$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: mmMSiS4H2rX2+00RK9w8Ldc3YtQY3DekM4jD+z7E9xg= Subject key identifier: 91:32:20:34:BF:20:2F:94:48:1C:B9:08:37:F1:B0:00:B4:A1:7C:8C Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0634 Signing time: Sun 19 Oct 2025 00:19:39 +0000 Manifest this update: Sun 19 Oct 2025 00:19:39 +0000 Manifest next update: Sun 26 Oct 2025 00:19:38 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: U47vr2paJNGxJUE5AfqcUQppo5RfFGTZiKgdKjMyaZE=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Oct 19 00:19:39 2025 GMT Not After : Oct 26 00:19:38 2025 GMT Subject: CN=68f42e9b-25f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:8a:73:14:b7:71:64:dd:f4:a9:ea:e2:13: 2a:e9:4f:3a:f7:73:88:9a:7e:ae:27:ed:5f:2f:f5: db:7f:08:d5:3b:ec:d4:29:d5:37:22:e2:be:24:40: 75:a0:d3:77:6b:e7:4c:67:2e:87:ea:d2:2b:07:ea: 35:90:3b:50:ef:0f:7f:3c:a9:00:06:e7:1a:eb:f2: ac:92:0b:73:8d:0d:b0:c5:44:f3:5d:a7:0b:17:4c: ae:09:48:79:21:8c:bc:64:bc:4b:f4:fb:59:15:9a: 22:14:c4:90:8b:48:c1:f1:ef:d2:12:73:5b:c9:e1: 3b:90:69:56:84:26:e8:e0:dc:b4:61:ae:dc:a8:5a: fc:e7:e8:a4:d7:65:85:6e:23:c1:d7:cb:c0:eb:a4: 21:f8:83:48:29:d6:9c:96:c7:bf:d0:9f:45:10:ef: cb:e1:fb:21:43:6b:ac:c5:6f:e5:9f:03:e9:e4:69: 0e:4b:f0:09:38:b1:8d:8c:a0:45:fb:29:82:33:41: db:d7:dc:6f:6a:4b:d5:e2:c3:e8:63:d7:bc:29:4f: 97:5d:0d:f5:52:e9:43:2c:b9:e0:28:19:6b:39:ca: 12:08:d3:86:f7:93:d8:40:c2:00:76:9c:30:92:e8: 09:99:0a:9f:74:6a:c8:61:f0:7a:cc:2c:3f:3b:4c: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:32:20:34:BF:20:2F:94:48:1C:B9:08:37:F1:B0:00:B4:A1:7C:8C X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c1:47:3a:43:53:0c:9b:d9:bf:16:12:6a:d2:e1:ec:13:1e: b0:59:57:d4:89:52:24:9f:b7:12:a1:a2:cf:1b:c7:a0:7d:0c: d6:3b:5f:d8:ea:96:e5:24:d1:a2:b8:70:11:ae:57:9e:3b:4b: 27:13:61:42:4e:94:e9:c7:a0:f8:42:2b:4c:25:79:2e:b2:61: 83:03:26:87:bd:09:93:13:cd:0f:b9:8f:0a:df:0e:cd:7e:14: e7:5b:36:78:26:41:79:61:7f:4d:22:06:9c:09:38:96:d2:1b: f0:33:0e:e9:e5:f9:57:f5:1d:e0:3f:7d:79:da:ca:22:d9:67: e9:cc:b2:5f:e5:7b:4f:47:57:a9:3a:e6:22:48:ea:78:36:a7: 8a:d5:7a:85:ab:47:28:d0:01:42:0a:af:e9:84:6e:5e:4a:aa: 64:34:80:d0:de:56:5f:1a:8b:68:f0:4d:c3:64:aa:02:1b:04: ae:c3:6f:2d:17:4b:60:45:1a:25:4b:36:f1:13:3f:de:84:bd: 93:da:52:c9:7a:fd:16:70:29:b5:32:31:6f:70:9f:eb:5b:6a: 2e:55:a0:5d:e9:48:4e:21:16:b6:73:70:62:0b:44:bd:f4:5b: e5:af:3a:a7:59:dc:fc:ad:d8:a1:60:3a:17:95:29:14:37:45: 78:56:32:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUxMDE5MDAxOTM5WhcNMjUxMDI2MDAxOTM4WjAYMRYwFAYD VQQDEw02OGY0MmU5Yi0yNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OaKcxS3cWTd9Knq4hMq6U8693OImn6uJ+1fL/XbfwjVO+zUKdU3IuK+JEB1 oNN3a+dMZy6H6tIrB+o1kDtQ7w9/PKkABuca6/KskgtzjQ2wxUTzXacLF0yuCUh5 IYy8ZLxL9PtZFZoiFMSQi0jB8e/SEnNbyeE7kGlWhCbo4Ny0Ya7cqFr85+ik12WF biPB18vA66Qh+INIKdaclse/0J9FEO/L4fshQ2usxW/lnwPp5GkOS/AJOLGNjKBF +ymCM0Hb19xvakvV4sPoY9e8KU+XXQ31UulDLLngKBlrOcoSCNOG95PYQMIAdpww kugJmQqfdGrIYfB6zCw/O0xPJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEyIDS/ IC+USBy5CDfxsAC0oXyMMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMwUc6Q1MMm9m/FhJq0uHsEx6wWVfUiVIkn7cSoaLPG8egfQzWO1/Y 6pblJNGiuHARrleeO0snE2FCTpTpx6D4QitMJXkusmGDAyaHvQmTE80PuY8K3w7N fhTnWzZ4JkF5YX9NIgacCTiW0hvwMw7p5flX9R3gP3152soi2WfpzLJf5XtPR1ep OuYiSOp4NqeK1XqFq0co0AFCCq/phG5eSqpkNIDQ3lZfGoto8E3DZKoCGwSuw28t F0tgRRolSzbxEz/ehL2T2lLJev0WcCm1MjFvcJ/rW2ouVaBd6UhOIRa2c3BiC0S9 9FvlrzqnWdz8rdihYDoXlSkUN0V4VjI5 -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:48 2025 by rpki-client