$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: F6EHloXP41wDjvB1xMM0H2ofuT8ZHDLtfMbRZ/qFH6Y= Subject key identifier: 5D:F1:9F:E0:AA:F4:7D:E3:B7:3D:75:D0:EE:6F:5F:64:5F:C3:39:6A Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 0147 Signing time: Sat 25 Oct 2025 08:15:48 +0000 Manifest this update: Sat 25 Oct 2025 08:15:47 +0000 Manifest next update: Sat 01 Nov 2025 08:15:47 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: AMHgEYANEk9hSqTx8eFO0CobEK77ZxtJg/QOlnlz95E=) 2: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: ie/x6hO8mgJVypMbJ9dxT11zPfxv7+L2SE4F6aFMCRg=) 3: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fzQzGSAIs0EVXNYEuUhQCq5Xv3M4UYk0ENH+A/wJ0lg=) 4: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: +76rgJH+tlo3mUp003o+tx8igW3K1WeVuibheb9bs0g=) 5: F73A3EA458FF11F0831F6664C4F9AE02.roa (hash: AwPQ2C0JmEfPKukGC3Ro3WYtZg4y6hLp5m6xMhubTwE=) 6: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: C0PtpzbGpwbpDFL/uYPMPp9j/9TP8PxpK7PTzvirT4A=) 7: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: yTjA76KeDCsVYv0UnIasiwZD8KPOw92OzNyZSl311Yw=) 8: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: xBAC2IeuuzKl82FU9KBewyyGYj38dZfZQ7//75oYBSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Oct 25 08:15:47 2025 GMT Not After : Nov 1 08:15:47 2025 GMT Subject: CN=68fc8734-7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2f:de:5b:7e:6b:c1:19:42:d8:52:44:1d:13: 85:13:83:fb:a4:e1:a4:cf:b6:9a:a2:15:75:c6:b2: 7a:31:22:7c:88:83:80:20:27:19:a6:76:f2:80:7a: 11:3a:84:d9:84:3e:21:15:9f:d2:87:9e:33:a6:1e: e5:56:05:26:02:e5:64:d5:3a:d9:9f:ac:3c:1d:7b: 8b:f6:88:9e:d1:5d:02:c2:a0:66:69:f3:58:ca:3a: 77:4f:f6:02:2f:eb:84:32:fa:50:0d:49:8b:84:f6: b1:64:41:f4:bf:71:8f:5f:6e:b5:5c:24:dd:e9:0d: 21:2e:e0:21:2e:f7:00:e7:d7:d5:92:82:50:d7:9d: 1b:00:04:82:17:34:aa:be:b6:01:3c:b0:b0:6c:db: 72:c9:77:44:ca:94:26:87:7a:47:ef:84:a5:2c:79: 09:39:05:04:4d:9c:58:ba:87:c2:b7:08:3c:41:85: 2f:1c:9f:7e:92:38:a8:cf:5d:47:60:26:4b:4b:4f: 15:34:71:9d:25:54:89:52:9b:49:41:ba:0e:ae:b7: d8:3a:fa:70:2b:f0:5f:ed:28:32:b7:b8:6f:3e:b8: 60:e2:fa:43:ed:be:2c:90:47:de:a2:2d:3e:4a:87: e8:71:d5:3c:fc:95:84:c0:a6:94:ab:12:32:a0:4e: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:9F:E0:AA:F4:7D:E3:B7:3D:75:D0:EE:6F:5F:64:5F:C3:39:6A X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:86:28:53:7d:7d:16:71:21:86:6f:96:78:2e:04:c6:2c:21: 9d:b6:42:ce:89:f9:e9:ec:41:77:e4:52:0b:63:2c:6e:f5:74: e2:38:8c:fa:23:b6:0d:b6:74:57:03:ea:5b:51:aa:31:af:cf: 73:60:6f:27:cb:3a:af:b5:c7:dc:29:cc:0e:c6:36:a0:c3:97: 41:61:c0:63:58:15:68:bd:7e:66:6d:40:c1:33:6a:d1:23:60: 4b:f9:99:3f:74:5f:f6:be:92:79:b4:e8:8e:b8:31:aa:ed:47: ac:ad:69:4e:a8:9b:5f:50:fa:6d:37:2a:ee:a9:92:64:5b:f6: bf:f7:75:46:d8:2c:b1:26:25:00:7b:44:9b:39:88:2e:ce:b8: 78:48:d8:91:e4:91:e4:de:c6:2f:63:40:0a:b3:f5:22:e9:d1: 7c:59:a7:98:30:96:68:d1:03:2d:49:dd:df:78:7c:f2:71:40: f8:ea:7f:5a:07:8e:f1:32:c5:81:7e:4f:3f:41:a3:54:fe:0e: 5a:d1:be:a1:81:7c:16:ff:d8:ac:01:e9:50:c2:11:9d:d7:0a: f6:58:0a:91:63:bb:ae:98:5f:f0:b7:ee:8a:c7:f5:af:82:f7: de:f6:ab:23:1f:2b:ad:d5:99:85:c5:7c:7d:c9:61:a7:99:3b: 8e:c5:8e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUxMDI1MDgxNTQ3WhcNMjUxMTAxMDgxNTQ3WjAYMRYwFAYD VQQDEw02OGZjODczNC03ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAny/eW35rwRlC2FJEHROFE4P7pOGkz7aaohV1xrJ6MSJ8iIOAICcZpnbygHoR OoTZhD4hFZ/Sh54zph7lVgUmAuVk1TrZn6w8HXuL9oie0V0CwqBmafNYyjp3T/YC L+uEMvpQDUmLhPaxZEH0v3GPX261XCTd6Q0hLuAhLvcA59fVkoJQ150bAASCFzSq vrYBPLCwbNtyyXdEypQmh3pH74SlLHkJOQUETZxYuofCtwg8QYUvHJ9+kjioz11H YCZLS08VNHGdJVSJUptJQboOrrfYOvpwK/Bf7Sgyt7hvPrhg4vpD7b4skEfeoi0+ SofocdU8/JWEwKaUqxIyoE6UuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3xn+Cq 9H3jtz110O5vX2RfwzlqMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHhihTfX0WcSGGb5Z4LgTGLCGdtkLOifnp7EF35FILYyxu9XTiOIz6 I7YNtnRXA+pbUaoxr89zYG8nyzqvtcfcKcwOxjagw5dBYcBjWBVovX5mbUDBM2rR I2BL+Zk/dF/2vpJ5tOiOuDGq7UesrWlOqJtfUPptNyruqZJkW/a/93VG2CyxJiUA e0SbOYguzrh4SNiR5JHk3sYvY0AKs/Ui6dF8WaeYMJZo0QMtSd3feHzycUD46n9a B47xMsWBfk8/QaNU/g5a0b6hgXwW/9isAelQwhGd1wr2WAqRY7uumF/wt+6Kx/Wv gvfe9qsjHyut1ZmFxXx9yWGnmTuOxY7a -----END CERTIFICATE-----Generated at Sat Oct 25 11:28:27 2025 by rpki-client