$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: 7PkjdBnZPEU3zwdO01tnrc0U67DhOExx6NRDJ38vWJg= Subject key identifier: 10:FE:3E:F2:07:B1:1C:1A:81:F9:FC:A5:51:F4:4A:D8:4D:6B:A4:FA Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 100A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FF5 Signing time: Tue 04 Nov 2025 17:34:36 +0000 Manifest this update: Tue 04 Nov 2025 17:34:36 +0000 Manifest next update: Tue 11 Nov 2025 17:34:36 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: Xj14GxQ0o5uiQGZL2G1EBU9raopC3/W7EBXvAM8IrPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4106 (0x100a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Nov 4 17:34:36 2025 GMT Not After : Nov 11 17:34:36 2025 GMT Subject: CN=690a392c-ee32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:c3:b6:98:de:1e:d9:93:3e:51:ef:28:02: 39:cb:67:87:d1:ed:45:b3:c9:02:16:98:c0:51:be: 5a:35:82:d5:fd:07:c5:2f:5e:4d:e3:84:25:2e:3f: 51:a2:e9:2e:1c:ec:8a:fe:2e:d3:65:6e:6c:b5:95: 9a:e2:90:4c:ca:23:40:6d:64:e2:5c:9c:a6:59:7b: 58:01:a2:fd:9a:c4:b5:9d:c0:ae:29:08:d9:20:8c: a2:67:ee:0d:f2:aa:f9:c1:24:79:6c:cc:28:94:e1: b4:9d:fe:e1:bf:f5:3c:3c:3d:55:a9:df:4b:f1:45: 5b:70:b7:ce:ca:be:65:d3:9d:d7:7a:93:63:91:89: 62:fc:e7:07:22:9d:09:30:14:cc:ec:32:5a:9c:42: 6a:28:a1:a8:02:eb:a4:3a:69:ad:f1:bf:27:9e:6f: ca:f4:9e:9b:f1:4f:28:7f:0b:72:e4:70:6a:86:5a: f3:62:4d:61:ca:a9:02:74:be:30:e5:ee:e4:b7:95: 26:ca:fc:81:3c:c9:f5:58:e9:cd:0a:ac:03:6f:ec: cf:f3:ac:d1:4d:d0:d7:1a:9a:fa:68:86:ab:0b:77: 60:09:fe:07:dc:79:38:fc:58:21:32:ff:a6:5b:7e: 13:6f:25:3b:5f:33:79:53:66:cc:a0:2a:59:c7:74: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FE:3E:F2:07:B1:1C:1A:81:F9:FC:A5:51:F4:4A:D8:4D:6B:A4:FA X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:66:9d:f1:8c:f4:42:da:a4:9b:f9:00:5d:48:ad:ea:bf:ff: 7e:c9:81:e7:8a:73:ea:9b:6d:b8:f0:af:b3:03:8e:85:a2:df: ec:bb:b4:98:66:ac:1a:72:7b:b7:35:c3:c1:05:a3:51:43:c8: 75:01:09:fd:0a:18:87:bc:3a:4a:66:d7:68:68:7a:35:2a:5e: 86:91:f9:1d:35:84:a9:d7:72:ef:20:24:d9:70:64:0e:29:a5: 4e:79:fd:13:3c:b5:47:e2:be:9d:c9:c8:0d:06:f1:ad:5c:01: 1a:0a:36:14:1a:20:a2:fe:79:4b:9f:c3:8f:b2:a4:de:6b:cc: a3:11:5a:73:78:6b:82:e7:21:48:69:c1:ca:f8:ba:58:f3:e1: d0:a3:d3:79:34:cb:b8:1a:3b:07:30:60:7e:4f:97:25:a5:e7: ec:0a:bd:ca:56:08:c5:e1:ef:de:61:f9:3c:83:e0:7e:03:e2: 9b:53:9d:96:42:a6:22:2c:52:19:04:bd:5d:0b:dd:c4:9e:cb: 73:24:b0:9c:77:94:1c:4e:39:14:64:ca:64:3a:7d:8f:67:73: ba:ec:ce:1b:c8:b1:c2:be:22:b1:bc:63:cb:d5:57:77:14:c7: d3:18:b8:10:5e:5e:bc:71:94:95:06:4f:06:99:07:7a:db:a0: 4a:54:09:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUxMTA0MTczNDM2WhcNMjUxMTExMTczNDM2WjAYMRYwFAYD VQQDEw02OTBhMzkyYy1lZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkDDtpjeHtmTPlHvKAI5y2eH0e1Fs8kCFpjAUb5aNYLV/QfFL15N44QlLj9R oukuHOyK/i7TZW5stZWa4pBMyiNAbWTiXJymWXtYAaL9msS1ncCuKQjZIIyiZ+4N 8qr5wSR5bMwolOG0nf7hv/U8PD1Vqd9L8UVbcLfOyr5l053XepNjkYli/OcHIp0J MBTM7DJanEJqKKGoAuukOmmt8b8nnm/K9J6b8U8ofwty5HBqhlrzYk1hyqkCdL4w 5e7kt5UmyvyBPMn1WOnNCqwDb+zP86zRTdDXGpr6aIarC3dgCf4H3Hk4/FghMv+m W34TbyU7XzN5U2bMoCpZx3RtqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD+PvIH sRwagfn8pVH0SthNa6T6MB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXZp3xjPRC2qSb+QBdSK3qv/9+yYHninPqm2248K+zA46Fot/su7SY Zqwacnu3NcPBBaNRQ8h1AQn9ChiHvDpKZtdoaHo1Kl6GkfkdNYSp13LvICTZcGQO KaVOef0TPLVH4r6dycgNBvGtXAEaCjYUGiCi/nlLn8OPsqTea8yjEVpzeGuC5yFI acHK+LpY8+HQo9N5NMu4GjsHMGB+T5clpefsCr3KVgjF4e/eYfk8g+B+A+KbU52W QqYiLFIZBL1dC93EnstzJLCcd5QcTjkUZMpkOn2PZ3O67M4byLHCviKxvGPL1Vd3 FMfTGLgQXl68cZSVBk8GmQd626BKVAlm -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:26 2025 by rpki-client