$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json) Hash identifier: QOHQTnYulXPLW3q1xH9mpb7TPu8OyxQy7w/4z9jl/Zc= Subject key identifier: 79:10:38:BC:97:FE:FE:05:CC:9E:CC:1F:02:33:C3:BA:6E:6F:1D:CA Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft Manifest number: 03E7 Signing time: Mon 03 Nov 2025 00:31:29 +0000 Manifest this update: Mon 03 Nov 2025 00:31:28 +0000 Manifest next update: Mon 10 Nov 2025 00:31:28 +0000 Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: IZakfte0l3dYMF3U1OnJrhW2XKi5gWNRnXM2usxr3G0=) 2: 0D0600B08F8811F088E19383C4F9AE02.roa (hash: Oo7jcORgdKEGq+L9qexUXtYIgCiwKt24ZZvIPnQ3W9I=) 3: 3D40FCB88F8711F09B34137DC4F9AE02.roa (hash: q/QVu9DMFaSzQbJqSrX2Ep2nR7Y5rIPykBBb3kMELnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: Nov 3 00:31:28 2025 GMT Not After : Nov 10 00:31:28 2025 GMT Subject: CN=6907f7e1-dcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:41:f6:e1:b3:a9:72:2b:c7:75:15:0c:2a: f0:fc:2c:b7:bc:87:87:ab:06:2b:a6:3d:e2:0d:0e: 43:8c:c8:99:8e:c2:41:24:ac:cc:fc:39:88:8e:49: c3:40:5f:42:1e:fd:e3:b0:11:5b:ad:f4:31:33:fa: c1:a0:12:60:fe:75:c3:25:0a:bb:4c:bd:6e:bf:c4: 60:19:52:d8:f7:e4:8b:cc:13:06:86:44:60:f8:9a: 11:52:00:7b:8d:5b:4c:f6:72:1e:ce:c9:30:c9:de: d7:84:b4:5d:9f:a6:c0:f6:e7:ec:1e:ce:19:1f:51: 55:d1:64:ee:db:99:9e:31:0b:91:b9:b0:fe:b0:ae: 46:d3:8d:23:86:57:b6:ca:14:42:59:df:a1:84:01: 08:0a:fc:bf:41:b7:2c:75:39:e8:be:9c:61:27:7e: 02:6b:5b:6f:64:6d:11:c8:e1:b2:40:85:cf:e5:72: 62:60:70:ca:24:3b:b7:8b:36:3b:de:15:04:bf:e7: 05:c3:27:dd:03:8e:eb:85:d9:95:4d:25:3b:b0:04: e4:de:fd:63:62:b3:70:80:ea:75:1c:fd:26:1c:0a: 07:0d:f7:85:2d:e5:6d:b1:1d:ea:3a:73:f8:de:1b: dd:38:8e:63:e5:0a:4b:d9:86:39:e0:2c:06:54:63: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:10:38:BC:97:FE:FE:05:CC:9E:CC:1F:02:33:C3:BA:6E:6F:1D:CA X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5d:ab:fc:3f:e9:f1:a4:ef:02:c1:cc:09:09:75:ef:f3:08: f8:09:42:69:de:4e:11:03:07:4f:e3:55:b5:6d:d0:09:bb:ac: 1c:ed:b5:25:94:76:9f:fc:49:a7:85:59:b6:9c:03:f8:80:98: 33:a6:77:52:7b:2c:63:ec:06:20:e4:ea:12:8f:b3:ba:66:62: 0d:bf:57:6e:61:46:0c:db:67:f9:63:9a:86:da:9d:e2:81:f4: ff:98:7c:85:ce:78:52:82:89:4d:8c:be:9a:d1:c4:46:2d:2b: 6b:2f:d1:dd:f3:51:4f:3a:be:8a:e0:4d:d7:9d:ec:68:64:20: 68:01:ba:8d:e1:5e:6d:ba:01:ab:78:2d:19:a2:af:9b:0e:1d: 94:dd:26:a6:03:03:1b:b1:6a:45:80:1e:0b:b0:78:5b:ba:ef: 58:be:87:23:ef:fb:8a:a7:c1:40:aa:d7:a4:65:65:40:66:c7: 20:7f:da:bc:6c:bf:3e:c9:2c:87:ae:c6:ab:20:83:db:4f:f0: 3d:ff:b3:55:8c:32:31:42:9c:a1:ca:65:21:e6:2b:b9:51:db: 1c:9f:fa:d9:3b:fd:ce:3e:5d:d0:56:08:a6:e3:a6:a5:61:27: bb:a0:4d:4c:a8:27:bb:b5:c3:f5:81:c8:62:3d:c9:c6:76:b7: f8:08:c7:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjUxMTAzMDAzMTI4WhcNMjUxMTEwMDAzMTI4WjAYMRYwFAYD VQQDEw02OTA3ZjdlMS1kY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx9B9uGzqXIrx3UVDCrw/Cy3vIeHqwYrpj3iDQ5DjMiZjsJBJKzM/DmIjknD QF9CHv3jsBFbrfQxM/rBoBJg/nXDJQq7TL1uv8RgGVLY9+SLzBMGhkRg+JoRUgB7 jVtM9nIezskwyd7XhLRdn6bA9ufsHs4ZH1FV0WTu25meMQuRubD+sK5G040jhle2 yhRCWd+hhAEICvy/QbcsdTnovpxhJ34Ca1tvZG0RyOGyQIXP5XJiYHDKJDu3izY7 3hUEv+cFwyfdA47rhdmVTSU7sATk3v1jYrNwgOp1HP0mHAoHDfeFLeVtsR3qOnP4 3hvdOI5j5QpL2YY54CwGVGM0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkQOLyX /v4FzJ7MHwIzw7pubx3KMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr bU50VmNEWkdNRnlqZm5UN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOXav8P+nxpO8CwcwJCXXv8wj4CUJp3k4RAwdP41W1bdAJu6wc7bUl lHaf/EmnhVm2nAP4gJgzpndSeyxj7AYg5OoSj7O6ZmINv1duYUYM22f5Y5qG2p3i gfT/mHyFznhSgolNjL6a0cRGLStrL9Hd81FPOr6K4E3XnexoZCBoAbqN4V5tugGr eC0Zoq+bDh2U3SamAwMbsWpFgB4LsHhbuu9Yvocj7/uKp8FAqtekZWVAZscgf9q8 bL8+ySyHrsarIIPbT/A9/7NVjDIxQpyhymUh5iu5Udscn/rZO/3OPl3QVgim46al YSe7oE1MqCe7tcP1gchiPcnGdrf4CMdV -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:59 2025 by rpki-client