$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: VB5XmPa0qEShEPjIQDfjhwQoZxEcrLOHNUlfuYqyOIw= Subject key identifier: 15:25:58:F8:B1:39:7C:26:E8:B2:67:85:81:4D:E2:16:95:E6:0B:05 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0D01 Signing time: Fri 24 Oct 2025 17:16:20 +0000 Manifest this update: Fri 24 Oct 2025 17:16:20 +0000 Manifest next update: Fri 31 Oct 2025 17:16:20 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: GhHTts23+6DViGNrwTuOEPZTh2v+V9jibEvrwL4VKPk=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: r61Y1na2DnCg+opz0fva/EXKcH2bwZStVIeQ3Bbr1wo=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: OUewL85nRVoETpSnxouJtXZ3L1bDXbwRe3ztxVw9Gdo=) 4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: yz6cPbrGtJIldpvpKFq33oioRd0XMIpT6Kvyi0FmqD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Oct 24 17:16:20 2025 GMT Not After : Oct 31 17:16:20 2025 GMT Subject: CN=68fbb464-e3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:e7:9c:88:fc:c5:02:03:7b:a6:b0:d8:a1: 0f:60:8b:23:10:d5:f4:36:90:47:0f:be:96:59:19: 87:0c:ed:f3:ab:ce:bf:5d:24:5f:df:3f:04:de:ef: 18:85:e9:f7:d4:ea:e8:5e:6d:b6:b0:ce:8d:ea:d3: 44:67:09:17:23:54:6d:7d:40:bf:ab:f2:b9:24:18: 38:c7:27:f3:2c:f1:4b:dc:62:6f:1e:b3:b4:38:86: 3b:17:4b:28:68:75:87:17:d8:e7:35:68:33:0a:95: 1b:2a:27:49:86:ee:01:e9:76:ad:89:2c:e4:3c:5d: ab:82:64:73:69:d3:5f:70:21:cb:4e:61:cf:f9:8f: 76:3b:95:1f:83:e9:b8:ae:38:61:c3:dd:78:78:f9: 05:d3:81:c7:5c:36:ff:20:b3:ca:48:da:4a:dc:77: 69:bf:0a:65:49:b6:29:fb:78:8a:4e:91:10:1d:e0: 73:94:fc:78:93:3e:91:b4:7a:b0:b8:b7:ee:60:c2: 9c:4d:a5:3c:fa:f8:25:b0:fa:c4:dd:44:61:58:df: ca:09:cc:de:46:51:f4:46:51:79:67:06:a4:3a:d4: 3b:d4:3b:47:17:02:a6:92:c1:1d:12:dc:cd:c2:fb: 4d:26:1a:37:1a:7c:92:e9:c4:ef:0c:7d:ab:81:1e: 99:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:25:58:F8:B1:39:7C:26:E8:B2:67:85:81:4D:E2:16:95:E6:0B:05 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8c:17:15:8e:66:2b:cf:5d:c3:ca:b4:12:b2:f5:69:ff:76: b3:79:87:03:12:fc:ad:49:fe:14:52:22:42:58:ac:68:18:d8: 96:82:69:29:eb:c1:50:91:02:bd:e5:8e:f8:42:60:ba:af:ad: 4b:35:33:a0:41:ef:f3:2a:b3:d0:97:36:cf:00:3b:7c:5f:8d: 44:b8:4f:49:d9:4a:dd:ff:e5:70:c4:5a:a8:49:55:9f:11:5d: a6:67:8b:63:e3:c7:7a:71:74:d5:93:da:33:50:a1:e6:c3:36: f3:d4:b8:98:ff:4e:dd:8f:de:94:3e:2b:27:bf:c4:2c:c9:9e: d4:0a:16:de:aa:2b:b2:a5:91:ea:bd:aa:9e:44:df:53:b6:4d: d7:e0:24:c6:b5:11:6b:a6:3c:f6:5f:33:77:ed:22:c6:99:26: 6f:fc:9d:2c:4a:b2:99:c1:d5:b9:a8:1a:bf:e8:e8:a6:c1:c8: ce:33:72:62:5b:bc:2d:41:3c:0c:45:55:20:b9:7c:7d:39:4d: 79:17:76:29:a5:3d:1a:3b:d8:4b:63:b0:06:3e:3e:80:37:81: 5c:8e:ab:5b:fd:0b:51:d2:e3:8b:ad:00:40:27:9b:47:42:6b: 04:d3:7d:8d:47:8b:2b:fc:97:46:f9:57:7a:a9:bf:a6:b8:a4: e6:68:a4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUxMDI0MTcxNjIwWhcNMjUxMDMxMTcxNjIwWjAYMRYwFAYD VQQDEw02OGZiYjQ2NC1lM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7jnnIj8xQIDe6aw2KEPYIsjENX0NpBHD76WWRmHDO3zq86/XSRf3z8E3u8Y hen31OroXm22sM6N6tNEZwkXI1RtfUC/q/K5JBg4xyfzLPFL3GJvHrO0OIY7F0so aHWHF9jnNWgzCpUbKidJhu4B6XatiSzkPF2rgmRzadNfcCHLTmHP+Y92O5Ufg+m4 rjhhw914ePkF04HHXDb/ILPKSNpK3HdpvwplSbYp+3iKTpEQHeBzlPx4kz6RtHqw uLfuYMKcTaU8+vglsPrE3URhWN/KCczeRlH0RlF5ZwakOtQ71DtHFwKmksEdEtzN wvtNJho3GnyS6cTvDH2rgR6ZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUlWPix OXwm6LJnhYFN4haV5gsFMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHjBcVjmYrz13DyrQSsvVp/3azeYcDEvytSf4UUiJCWKxoGNiWgmkp 68FQkQK95Y74QmC6r61LNTOgQe/zKrPQlzbPADt8X41EuE9J2Urd/+VwxFqoSVWf EV2mZ4tj48d6cXTVk9ozUKHmwzbz1LiY/07dj96UPisnv8QsyZ7UChbeqiuypZHq vaqeRN9Ttk3X4CTGtRFrpjz2XzN37SLGmSZv/J0sSrKZwdW5qBq/6OimwcjOM3Ji W7wtQTwMRVUguXx9OU15F3YppT0aO9hLY7AGPj6AN4Fcjqtb/QtR0uOLrQBAJ5tH QmsE032NR4sr/JdG+Vd6qb+muKTmaKSk -----END CERTIFICATE-----Generated at Sat Oct 25 17:39:47 2025 by rpki-client