$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: QYHY3iC00Wi/AKJDXZpR8pOsvwCUzKdZ651rTBLHJhQ= Subject key identifier: 5E:F5:8F:1F:47:C7:8D:B8:E5:AB:79:83:FF:66:BE:E5:86:52:F9:48 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 073B Signing time: Sat 18 Oct 2025 23:08:25 +0000 Manifest this update: Sat 18 Oct 2025 23:08:24 +0000 Manifest next update: Sat 25 Oct 2025 23:08:24 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: R6SyxuZWLstc+OzFv5YoSrzWZKKiLmPc8fLpWED1XYY=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Oct 18 23:08:24 2025 GMT Not After : Oct 25 23:08:24 2025 GMT Subject: CN=68f41de8-b908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:8a:fc:f0:b4:dc:45:56:73:ec:e2:e8:8b: 4c:64:10:49:40:5e:83:71:68:ca:55:66:da:12:e0: f8:d4:40:0a:0b:9d:cd:09:82:0a:6f:cd:95:c7:89: b9:c4:2e:7a:f4:c3:d7:23:93:b5:06:a6:79:bd:1c: 6e:f7:45:a7:e4:d1:86:c4:1a:5d:3c:d7:c4:00:d8: d9:fb:d1:b6:d2:09:f9:0f:8c:3a:9c:23:4e:31:c6: e7:ec:a0:11:5b:1b:74:5e:f5:99:92:b5:2d:02:1f: 96:c0:5f:4c:49:0e:8e:90:a5:e0:5a:3d:f6:d1:8b: 44:31:97:09:06:e9:e9:5f:53:a5:f4:69:9c:44:d5: 4f:87:31:b5:70:ec:98:19:63:41:02:02:28:db:26: d3:3d:bc:2c:a1:17:05:2a:e5:39:e1:17:2c:7b:d2: 5f:eb:ed:6a:7b:26:f4:54:b9:a9:3e:eb:85:7b:4d: 5d:5b:2d:00:56:95:62:60:13:a9:49:ba:38:bc:15: 26:13:f5:b2:f2:fe:c0:37:2e:49:d0:8e:93:ea:55: 9d:17:4a:d5:d5:cd:c8:ab:d7:a6:9c:67:ac:75:69: 64:47:aa:ce:3b:ef:83:28:fc:e0:e4:32:a1:a3:9e: 6b:fb:76:28:1d:23:9a:8c:07:4c:30:c4:45:36:3f: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:8F:1F:47:C7:8D:B8:E5:AB:79:83:FF:66:BE:E5:86:52:F9:48 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:82:36:1d:6d:8b:5a:76:93:b9:62:e3:1d:18:df:41:5d:e9: 16:12:e9:c9:c0:9a:e1:c4:51:c2:83:2a:77:67:12:9a:b5:b2: 51:32:aa:c5:d9:40:0e:da:99:a6:76:25:ad:f4:93:1e:ad:32: 4e:1b:4c:b5:49:c5:3f:63:5f:03:28:77:f0:9d:c4:ef:0b:81: 84:39:45:53:3e:2d:e5:58:2f:ca:b0:9f:34:00:70:ef:d9:68: 30:14:4b:75:93:78:b7:ac:9c:7b:56:44:fd:78:9e:60:ba:5d: 51:54:52:9e:b2:25:a4:69:dc:2e:ca:79:de:85:f7:a7:b7:44: 68:08:00:37:1b:6c:cb:f3:a7:1f:54:fd:b3:05:bd:31:d9:24: 11:65:5d:af:be:80:da:79:9c:72:53:df:4b:89:61:98:24:0c: ac:71:e1:6e:54:61:a1:9d:2b:e6:77:49:c9:80:f7:6c:b1:da: ec:47:e4:6b:8d:0f:5d:22:2d:31:ab:ae:09:38:93:96:2c:c9: e3:82:98:8f:b9:cb:3e:df:3f:3b:c0:c1:62:e9:2e:53:23:43: 19:b9:f5:22:ac:c7:ad:97:be:74:9f:79:1e:e2:1e:5a:09:27: 1d:19:9a:47:a5:68:de:b8:86:1c:76:f7:c8:75:2b:ad:f3:12: 85:9f:68:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUxMDE4MjMwODI0WhcNMjUxMDI1MjMwODI0WjAYMRYwFAYD VQQDEw02OGY0MWRlOC1iOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuASK/PC03EVWc+zi6ItMZBBJQF6DcWjKVWbaEuD41EAKC53NCYIKb82Vx4m5 xC569MPXI5O1BqZ5vRxu90Wn5NGGxBpdPNfEANjZ+9G20gn5D4w6nCNOMcbn7KAR Wxt0XvWZkrUtAh+WwF9MSQ6OkKXgWj320YtEMZcJBunpX1Ol9GmcRNVPhzG1cOyY GWNBAgIo2ybTPbwsoRcFKuU54Rcse9Jf6+1qeyb0VLmpPuuFe01dWy0AVpViYBOp Sbo4vBUmE/Wy8v7ANy5J0I6T6lWdF0rV1c3Iq9emnGesdWlkR6rOO++DKPzg5DKh o55r+3YoHSOajAdMMMRFNj9LJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF71jx9H x4245at5g/9mvuWGUvlIMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCigjYdbYtadpO5YuMdGN9BXekWEunJwJrhxFHCgyp3ZxKatbJRMqrF 2UAO2pmmdiWt9JMerTJOG0y1ScU/Y18DKHfwncTvC4GEOUVTPi3lWC/KsJ80AHDv 2WgwFEt1k3i3rJx7VkT9eJ5gul1RVFKesiWkadwuynnehfent0RoCAA3G2zL86cf VP2zBb0x2SQRZV2vvoDaeZxyU99LiWGYJAysceFuVGGhnSvmd0nJgPdssdrsR+Rr jQ9dIi0xq64JOJOWLMnjgpiPucs+3z87wMFi6S5TI0MZufUirMetl750n3ke4h5a CScdGZpHpWjeuIYcdvfIdSut8xKFn2jR -----END CERTIFICATE-----Generated at Mon Oct 20 16:37:18 2025 by rpki-client