$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: NJ+0wyMSAZXa24q9OagpVqJAqkdQLW8NevAXrfiRFq0= Subject key identifier: EF:70:FD:79:19:95:F4:5B:F6:9E:D5:92:C4:8C:EA:0D:C9:E8:81:15 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 281E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 2810 Signing time: Sun 02 Nov 2025 15:36:35 +0000 Manifest this update: Sun 02 Nov 2025 15:36:35 +0000 Manifest next update: Sun 09 Nov 2025 15:36:35 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: pko5L0iG/Yq+qkKQN9Or5befNrW25ogIxD+y9MjJR8Q=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10270 (0x281e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Nov 2 15:36:35 2025 GMT Not After : Nov 9 15:36:35 2025 GMT Subject: CN=69077a83-f59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:c5:a6:12:37:79:28:76:6c:2a:45:aa:80: df:c8:59:1a:3f:a4:36:58:71:48:f5:a3:a5:ca:80: a0:fe:f8:56:de:7d:d7:68:6f:ef:a5:f2:26:57:07: c9:9c:d7:e0:a6:c1:34:56:ea:c6:c9:49:45:8d:76: a1:54:9d:2c:6b:ec:f9:e2:3a:74:0f:be:72:2b:3e: 73:50:3d:c2:bf:45:dc:29:e0:94:5e:3b:f4:2b:ce: c6:00:7a:0e:b0:7b:1c:50:36:1a:2a:ef:fd:93:be: f3:4e:3e:a8:bc:f6:b5:19:88:d1:3b:cf:b9:97:c6: a3:a4:de:ef:35:78:18:80:08:0e:27:49:ef:be:6f: 23:cb:2e:80:b8:c6:c5:4a:b5:bc:db:8a:f4:7f:73: 46:ad:74:89:5a:e3:94:e4:60:08:04:21:f1:f4:d5: 1d:62:5a:c6:e0:d4:c2:16:d4:ba:c6:8e:67:a6:27: 33:3f:58:a1:62:d3:a9:9d:f7:56:c3:c6:20:0f:12: eb:60:51:d0:3b:4a:16:a7:65:19:59:2e:36:90:b1: fe:88:86:87:f2:73:44:a9:99:8c:b0:75:50:5a:ec: d6:c9:cf:6f:9f:a8:6c:ec:1c:42:46:02:ff:ef:6f: 89:bd:14:fe:7c:4e:77:04:29:da:45:ab:9e:0e:a0: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:70:FD:79:19:95:F4:5B:F6:9E:D5:92:C4:8C:EA:0D:C9:E8:81:15 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:73:50:3c:7e:ef:cd:f6:70:6e:9f:fe:3e:05:5c:11:2d:3a: 25:ea:60:50:b8:4e:b2:a0:66:a9:c7:9d:62:a6:da:d3:59:d4: c0:b5:5a:ab:8e:69:7f:dd:5e:87:c2:34:16:08:04:bd:ab:2e: 07:27:1f:ba:5e:e6:c8:6d:81:98:22:2e:4b:60:f1:89:7b:42: 6f:16:0c:16:f8:4c:40:de:9c:ef:63:6a:0f:72:d9:6a:d0:f0: 08:92:4f:48:1f:20:7e:41:a7:d7:bc:1f:18:18:73:6f:db:da: 70:fb:e9:b8:ed:9f:8e:b1:4a:19:d3:0c:d9:3f:8c:b9:48:34: 9f:53:5a:f6:40:37:f1:91:91:98:73:7c:81:b3:a9:2f:2f:a5: 38:46:11:d3:8d:ff:86:84:71:9f:40:8b:8b:42:8f:46:7e:ce: 34:9c:18:84:e9:1a:6b:ae:92:1f:1c:1b:7f:a2:49:d3:2b:99: bb:18:d1:83:27:d2:58:42:00:fe:b1:e3:92:28:4e:18:ef:65: e5:1d:6c:02:67:2c:ed:a6:0f:33:89:13:ef:3d:73:40:e0:19: 98:1b:a3:d4:8b:8e:f4:25:d1:19:73:25:a0:f2:7f:84:85:80: 51:67:0c:ca:1f:85:f5:73:a1:bf:5f:ec:d5:63:b3:7c:54:73: 1b:b3:01:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUxMTAyMTUzNjM1WhcNMjUxMTA5MTUzNjM1WjAYMRYwFAYD VQQDEw02OTA3N2E4My1mNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+/FphI3eSh2bCpFqoDfyFkaP6Q2WHFI9aOlyoCg/vhW3n3XaG/vpfImVwfJ nNfgpsE0VurGyUlFjXahVJ0sa+z54jp0D75yKz5zUD3Cv0XcKeCUXjv0K87GAHoO sHscUDYaKu/9k77zTj6ovPa1GYjRO8+5l8ajpN7vNXgYgAgOJ0nvvm8jyy6AuMbF SrW824r0f3NGrXSJWuOU5GAIBCHx9NUdYlrG4NTCFtS6xo5npiczP1ihYtOpnfdW w8YgDxLrYFHQO0oWp2UZWS42kLH+iIaH8nNEqZmMsHVQWuzWyc9vn6hs7BxCRgL/ 72+JvRT+fE53BCnaRaueDqDpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9w/XkZ lfRb9p7VksSM6g3J6IEVMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEc1A8fu/N9nBun/4+BVwRLTol6mBQuE6yoGapx51iptrTWdTAtVqr jml/3V6HwjQWCAS9qy4HJx+6XubIbYGYIi5LYPGJe0JvFgwW+ExA3pzvY2oPctlq 0PAIkk9IHyB+QafXvB8YGHNv29pw++m47Z+OsUoZ0wzZP4y5SDSfU1r2QDfxkZGY c3yBs6kvL6U4RhHTjf+GhHGfQIuLQo9Gfs40nBiE6RprrpIfHBt/oknTK5m7GNGD J9JYQgD+seOSKE4Y72XlHWwCZyztpg8ziRPvPXNA4BmYG6PUi470JdEZcyWg8n+E hYBRZwzKH4X1c6G/X+zVY7N8VHMbswEM -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:01 2025 by rpki-client