQDEw02OTA3YjU2Mi1kZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTIViDAASja/FeEsjbHwfhBI8/DFGwHKnUXDP4ilQgwIb7seG6SCldRchM3S NqQGDU0wB560aZrHsQ3BlmVHXslKmKPQXhDTW91kv5cbX/Zh+p8Dm7QNImoos9l3 50bg1dScDoMhZmkWIoo/gs6TWKdlubKg8iFWTN1wk9X+3S3vQUL99OshJUO3NxSJ Sws83kLvDHS8S3xNMduJuh8SDefzmQJHxWjEJQ15r86/QXsSTc5PEZtD6klB1Ryt ONboB01obWaks4r0g8NcVzEHNXlixdY/rm4cg1ZPH80YXy+9YExnaXr/x8NqC4NN 0GyhSsazeX2HedkCjfF5WHDBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkt3QYN Ish2CTKbeGPczZfiDAV8MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk/1ZQt+l88CKUrtBCrzIFbntaNYdZjnihrH7x3ARB2JWdczX3UWXf Jrfuq9pkMSQY8y6wLWrPHWiQatS0Bbzq8V6WHky+wvDsBJ/zgyH6k17fg0xTREAP 2kRBxceUGPfBIMv87Hk0nVadSN22gBj0/DoMGtI1BsBgWUGJ9sKa5wFEp3ug0J+R gORrzo70FMAyX/HzSiCFXDW8RiPwNMDnnaUAawPn/yLS8xd0P1m6IRsTzd4F1ZiZ d37k0wRgEY/eYVGiYExfWSZhDX91NdsskjXGV6cwD+65ez0WoR64WPKFs/0jaa7/ H1ObjVLKXNm/7uoteoBkOYJvlFhwmnBT -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:23 2025 by rpki-client