$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: OAcm4U9qOweeQTRabZ5anQGr4libDf5xdWnV82z7H2E= Subject key identifier: C8:72:1B:75:05:67:D7:BB:D5:51:CA:88:F4:53:CA:67:A3:A1:32:99 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 9C Signing time: Mon 03 Nov 2025 06:21:54 +0000 Manifest this update: Mon 03 Nov 2025 06:21:53 +0000 Manifest next update: Mon 10 Nov 2025 06:21:53 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: QAm4R0rzPdtFmdqC9xUMU/pYZREME3OAJJ4PvIYVRjI=) 2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Nov 3 06:21:53 2025 GMT Not After : Nov 10 06:21:53 2025 GMT Subject: CN=69084a01-05e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:8e:a2:23:07:23:a1:3c:76:cb:f9:30:57: 43:b9:ff:8a:d3:fa:69:0f:98:a2:17:3d:83:6c:e5: ff:c5:32:c4:e6:78:48:5d:dd:e5:22:60:9e:26:01: d5:4a:1d:12:6c:12:f6:4e:6e:65:87:23:c2:d1:14: 0a:53:b4:64:ed:74:2a:af:5c:fa:b7:fd:1a:07:cf: fc:1b:c2:97:17:33:27:a8:8b:52:36:c3:b1:a6:dd: ed:04:43:9d:ce:ae:6a:ab:36:df:3b:10:19:71:b5: c8:68:d5:43:84:94:95:20:04:62:2f:a6:74:d2:5e: af:e2:a1:88:4e:db:a4:18:4a:1e:09:ab:de:75:73: 37:6f:05:3e:0b:a1:a7:a2:54:09:72:31:d8:19:8d: 90:70:a8:ff:ad:e9:b3:49:2e:e6:2b:17:b6:41:72: 92:06:84:d6:9d:9e:46:25:17:7a:dd:0b:41:ce:84: 51:b2:00:7e:6d:8d:94:ea:86:4b:28:61:d6:7d:c5: b7:6d:22:37:78:f7:86:c7:6b:2b:80:40:11:49:74: 6f:26:14:b6:2b:19:22:40:e7:7d:39:fc:18:9c:2f: 64:73:01:c1:57:83:a3:e6:af:b9:8e:8e:92:87:9f: 0e:d7:d4:34:74:83:1b:b5:62:b1:9f:07:8b:59:f0: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:1B:75:05:67:D7:BB:D5:51:CA:88:F4:53:CA:67:A3:A1:32:99 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:1e:b6:5f:27:75:b6:ba:ee:3d:c7:37:fa:2b:7f:19:d1:70: c8:2a:53:b8:3f:67:3b:4a:1d:1e:47:e8:33:49:3a:c7:62:d7: 82:2f:71:3f:2d:dd:52:60:20:c5:71:ab:aa:05:d4:58:9a:2c: 73:45:bc:b6:8e:58:1c:90:41:9f:1f:50:a7:31:34:52:8f:2f: b4:e0:78:57:cf:72:b2:d9:82:c1:f0:59:97:b6:25:37:61:0f: 67:59:0a:84:be:84:8d:fe:f5:89:25:03:5d:59:c2:3e:2b:e9: d4:28:2d:7a:00:9f:26:2c:5e:8a:8b:b8:64:77:c8:f9:eb:76: 92:d0:7a:a6:02:1c:26:09:16:46:ed:d9:93:3e:d3:d0:cb:50: 31:5d:e0:7c:d0:7f:b3:8f:e5:2d:de:a9:9e:64:96:48:54:21: 01:9c:5b:52:b5:e0:58:5b:62:16:3f:2e:70:8c:60:d6:b4:c8: 70:e6:f4:a8:60:e2:36:b7:ed:55:78:1e:fc:a1:82:25:4d:f3: 60:12:4c:91:2f:e2:25:3a:9e:26:2d:ce:ee:3d:4f:68:4a:83: de:1f:82:ec:b3:2a:07:0f:82:fe:59:cb:22:67:a4:29:98:f9: eb:6f:f9:bb:bb:84:5b:7b:f5:2d:d7:13:a2:dd:03:0f:30:e5: 66:6d:23:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjUxMTAzMDYyMTUzWhcNMjUxMTEwMDYyMTUzWjAYMRYwFAYD VQQDEw02OTA4NGEwMS0wNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoCOoiMHI6E8dsv5MFdDuf+K0/ppD5iiFz2DbOX/xTLE5nhIXd3lImCeJgHV Sh0SbBL2Tm5lhyPC0RQKU7Rk7XQqr1z6t/0aB8/8G8KXFzMnqItSNsOxpt3tBEOd zq5qqzbfOxAZcbXIaNVDhJSVIARiL6Z00l6v4qGITtukGEoeCavedXM3bwU+C6Gn olQJcjHYGY2QcKj/remzSS7mKxe2QXKSBoTWnZ5GJRd63QtBzoRRsgB+bY2U6oZL KGHWfcW3bSI3ePeGx2srgEARSXRvJhS2KxkiQOd9OfwYnC9kcwHBV4Oj5q+5jo6S h58O19Q0dIMbtWKxnweLWfBHaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhyG3UF Z9e71VHKiPRTymejoTKZMB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIHrZfJ3W2uu49xzf6K38Z0XDIKlO4P2c7Sh0eR+gzSTrHYteCL3E/ Ld1SYCDFcauqBdRYmixzRby2jlgckEGfH1CnMTRSjy+04HhXz3Ky2YLB8FmXtiU3 YQ9nWQqEvoSN/vWJJQNdWcI+K+nUKC16AJ8mLF6Ki7hkd8j563aS0HqmAhwmCRZG 7dmTPtPQy1AxXeB80H+zj+Ut3qmeZJZIVCEBnFtSteBYW2IWPy5wjGDWtMhw5vSo YOI2t+1VeB78oYIlTfNgEkyRL+IlOp4mLc7uPU9oSoPeH4LssyoHD4L+WcsiZ6Qp mPnrb/m7u4Rbe/Ut1xOi3QMPMOVmbSMS -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:11 2025 by rpki-client