$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: 33MGFoLdVJ6YXqGZzuFppqqO4VYhziyXIuSLt5wwSDs= Subject key identifier: 6D:9B:E7:8C:F6:74:DA:2F:BB:4E:51:1E:C9:FD:64:E3:7A:C8:B1:05 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1B00 Signing time: Tue 04 Nov 2025 16:24:13 +0000 Manifest this update: Tue 04 Nov 2025 16:24:13 +0000 Manifest next update: Tue 11 Nov 2025 16:24:13 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: Azge8RzzRfy5R+Uoeo60c3a1i4m2LdGx07mhS54FkKg=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: KiWJOvCe66mFAiJ0qYL+AaD4VB+ASk4GdSBTzbRbNlw=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6961 (0x1b31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Nov 4 16:24:13 2025 GMT Not After : Nov 11 16:24:13 2025 GMT Subject: CN=690a28ad-a87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:9b:0c:62:06:4f:7a:6f:24:da:df:ff:bd: 61:d3:1a:75:9a:7e:5b:9b:66:3b:6e:bd:c6:a9:5c: 93:28:57:7f:01:0e:04:e7:90:6a:b9:e8:39:9c:8d: cf:3e:da:8c:b4:c4:fb:79:18:2c:53:4f:22:52:ec: 1a:38:dd:7f:2f:da:97:6a:ca:4f:24:31:88:cb:67: 17:7a:ad:ef:ca:67:08:95:ac:91:30:6b:d4:c8:4e: 44:f8:48:73:d4:40:02:8f:f4:8f:14:0b:ce:7c:1b: df:e1:e7:fc:05:4f:4d:70:c2:8d:d3:c8:fa:79:8a: 9c:b2:fc:1c:88:6d:29:b9:07:98:74:45:95:e8:6f: bf:ff:39:bd:db:54:52:39:c7:7a:fd:c7:45:4d:a4: b5:34:2a:fe:83:b3:1c:26:e0:81:42:a4:3f:43:ab: d1:0e:a5:3e:cd:81:7c:33:ec:8c:60:79:2b:4f:ce: cd:b8:92:bf:3b:ed:d8:da:6a:fa:c9:ca:77:73:87: 9e:71:cf:ae:a6:5c:1f:46:c1:b4:81:9c:1d:c0:05: 68:2f:b3:a1:44:c2:67:7a:42:44:24:42:c9:45:11: 18:85:9b:b0:84:c7:63:39:5a:eb:21:23:db:64:01: b7:10:f5:25:c9:e4:22:d5:1a:ee:99:28:f7:12:e5: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9B:E7:8C:F6:74:DA:2F:BB:4E:51:1E:C9:FD:64:E3:7A:C8:B1:05 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:dd:5e:c0:06:71:3c:f9:a7:b7:dc:c9:bd:2b:2c:1a:81:c2: a7:ac:a3:20:cb:2b:4c:df:5e:8a:a7:43:86:f6:1b:5b:4e:a6: 1a:e9:1d:96:6f:52:98:f5:e5:0a:e9:00:5f:47:88:62:b5:48: d3:82:4e:4c:0b:80:45:0e:5d:68:76:61:a4:9b:eb:b9:f2:0b: 71:0a:31:c2:9a:2f:47:32:6e:16:1e:35:86:d2:a4:4c:3e:14: a6:5f:57:11:ad:07:10:e5:2f:6f:76:f1:df:6b:b4:98:59:6d: 7c:21:35:1c:d7:8c:1c:85:46:33:bd:0a:09:3f:24:8e:40:69: 8f:a2:b6:54:44:5a:97:fe:e5:45:4a:17:47:48:4e:d2:75:a7: f3:7e:8a:1e:6c:19:41:cf:9f:c7:cd:ce:82:c0:c6:f7:8e:53: 9c:3c:e8:40:4f:f7:72:aa:6f:3c:90:83:54:9c:cb:72:e6:93: 38:57:f3:1b:6c:54:f7:86:72:e4:f9:c7:ee:ba:1f:db:b3:71: 1c:26:aa:ce:38:65:12:80:15:62:d9:72:6e:3d:fa:8e:9d:8d: fd:e7:84:b4:67:9f:43:9b:05:4f:d1:8e:5b:a0:1f:93:6e:8b: 4b:ef:41:6f:ff:fb:99:4e:4c:d3:8d:46:27:66:86:52:68:47: 9f:45:d6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUxMTA0MTYyNDEzWhcNMjUxMTExMTYyNDEzWjAYMRYwFAYD VQQDEw02OTBhMjhhZC1hODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aebDGIGT3pvJNrf/71h0xp1mn5bm2Y7br3GqVyTKFd/AQ4E55Bqueg5nI3P PtqMtMT7eRgsU08iUuwaON1/L9qXaspPJDGIy2cXeq3vymcIlayRMGvUyE5E+Ehz 1EACj/SPFAvOfBvf4ef8BU9NcMKN08j6eYqcsvwciG0puQeYdEWV6G+//zm921RS Ocd6/cdFTaS1NCr+g7McJuCBQqQ/Q6vRDqU+zYF8M+yMYHkrT87NuJK/O+3Y2mr6 ycp3c4eecc+uplwfRsG0gZwdwAVoL7OhRMJnekJEJELJRREYhZuwhMdjOVrrISPb ZAG3EPUlyeQi1RrumSj3EuUwLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2b54z2 dNovu05RHsn9ZON6yLEFMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE3V7ABnE8+ae33Mm9KywagcKnrKMgyytM316Kp0OG9htbTqYa6R2W b1KY9eUK6QBfR4hitUjTgk5MC4BFDl1odmGkm+u58gtxCjHCmi9HMm4WHjWG0qRM PhSmX1cRrQcQ5S9vdvHfa7SYWW18ITUc14wchUYzvQoJPySOQGmPorZURFqX/uVF ShdHSE7SdafzfooebBlBz5/Hzc6CwMb3jlOcPOhAT/dyqm88kINUnMty5pM4V/Mb bFT3hnLk+cfuuh/bs3EcJqrOOGUSgBVi2XJuPfqOnY3954S0Z59DmwVP0Y5boB+T botL70Fv//uZTkzTjUYnZoZSaEefRdYm -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:22 2025 by rpki-client