$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: l7Nf5tAa/T99XUcTk+XdXWAY6hkBC+FnPyHZXTFJLy0= Subject key identifier: AB:17:73:59:C4:04:F5:57:2F:A5:E0:DE:DC:D1:81:AA:AF:63:E6:81 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: F7 Signing time: Thu 23 Oct 2025 07:08:46 +0000 Manifest this update: Thu 23 Oct 2025 07:08:45 +0000 Manifest next update: Thu 30 Oct 2025 07:08:45 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: ral7vVCNWuWnARsCjubZT8DGfSktoNp8A5QLmlS4A9w=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Oct 23 07:08:45 2025 GMT Not After : Oct 30 07:08:45 2025 GMT Subject: CN=68f9d47d-a226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:51:de:f7:00:2f:e2:3c:51:3d:de:d6:2c: 13:78:6b:1f:b2:e8:5a:02:a2:b9:6b:80:0e:80:81: 2b:e1:a6:c9:a3:df:48:1c:62:26:bb:19:11:87:62: 2b:c2:3a:ec:ce:02:a5:57:62:c6:95:4b:38:b7:f0: d2:c8:3c:f1:f0:89:66:fd:d7:2c:25:29:a4:46:75: 27:7a:71:a4:9a:f2:6d:c6:07:5d:e0:05:7c:ae:63: 94:37:9f:59:31:21:9a:86:bd:af:a6:1b:6a:c4:34: aa:0b:01:32:00:96:de:53:9a:20:53:28:ac:d0:e0: 5f:21:a8:29:f0:09:26:d9:2d:22:a1:e6:35:18:39: 56:79:9d:75:6e:21:08:35:ab:f8:f2:0f:ff:24:4c: 3a:10:6c:cc:4c:36:7b:cd:ea:a1:05:ea:eb:1c:bc: 27:04:b4:50:55:78:39:42:fc:e8:bc:99:0d:42:4b: ec:33:a5:57:2b:10:32:8b:d9:d0:9f:13:9b:b7:22: 02:b4:1a:b1:ea:b0:a2:02:48:9c:25:3b:22:61:cc: 63:92:db:f0:1a:b4:74:a7:5a:98:94:71:7f:b9:de: 19:90:8d:03:01:31:ab:09:0b:7e:96:90:b5:7f:26: 97:02:90:18:b3:08:90:49:80:a8:8d:d2:7e:0b:79: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:17:73:59:C4:04:F5:57:2F:A5:E0:DE:DC:D1:81:AA:AF:63:E6:81 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:53:d8:4f:14:9d:37:cd:b2:59:58:f4:be:b3:32:e8:ca:6f: 45:86:18:d4:ea:ab:1f:60:78:3d:93:fb:69:48:b4:c2:e9:02: 8e:da:37:fd:8f:92:67:59:48:4f:be:0c:e9:13:30:a5:ec:15: de:b2:17:f5:76:5d:c6:60:61:f5:11:0b:6e:a4:e9:75:47:4a: aa:87:43:ec:6e:be:a5:ff:19:3e:49:27:b8:de:0d:c6:62:f9: 86:d3:79:fc:60:44:6d:db:26:96:1c:2a:aa:2b:4a:b8:54:f8: b1:93:18:cc:65:84:dd:2a:d4:05:fa:33:a0:6d:60:1f:9f:ab: 28:30:86:81:0c:ec:37:d0:ea:45:bf:46:a0:70:19:c2:37:06: 65:72:d8:30:50:ba:b8:13:06:4e:5c:53:ac:b1:68:81:7a:dd: be:f7:2c:41:8a:be:be:a6:2f:74:70:57:d2:f6:7a:a9:a0:23: e5:64:2f:54:dd:80:53:08:d8:14:64:80:b8:68:26:6d:cb:eb: 0d:eb:fb:2f:c9:06:b2:50:9d:76:82:e0:f9:9a:5a:e1:9f:33: 3c:59:06:3b:16:c7:45:3f:7b:2c:bd:ee:c6:38:d7:2e:5f:6c: 9d:4a:2a:43:d5:1d:2d:7a:db:e9:28:47:00:c2:b7:d2:31:c3: 95:c4:9a:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUxMDIzMDcwODQ1WhcNMjUxMDMwMDcwODQ1WjAYMRYwFAYD VQQDEw02OGY5ZDQ3ZC1hMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv1R3vcAL+I8UT3e1iwTeGsfsuhaAqK5a4AOgIEr4abJo99IHGImuxkRh2Ir wjrszgKlV2LGlUs4t/DSyDzx8Ilm/dcsJSmkRnUnenGkmvJtxgdd4AV8rmOUN59Z MSGahr2vphtqxDSqCwEyAJbeU5ogUyis0OBfIagp8Akm2S0ioeY1GDlWeZ11biEI Nav48g//JEw6EGzMTDZ7zeqhBerrHLwnBLRQVXg5QvzovJkNQkvsM6VXKxAyi9nQ nxObtyICtBqx6rCiAkicJTsiYcxjktvwGrR0p1qYlHF/ud4ZkI0DATGrCQt+lpC1 fyaXApAYswiQSYCojdJ+C3mSnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsXc1nE BPVXL6Xg3tzRgaqvY+aBMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeU9hPFJ03zbJZWPS+szLoym9FhhjU6qsfYHg9k/tpSLTC6QKO2jf9 j5JnWUhPvgzpEzCl7BXeshf1dl3GYGH1EQtupOl1R0qqh0Psbr6l/xk+SSe43g3G YvmG03n8YERt2yaWHCqqK0q4VPixkxjMZYTdKtQF+jOgbWAfn6soMIaBDOw30OpF v0agcBnCNwZlctgwULq4EwZOXFOssWiBet2+9yxBir6+pi90cFfS9nqpoCPlZC9U 3YBTCNgUZIC4aCZty+sN6/svyQayUJ12guD5mlrhnzM8WQY7FsdFP3ssve7GONcu X2ydSipD1R0tetvpKEcAwrfSMcOVxJo8 -----END CERTIFICATE-----Generated at Fri Oct 24 06:01:57 2025 by rpki-client