$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: 5EOPBX8t2gwGBX7EQfxzJMLlCYF2Du5nHv180bPuKPE= Subject key identifier: 57:DE:85:01:00:1A:9E:42:FC:F9:AE:06:72:8B:0B:73:5E:E8:6F:4C Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 093D Signing time: Mon 20 Oct 2025 21:04:41 +0000 Manifest this update: Mon 20 Oct 2025 21:04:41 +0000 Manifest next update: Mon 27 Oct 2025 21:04:41 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: Z8PSdUQeyMS/mabRROjJDwZLIvY/xxsmq2kIv0JjueI=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: WjFZEedMDw0JbPWqqHGuTrg3MKW0ZTVgSyL2yBJOKwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Oct 20 21:04:41 2025 GMT Not After : Oct 27 21:04:41 2025 GMT Subject: CN=68f6a3e9-9b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e0:c0:d3:af:b9:e6:86:8d:38:53:6c:6d:3c: ae:ed:01:09:23:a4:d5:d7:68:7a:e4:43:c2:6c:2a: 2e:c9:30:e5:49:60:34:03:98:6b:4c:36:b8:15:c2: e0:12:72:90:85:5f:c9:4d:af:5e:a9:a7:50:16:bb: 46:44:c3:57:e6:69:b6:34:97:58:c8:9e:64:70:3b: c0:8f:ac:3b:c9:45:7e:f8:67:99:17:fc:22:ee:e9: dc:9d:ae:21:e8:a4:3c:71:f0:0e:39:38:96:e0:6e: c2:36:92:d9:63:09:e3:b5:7e:76:4e:aa:7c:74:cb: 8e:11:16:1b:c5:93:9c:ef:7e:bb:61:cf:43:f5:2f: 67:59:15:bf:c2:25:bc:f0:fa:90:24:9f:81:71:f4: 94:57:32:64:ca:bd:07:80:82:7d:62:5b:42:68:2a: 5e:b0:77:fd:81:69:9d:97:85:3e:f2:8e:a8:e2:ef: 57:4f:01:6c:b8:89:d5:cb:0d:74:2f:f7:57:96:d6: 91:1d:5e:04:b8:3d:f7:9b:5e:62:1a:94:5d:1d:6e: 5a:fb:eb:a0:6d:86:73:ed:04:fa:ea:86:1b:6a:f0: 65:e2:0f:01:29:c4:34:fd:20:e5:38:11:10:70:2b: 9f:71:3d:0e:aa:8d:45:1b:5d:30:0b:4f:40:6b:ad: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:85:01:00:1A:9E:42:FC:F9:AE:06:72:8B:0B:73:5E:E8:6F:4C X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:17:d5:32:a9:44:1e:06:3a:85:ec:82:69:2c:b1:0a:44:18: 57:7b:ac:c7:f9:5b:46:6b:2a:58:c3:4d:46:16:bb:38:0b:5c: 2b:1d:c5:f6:ac:e9:ec:e1:b0:36:b8:68:81:4a:41:95:46:72: f2:1c:c1:45:ec:fd:3d:59:a1:85:a5:70:99:ac:d8:63:b8:07: 6c:fa:95:95:fd:3d:a0:5d:b3:2f:dd:77:95:e8:36:3a:e1:df: 23:48:40:4e:8d:bb:a0:4b:23:94:e3:09:6e:90:52:e9:ca:16: be:96:35:e4:96:05:44:8e:dd:e2:8f:29:79:58:11:e8:3c:8e: 36:05:f9:62:2f:17:9e:df:d1:63:51:90:24:00:36:e1:7b:d3: fb:32:56:a1:49:0d:0f:98:15:d9:bc:2f:cc:b6:a9:7e:a3:90: b2:6c:2b:0f:fc:bd:ef:ae:55:54:c1:4d:1d:0f:71:ba:bd:1c: 33:b0:73:cd:3c:43:d4:52:a1:c5:b8:0f:2f:9e:54:86:f9:09: f9:06:d6:3a:b0:24:6d:89:af:d3:88:9b:5e:e0:ce:fe:ea:28: 5b:50:29:d7:fd:bb:12:25:4a:10:3d:0f:9e:4f:9a:82:44:6a: b3:05:f8:28:9e:7c:3c:27:ae:3c:a1:3c:0e:48:b6:f7:d1:a8: dd:a2:17:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUxMDIwMjEwNDQxWhcNMjUxMDI3MjEwNDQxWjAYMRYwFAYD VQQDEw02OGY2YTNlOS05YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ODA06+55oaNOFNsbTyu7QEJI6TV12h65EPCbCouyTDlSWA0A5hrTDa4FcLg EnKQhV/JTa9eqadQFrtGRMNX5mm2NJdYyJ5kcDvAj6w7yUV++GeZF/wi7uncna4h 6KQ8cfAOOTiW4G7CNpLZYwnjtX52Tqp8dMuOERYbxZOc7367Yc9D9S9nWRW/wiW8 8PqQJJ+BcfSUVzJkyr0HgIJ9YltCaCpesHf9gWmdl4U+8o6o4u9XTwFsuInVyw10 L/dXltaRHV4EuD33m15iGpRdHW5a++ugbYZz7QT66oYbavBl4g8BKcQ0/SDlOBEQ cCufcT0Oqo1FG10wC09Aa61XYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfehQEA Gp5C/PmuBnKLC3Ne6G9MMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgF9UyqUQeBjqF7IJpLLEKRBhXe6zH+VtGaypYw01GFrs4C1wrHcX2 rOns4bA2uGiBSkGVRnLyHMFF7P09WaGFpXCZrNhjuAds+pWV/T2gXbMv3XeV6DY6 4d8jSEBOjbugSyOU4wlukFLpyha+ljXklgVEjt3ijyl5WBHoPI42BfliLxee39Fj UZAkADbhe9P7MlahSQ0PmBXZvC/Mtql+o5CybCsP/L3vrlVUwU0dD3G6vRwzsHPN PEPUUqHFuA8vnlSG+Qn5BtY6sCRtia/TiJte4M7+6ihbUCnX/bsSJUoQPQ+eT5qC RGqzBfgonnw8J648oTwOSLb30ajdohev -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:19 2025 by rpki-client