$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json) Hash identifier: 2SqAnp1kKYprDXylTyioyHyFVBeod2JoCm4hif67Iwg= Subject key identifier: 29:B8:6E:FC:FE:D9:E5:53:C2:1C:91:B1:DB:0F:EA:CE:73:3D:7A:43 Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft Manifest number: 26 Signing time: Wed 05 Nov 2025 07:54:54 +0000 Manifest this update: Wed 05 Nov 2025 07:54:53 +0000 Manifest next update: Wed 12 Nov 2025 07:54:53 +0000 Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: /1H6aFCgaAGJij7bWQ5q6Q8g3dwckcZMkBJzlgaU2mE=) 2: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: xv17VJj9Z62Ap1eQ6wyQIWX3LAvgQ0GTCnvzjSZOamo=) 3: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: VeOkRBTtnPVxgdS7nS+oqKH6bah9raHqhmGVL/DThKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Validity Not Before: Nov 5 07:54:53 2025 GMT Not After : Nov 12 07:54:53 2025 GMT Subject: CN=690b02cd-5e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:d4:6b:1a:26:d7:a8:6b:cc:41:c0:84:f3: 1b:eb:8b:9d:82:af:3a:75:4a:13:09:cb:67:58:72: 0d:e3:65:fe:8d:60:f5:25:7f:fc:62:31:53:db:10: 81:48:56:12:4a:82:ac:7c:a8:0c:4a:f6:bd:57:fb: c4:84:57:ca:3c:42:d7:80:16:a6:8b:2f:37:db:d8: 6f:41:3d:be:28:f6:be:37:0d:c0:6d:ed:fc:cd:38: 71:1f:31:c9:3f:46:bd:11:81:ee:26:d3:6f:39:ae: 47:25:c1:7d:4e:f9:8f:32:06:55:e0:cd:94:2c:dd: 07:9a:95:f4:48:ec:4a:6f:b6:9a:75:f8:be:1c:31: 48:67:ed:26:38:bc:e8:cd:35:82:c4:90:0e:dc:47: a7:14:f6:30:da:93:6f:1f:e0:a1:ea:bf:e4:79:e8: 30:21:05:89:6b:a7:7d:d8:ca:74:70:ff:a4:89:00: 57:79:7f:69:f7:8d:62:05:ba:3d:51:ac:af:cd:95: d5:55:25:73:f3:c9:4f:43:2f:9a:d5:af:d2:04:e0: 66:67:89:86:38:b8:8d:0c:69:2c:c8:57:97:16:39: 51:c1:e6:bd:25:78:99:35:fb:29:9d:05:6f:b1:eb: d3:e1:f1:15:43:08:e0:60:e9:05:38:25:f2:34:9a: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B8:6E:FC:FE:D9:E5:53:C2:1C:91:B1:DB:0F:EA:CE:73:3D:7A:43 X509v3 Authority Key Identifier: keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:44:22:c5:3b:3e:c6:ed:f7:61:14:9b:f8:07:45:eb:85: 2d:77:c2:97:f0:d4:33:25:a0:5a:f6:7a:ab:c8:e4:8d:a8:58: 0a:75:3a:8d:cb:f5:d1:f0:11:5d:dc:8e:a0:19:d1:ed:00:b0: 41:95:5c:a5:e5:83:7f:c1:bb:5f:96:d2:d7:df:1f:5f:dc:11: c4:96:6f:51:a5:92:a8:0e:09:ba:94:e3:e5:8e:03:71:a6:41: 21:a6:16:5d:97:73:ff:3d:07:da:0e:c5:9f:13:82:11:28:38: be:af:a9:bd:b9:fb:9b:28:73:91:af:b3:80:25:98:ea:73:1a: cf:8a:17:ac:97:e2:2e:74:47:3e:c9:b9:8c:1f:3f:fa:43:58: 6d:da:26:88:6f:7f:79:80:d6:d2:09:1f:ce:b1:72:74:2c:91: ea:40:eb:66:86:a4:b5:87:ec:8f:5c:01:f3:20:1a:53:43:85: b9:cb:46:bf:64:7e:fb:1b:9c:d5:79:69:fc:24:72:54:fc:ec: 10:5f:87:f3:70:ed:c2:b4:5c:1b:1a:63:d9:f9:3d:44:39:60: a7:f5:6b:99:4c:b3:d1:0b:a8:d5:8e:2f:8d:b2:4f:a6:75:70: b7:df:03:f6:72:92:f4:e7:e4:f5:72:ff:bb:6a:40:4d:42:bc: e6:99:09:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY5QzExMC8GA1UEBRMoNjZBQjRFQjk2MjlEMjZGOTdFMjQ4QThDMzI0NDU4NzNC N0UzQzBGODAeFw0yNTExMDUwNzU0NTNaFw0yNTExMTIwNzU0NTNaMBgxFjAUBgNV BAMTDTY5MGIwMmNkLTVlNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1i9RrGibXqGvMQcCE8xvri52Crzp1ShMJy2dYcg3jZf6NYPUlf/xiMVPbEIFI VhJKgqx8qAxK9r1X+8SEV8o8QteAFqaLLzfb2G9BPb4o9r43DcBt7fzNOHEfMck/ Rr0Rge4m0285rkclwX1O+Y8yBlXgzZQs3QealfRI7Epvtpp1+L4cMUhn7SY4vOjN NYLEkA7cR6cU9jDak28f4KHqv+R56DAhBYlrp33YynRw/6SJAFd5f2n3jWIFuj1R rK/NldVVJXPzyU9DL5rVr9IE4GZniYY4uI0MaSzIV5cWOVHB5r0leJk1+ymdBW+x 69Ph8RVDCOBg6QU4JfI0mtCPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKbhu/P7Z 5VPCHJGx2w/qznM9ekMwHwYDVR0jBBgwFoAUZqtOuWKdJvl+JIqMMkRYc7fjwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjlDLzlBOEZCNTRFODI2 QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZsLUpJcU1Na1JZYzdmandQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnF0T3VXS2RKdmwtSklxTU1rUlljN2Zqd1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjlDLzlBOEZCNTRFODI2QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZs LUpJcU1Na1JZYzdmandQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGOhRCLFOz7G7fdhFJv4B0XrhS13wpfw1DMloFr2eqvI5I2oWAp1Oo3L 9dHwEV3cjqAZ0e0AsEGVXKXlg3/Bu1+W0tffH1/cEcSWb1GlkqgOCbqU4+WOA3Gm QSGmFl2Xc/89B9oOxZ8TghEoOL6vqb25+5soc5Gvs4AlmOpzGs+KF6yX4i50Rz7J uYwfP/pDWG3aJohvf3mA1tIJH86xcnQskepA62aGpLWH7I9cAfMgGlNDhbnLRr9k fvsbnNV5afwkclT87BBfh/Nw7cK0XBsaY9n5PUQ5YKf1a5lMs9ELqNWOL42yT6Z1 cLffA/ZykvTn5PVy/7tqQE1CvOaZCV4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:29 2025 by rpki-client