$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: iT0Lf8N3COh0dmHUg8MhnWaubrrAw6OlEAIb2WXah4Q= Subject key identifier: 17:C6:2C:AE:51:C5:86:92:2E:D2:2D:96:92:F3:67:A9:C8:5D:34:84 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 7B Signing time: Wed 05 Nov 2025 06:59:28 +0000 Manifest this update: Wed 05 Nov 2025 06:59:28 +0000 Manifest next update: Wed 12 Nov 2025 06:59:28 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: 1TQdUM0NFbMIvA+Ig4Vw2k9YHYSiTPAN6tEdTi9Z9Hc=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Nov 5 06:59:28 2025 GMT Not After : Nov 12 06:59:28 2025 GMT Subject: CN=690af5d0-bc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:0c:05:45:07:41:04:ed:17:1c:7c:42:e6: c1:a4:ac:99:09:1b:3f:e1:f8:07:2c:c7:b7:26:9b: e4:d5:0b:84:0b:c2:b9:5d:60:7b:8d:7e:80:51:16: 16:2c:5b:7f:c1:0d:f5:fd:d2:95:e2:65:43:12:28: b5:a9:3a:59:26:f2:c5:41:4b:5b:63:8a:a5:06:c1: 56:12:84:2a:be:cd:3d:6f:2f:1d:1e:be:dc:c9:6b: 59:d7:3d:60:7e:b0:b9:6a:d5:bc:90:48:6c:06:2d: 9f:05:49:61:64:9f:35:26:1e:a4:7a:df:21:98:df: 71:92:00:df:09:5e:0d:a8:d3:9c:30:73:2c:65:3d: ab:9a:8e:a5:63:3a:e0:c0:d4:77:f7:25:70:3a:6e: a7:52:4a:1f:b3:c1:ce:3d:30:0b:94:07:f2:21:35: ac:aa:83:22:a8:1d:6d:21:97:d2:ca:e4:95:dc:38: 73:7b:be:55:c7:00:c9:18:ce:4e:42:b6:cf:3a:ed: 9d:aa:a9:ac:e8:97:0a:52:84:3f:c2:45:69:53:17: d6:2c:e7:d2:2c:f8:f4:85:18:4d:df:18:d3:57:a4: ed:38:64:9b:8f:ef:4e:2a:0e:e9:e7:10:f3:41:c6: bd:37:c8:67:0f:06:48:2f:0a:c7:5b:00:7d:56:e3: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:2C:AE:51:C5:86:92:2E:D2:2D:96:92:F3:67:A9:C8:5D:34:84 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ac:eb:af:6d:32:99:2e:5e:e8:d1:52:a4:29:36:13:a1:a3: d5:da:76:3a:34:6d:10:f0:71:65:7b:32:f6:75:bb:13:cb:7f: 56:a4:46:3a:dc:20:c2:34:cc:a0:9e:fa:09:96:01:0d:75:ee: 52:9d:3e:fa:af:95:c5:22:75:64:6d:0f:95:bf:a9:f4:ab:85: 5b:72:b7:1f:34:3c:1f:f2:a1:e6:e4:ae:e7:20:2d:db:ab:4b: fc:bd:1e:0e:37:ea:2b:5f:f8:b9:1f:b0:ad:31:7e:3b:a6:e3: a4:6d:ae:63:2a:02:1d:56:e1:99:a2:41:35:2b:d0:11:b5:f5: 1c:6a:74:dc:3b:9f:44:d7:5d:4e:54:2f:99:01:be:6a:66:fe: b5:c4:7d:d2:92:e6:dd:9b:16:70:31:00:10:4d:82:35:35:a7: 04:20:5e:53:b3:dd:a0:6d:ea:e6:7f:15:4a:90:48:8e:ae:58: 33:28:8e:12:7e:d8:a1:2f:be:39:a8:9c:d7:85:b1:19:c2:b4: fc:83:97:1a:fb:b0:03:fb:f3:83:f0:b4:cb:1f:a7:1e:07:5d: 64:4c:52:78:0a:00:52:e4:11:95:17:e8:33:96:33:13:5f:22: 96:31:bc:63:a1:39:be:37:17:77:da:69:1c:c2:7f:17:a2:4d: b8:ba:1e:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTExMDUwNjU5MjhaFw0yNTExMTIwNjU5MjhaMBgxFjAUBgNV BAMTDTY5MGFmNWQwLWJjNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS8AwFRQdBBO0XHHxC5sGkrJkJGz/h+Acsx7cmm+TVC4QLwrldYHuNfoBRFhYs W3/BDfX90pXiZUMSKLWpOlkm8sVBS1tjiqUGwVYShCq+zT1vLx0evtzJa1nXPWB+ sLlq1byQSGwGLZ8FSWFknzUmHqR63yGY33GSAN8JXg2o05wwcyxlPauajqVjOuDA 1Hf3JXA6bqdSSh+zwc49MAuUB/IhNayqgyKoHW0hl9LK5JXcOHN7vlXHAMkYzk5C ts867Z2qqazolwpShD/CRWlTF9Ys59Is+PSFGE3fGNNXpO04ZJuP704qDunnEPNB xr03yGcPBkgvCsdbAH1W4217AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF8YsrlHF hpIu0i2WkvNnqchdNIQwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACus669tMpkuXujRUqQpNhOho9Xadjo0bRDwcWV7MvZ1uxPLf1akRjrc IMI0zKCe+gmWAQ117lKdPvqvlcUidWRtD5W/qfSrhVtytx80PB/yoebkrucgLdur S/y9Hg436itf+LkfsK0xfjum46RtrmMqAh1W4ZmiQTUr0BG19RxqdNw7n0TXXU5U L5kBvmpm/rXEfdKS5t2bFnAxABBNgjU1pwQgXlOz3aBt6uZ/FUqQSI6uWDMojhJ+ 2KEvvjmonNeFsRnCtPyDlxr7sAP784PwtMsfpx4HXWRMUngKAFLkEZUX6DOWMxNf IpYxvGOhOb43F3faaRzCfxeiTbi6Hus= -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:39 2025 by rpki-client