$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: ObtUMpF1Y98reF9LmhRZ8e5YUP+OFSGT8td2AZEbd8I= Subject key identifier: 89:CC:FE:F0:DA:58:B3:C1:DE:08:CF:4A:5D:95:36:F3:1E:63:34:EF Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: E6 Signing time: Mon 03 Nov 2025 05:21:14 +0000 Manifest this update: Mon 03 Nov 2025 05:21:14 +0000 Manifest next update: Mon 10 Nov 2025 05:21:14 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: El93fWKJP537Km6ij80em1nDOly/g9HQW8jGKXHarfs=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Nov 3 05:21:14 2025 GMT Not After : Nov 10 05:21:14 2025 GMT Subject: CN=69083bca-b376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:ec:98:75:31:52:9e:66:b8:29:f2:05:0c: b7:91:ab:c3:13:c2:6b:bd:d6:bf:20:80:18:d7:49: c5:bb:75:ed:e2:e8:ed:70:ad:66:3c:78:4f:91:d1: 3a:4c:dd:50:ba:0e:76:a7:08:5f:67:47:ce:b0:ac: 1a:31:95:9b:59:5e:81:51:da:6b:48:00:fd:86:71: a8:14:4f:14:2b:62:97:19:8b:18:99:bf:0b:5c:c2: e3:26:11:1d:2e:ac:d9:69:a3:38:1d:72:4d:e7:66: 96:3c:67:20:a4:7d:fe:30:31:1c:52:a5:26:63:ee: 2f:84:63:37:23:57:f6:bb:6a:29:34:9c:da:c6:8c: e5:da:56:74:69:c4:18:81:d8:39:b8:47:79:05:3f: ae:04:27:5a:c1:01:ed:9e:c1:dd:94:eb:06:a1:fb: bc:67:bd:22:4b:1c:36:44:57:bd:5b:87:02:7e:b2: 6e:b7:82:7d:c8:69:57:34:78:ad:05:50:ef:4e:17: 2f:61:93:ac:f8:8b:e2:12:ad:71:b0:c7:e6:c4:54: e7:e7:8f:d7:d3:4d:fb:9d:3e:7c:60:0a:78:0a:d6: c5:3a:83:ed:b6:0f:10:ae:89:5b:ed:0d:e3:bf:bf: 90:6c:ec:4f:db:4f:45:e6:f5:77:b7:f8:1c:9c:23: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CC:FE:F0:DA:58:B3:C1:DE:08:CF:4A:5D:95:36:F3:1E:63:34:EF X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1b:fd:96:b1:d0:dd:50:cf:93:f5:9a:f7:13:e1:ca:f5:8f: 60:9d:8a:24:8d:e9:cf:4c:ed:0e:ef:b2:ec:b3:ea:69:8a:16: 77:54:a6:3b:4f:61:ac:ad:74:57:60:35:bd:37:0b:42:66:f4: 99:d0:b1:85:8c:9a:16:cd:fb:42:b8:9a:41:de:a3:53:8a:4f: 64:aa:12:ff:d8:6f:06:6d:d7:5d:db:56:07:1d:07:cd:e0:3a: e7:4b:77:1c:96:92:10:fe:97:fd:e7:d3:c1:d0:1f:35:1a:89: dc:f4:00:79:e4:93:cd:96:80:33:ad:01:11:77:08:76:1f:83: 7c:25:3d:d9:39:6b:b4:42:68:35:52:91:53:72:ed:73:7c:9d: 39:8a:92:25:58:f2:90:e5:28:ea:c8:bf:b9:91:0b:e0:af:bc: 90:aa:59:bb:58:9a:23:a9:53:cc:c9:11:4a:5e:fb:db:92:10: 2b:70:c5:a1:8a:81:21:be:07:5d:91:5f:ed:28:be:be:5c:c5: f6:87:21:55:16:8a:f1:74:0b:bb:78:0b:96:68:21:0a:33:50: 36:e0:4d:79:e6:39:f4:7e:13:0c:28:1c:90:71:db:89:7e:c1: e1:7e:cf:f0:fe:80:9a:e8:23:52:c3:63:9f:7f:7d:69:4a:a7: 24:11:cd:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUxMTAzMDUyMTE0WhcNMjUxMTEwMDUyMTE0WjAYMRYwFAYD VQQDEw02OTA4M2JjYS1iMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc3smHUxUp5muCnyBQy3kavDE8Jrvda/IIAY10nFu3Xt4ujtcK1mPHhPkdE6 TN1Qug52pwhfZ0fOsKwaMZWbWV6BUdprSAD9hnGoFE8UK2KXGYsYmb8LXMLjJhEd LqzZaaM4HXJN52aWPGcgpH3+MDEcUqUmY+4vhGM3I1f2u2opNJzaxozl2lZ0acQY gdg5uEd5BT+uBCdawQHtnsHdlOsGofu8Z70iSxw2RFe9W4cCfrJut4J9yGlXNHit BVDvThcvYZOs+IviEq1xsMfmxFTn54/X0037nT58YAp4CtbFOoPttg8Qrolb7Q3j v7+QbOxP209F5vV3t/gcnCOj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInM/vDa WLPB3gjPSl2VNvMeYzTvMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEG/2WsdDdUM+T9Zr3E+HK9Y9gnYokjenPTO0O77Lss+ppihZ3VKY7 T2GsrXRXYDW9NwtCZvSZ0LGFjJoWzftCuJpB3qNTik9kqhL/2G8Gbddd21YHHQfN 4DrnS3cclpIQ/pf959PB0B81Gonc9AB55JPNloAzrQERdwh2H4N8JT3ZOWu0Qmg1 UpFTcu1zfJ05ipIlWPKQ5SjqyL+5kQvgr7yQqlm7WJojqVPMyRFKXvvbkhArcMWh ioEhvgddkV/tKL6+XMX2hyFVForxdAu7eAuWaCEKM1A24E155jn0fhMMKByQcduJ fsHhfs/w/oCa6CNSw2Off31pSqckEc3T -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:54 2025 by rpki-client