$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: o2+UElKsuUj9WmNXoBiBlwntLYT57QHWaO7IMI7M4bw= Subject key identifier: 46:13:4E:49:F3:FF:D9:A1:C1:CA:03:03:AD:75:98:6C:C6:50:F0:90 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2DCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DA9 Signing time: Sun 02 Nov 2025 15:30:19 +0000 Manifest this update: Sun 02 Nov 2025 15:30:18 +0000 Manifest next update: Sun 09 Nov 2025 15:30:18 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: nmjp7553h1Ei1kS9gLcWC0HAw5NLYzAjHrcEDtY8Maw=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11723 (0x2dcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Nov 2 15:30:18 2025 GMT Not After : Nov 9 15:30:18 2025 GMT Subject: CN=6907790b-1a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:65:88:08:28:01:23:26:13:c7:1b:8b:42: bc:af:8a:cc:27:b9:ac:d9:dd:5c:d7:2f:1b:ca:3c: e1:27:64:ba:12:c4:43:b6:5a:2e:fc:06:ce:7f:e6: 99:a2:49:1c:8b:15:40:ec:64:89:0a:12:4c:15:13: 0a:bb:4f:c2:c1:eb:55:89:f3:f9:2f:d2:e8:0d:b4: b9:8a:f7:6b:3a:fc:96:44:9e:86:69:23:98:9a:c7: d6:75:ca:68:56:54:2a:12:51:a4:0c:ce:3a:d5:d9: e9:8d:04:f8:ab:2f:3a:d6:4b:97:ab:35:2c:8e:b0: 0c:e5:0e:65:6b:12:9f:05:b6:60:e0:4f:cc:16:a7: 7a:61:fc:10:bc:8e:59:a6:73:9c:5f:0e:9a:00:81: 3c:9d:69:18:69:3c:de:ac:07:60:bf:34:bb:b1:15: a9:b4:7d:45:4a:cd:b5:cf:52:d9:2d:c6:ed:7f:c3: 4e:c0:bd:93:9e:28:d5:eb:74:82:fe:76:40:96:20: e3:a8:b5:95:0a:48:46:d6:2e:db:1a:d0:64:79:29: 73:88:21:cd:ca:38:a5:a0:34:6c:4f:9b:7e:27:26: 21:6e:67:35:04:75:b8:b4:32:cb:91:e2:b9:99:66: f8:60:60:72:72:63:b1:3b:53:bf:ce:4c:9a:e7:c6: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:13:4E:49:F3:FF:D9:A1:C1:CA:03:03:AD:75:98:6C:C6:50:F0:90 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3d:22:ed:a8:c8:e3:c6:d5:6b:79:12:01:a2:6c:c2:49:cc: 10:09:50:1a:72:54:86:5e:2f:a0:eb:bb:e4:29:9d:18:37:53: 2d:a9:cc:ee:5c:a6:6e:35:a4:d1:86:3f:bd:9c:8d:d2:0e:ac: 29:e0:03:bc:8d:50:49:03:5f:30:84:f3:68:84:64:74:d1:c1: 97:06:9f:78:a2:a0:62:6e:fa:ac:fc:7e:09:ec:61:a6:0c:7c: bb:fa:12:f1:c3:fd:6a:ed:67:3e:be:c0:e4:e7:19:70:9f:d6: bb:ce:71:40:1f:c2:b4:e7:ca:90:c0:83:24:70:98:fb:d5:85: 0b:c9:f0:14:e0:00:31:e0:6b:56:a7:5e:52:6c:fd:c7:a7:56: 34:8f:99:bf:c6:ce:01:0c:4c:d4:6c:6f:54:84:50:44:de:a3: 28:bc:e1:e9:5d:4b:f0:50:17:20:9f:5b:88:34:90:4d:a9:42: 34:25:3a:ab:19:45:9e:73:db:03:e3:da:4d:b1:7b:5c:41:47: 66:f6:ed:aa:fb:c4:5b:5d:a0:6f:69:39:14:c2:63:3b:86:ff: 38:23:9f:2f:ec:9e:dc:ba:88:a4:aa:10:04:c5:c7:69:78:f7: 59:78:6f:cd:1b:10:a6:87:0c:4b:2e:1c:52:45:60:7b:07:37: 59:43:71:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUxMTAyMTUzMDE4WhcNMjUxMTA5MTUzMDE4WjAYMRYwFAYD VQQDEw02OTA3NzkwYi0xYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4K1liAgoASMmE8cbi0K8r4rMJ7ms2d1c1y8byjzhJ2S6EsRDtlou/AbOf+aZ okkcixVA7GSJChJMFRMKu0/CwetVifP5L9LoDbS5ivdrOvyWRJ6GaSOYmsfWdcpo VlQqElGkDM461dnpjQT4qy861kuXqzUsjrAM5Q5laxKfBbZg4E/MFqd6YfwQvI5Z pnOcXw6aAIE8nWkYaTzerAdgvzS7sRWptH1FSs21z1LZLcbtf8NOwL2TnijV63SC /nZAliDjqLWVCkhG1i7bGtBkeSlziCHNyjiloDRsT5t+JyYhbmc1BHW4tDLLkeK5 mWb4YGBycmOxO1O/zkya58Zz1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYTTknz /9mhwcoDA611mGzGUPCQMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKPSLtqMjjxtVreRIBomzCScwQCVAaclSGXi+g67vkKZ0YN1Mtqczu XKZuNaTRhj+9nI3SDqwp4AO8jVBJA18whPNohGR00cGXBp94oqBibvqs/H4J7GGm DHy7+hLxw/1q7Wc+vsDk5xlwn9a7znFAH8K058qQwIMkcJj71YULyfAU4AAx4GtW p15SbP3Hp1Y0j5m/xs4BDEzUbG9UhFBE3qMovOHpXUvwUBcgn1uINJBNqUI0JTqr GUWec9sD49pNsXtcQUdm9u2q+8RbXaBvaTkUwmM7hv84I58v7J7cuoikqhAExcdp ePdZeG/NGxCmhwxLLhxSRWB7BzdZQ3H2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:53 2025 by rpki-client