$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: EIXsfYqDczuGfvFTV0g7YbIuNlf1AeK+YukobZ/en4U= Subject key identifier: 10:03:3F:5D:01:64:38:79:21:26:C5:9B:D2:9C:D3:D6:32:1E:C0:B5 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: CF Signing time: Wed 17 Sep 2025 06:17:05 +0000 Manifest this update: Wed 17 Sep 2025 06:17:04 +0000 Manifest next update: Wed 24 Sep 2025 06:17:04 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: 1nuiZQpZ0kzYcc3Vyya3SadlRRZPqfR6a/J+U65XfmY=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Sep 17 06:17:04 2025 GMT Not After : Sep 24 06:17:04 2025 GMT Subject: CN=68ca5261-2790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:74:55:fe:dc:00:9a:f4:e7:a6:0b:6d:14: 74:91:31:ab:94:e4:95:e6:0a:6e:8a:a6:2a:f1:8a: 11:31:a4:e6:82:0d:4a:6f:33:de:25:07:bf:04:1e: 30:64:07:db:ce:6e:ae:1c:d0:c9:5b:e4:fd:4f:a2: 37:97:0d:d9:34:ee:1f:12:f5:8a:18:72:b0:0a:f6: 44:4a:84:ad:b5:04:18:16:65:fd:0f:0e:5e:c0:f0: 99:db:d0:dc:c1:6d:e1:61:57:2a:16:17:6b:8b:86: 64:72:2c:57:cc:ad:ba:37:c4:a3:eb:c1:bf:80:40: 83:ac:0e:9b:f7:39:b1:de:e6:88:6a:f9:27:2f:97: bf:14:86:c9:32:bb:76:fe:60:0f:16:89:ba:09:b4: 9d:ce:8f:99:fa:9c:c6:54:76:62:d0:31:7c:f6:10: 07:04:56:2c:2d:51:07:ad:ce:0c:25:d3:72:ef:2c: 14:b8:12:ea:61:2d:3d:bb:3d:fb:b9:e9:fc:80:24: fa:61:e7:69:2d:d6:b9:a3:47:63:00:39:53:d4:c4: 9a:62:41:a5:bf:12:84:82:47:68:33:a7:80:b0:65: fd:47:37:de:e9:99:7e:36:e2:31:f3:66:d8:ce:6f: 3d:0d:3e:ec:07:a2:d4:ea:fc:c0:c6:f2:8a:70:61: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:03:3F:5D:01:64:38:79:21:26:C5:9B:D2:9C:D3:D6:32:1E:C0:B5 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c4:a7:a0:68:62:a6:c5:94:ac:81:6b:8f:c7:c2:15:3f:ce: 11:89:58:83:7f:0f:48:83:42:6a:03:d8:c3:0a:74:81:b8:8b: c4:5b:ca:00:0a:9a:72:fa:d5:51:60:f1:0c:b2:df:d0:6f:d7: ca:ee:92:ab:30:e2:ff:a4:4f:26:41:44:ef:f7:69:57:4d:50: 34:4d:77:51:0f:3a:5e:9c:a5:9b:25:f4:50:4d:41:3c:bb:e0: 69:6d:e7:5f:0a:01:3a:0a:e4:7b:4d:a3:f0:6e:4a:8a:c9:e3: 40:ba:90:9f:1e:3c:42:fa:a9:e4:94:4d:f7:3f:65:9b:52:bf: cb:e9:56:64:a9:c3:71:6c:a1:41:d1:67:28:fa:ed:1f:93:b6: 69:51:c7:16:dc:07:61:d9:92:41:e2:b8:8c:17:c4:a6:f7:71: ee:e1:72:06:a5:6f:1d:57:2f:d3:84:bc:c5:bb:9d:f3:b7:0b: 22:5d:de:40:4a:5d:e9:64:92:ca:91:f5:04:0c:de:02:9f:97: d9:ca:a3:86:a0:d4:86:89:47:af:05:47:1b:26:fa:90:22:a8: 65:6b:d1:2a:ef:f5:4e:91:58:62:5b:29:42:e8:08:4b:88:96: d0:4a:85:f6:a6:87:5a:43:39:38:56:ed:4e:1b:55:af:14:88: e9:23:97:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUwOTE3MDYxNzA0WhcNMjUwOTI0MDYxNzA0WjAYMRYwFAYD VQQDEw02OGNhNTI2MS0yNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHR0Vf7cAJr056YLbRR0kTGrlOSV5gpuiqYq8YoRMaTmgg1KbzPeJQe/BB4w ZAfbzm6uHNDJW+T9T6I3lw3ZNO4fEvWKGHKwCvZESoSttQQYFmX9Dw5ewPCZ29Dc wW3hYVcqFhdri4ZkcixXzK26N8Sj68G/gECDrA6b9zmx3uaIavknL5e/FIbJMrt2 /mAPFom6CbSdzo+Z+pzGVHZi0DF89hAHBFYsLVEHrc4MJdNy7ywUuBLqYS09uz37 uen8gCT6YedpLda5o0djADlT1MSaYkGlvxKEgkdoM6eAsGX9Rzfe6Zl+NuIx82bY zm89DT7sB6LU6vzAxvKKcGHuGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBADP10B ZDh5ISbFm9Kc09YyHsC1MB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7xKegaGKmxZSsgWuPx8IVP84RiViDfw9Ig0JqA9jDCnSBuIvEW8oA Cppy+tVRYPEMst/Qb9fK7pKrMOL/pE8mQUTv92lXTVA0TXdRDzpenKWbJfRQTUE8 u+BpbedfCgE6CuR7TaPwbkqKyeNAupCfHjxC+qnklE33P2WbUr/L6VZkqcNxbKFB 0Wco+u0fk7ZpUccW3Adh2ZJB4riMF8Sm93Hu4XIGpW8dVy/ThLzFu53ztwsiXd5A Sl3pZJLKkfUEDN4Cn5fZyqOGoNSGiUevBUcbJvqQIqhla9Eq7/VOkVhiWylC6AhL iJbQSoX2podaQzk4Vu1OG1WvFIjpI5dx -----END CERTIFICATE-----Generated at Fri Sep 19 03:58:05 2025 by rpki-client