$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json) Hash identifier: 70IPfYkED8oNGG+CcFzXsu+WiiPfAZBBPPGeH2CMe+o= Subject key identifier: 04:24:AC:3E:C7:68:AD:49:43:08:68:DB:41:CF:8D:CF:09:65:03:A4 Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft Manifest number: 0222 Signing time: Sun 19 Oct 2025 04:18:54 +0000 Manifest this update: Sun 19 Oct 2025 04:18:53 +0000 Manifest next update: Sun 26 Oct 2025 04:18:53 +0000 Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: M+t4rt6xooqRMJGCRV9U6amnLPEAlVP+g4T9a/zMGwM=) 2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: HjT8VM2XqnkqsOJWOxm5J3xWXDt5memxcVZ9AVhTnyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Validity Not Before: Oct 19 04:18:53 2025 GMT Not After : Oct 26 04:18:53 2025 GMT Subject: CN=68f466ae-f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:1a:63:ef:ae:0a:8a:c2:4c:55:f5:c7:8e: fb:2e:10:04:47:65:ab:86:c0:ff:42:09:68:35:cc: 8c:b1:07:f3:78:b3:c3:b5:7b:da:f5:45:bc:f4:b6: 09:32:b7:66:96:a3:64:7a:ec:ef:48:a7:b7:4b:c0: 47:89:21:51:b5:2f:23:20:1e:39:38:14:ba:db:c2: 6e:b2:00:62:35:32:d5:c8:5b:9a:5c:34:4c:68:76: cb:38:79:71:5f:e0:58:71:56:58:c9:c9:41:92:1d: 3a:b2:e8:5f:79:b3:6d:c7:64:81:76:85:56:f6:fd: 69:14:48:79:de:4d:21:2a:3c:7e:60:07:8b:10:61: 5d:a6:e8:cf:25:cd:ec:dc:44:0a:e8:f6:3b:40:91: 16:c8:8a:f6:eb:60:4e:15:d2:c3:f6:cd:0e:4f:e5: 6e:5f:ce:3d:76:75:7c:2e:17:2e:52:31:bc:13:6c: 0b:92:72:6f:bd:2a:3d:ce:9b:50:39:72:57:6e:15: 9b:7c:11:6a:bf:b7:26:09:1e:06:dd:b4:ba:16:5f: ba:0d:3e:58:1d:ea:95:44:9e:3e:4c:0f:f1:22:06: 33:6c:64:fd:13:91:56:ed:e7:4c:4a:85:52:e3:89: f4:93:d7:65:bb:9d:4b:3d:17:1d:3c:cf:83:9d:2d: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:24:AC:3E:C7:68:AD:49:43:08:68:DB:41:CF:8D:CF:09:65:03:A4 X509v3 Authority Key Identifier: keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:df:15:59:ff:97:99:4c:d6:18:5e:e3:ad:eb:12:01:86:92: fc:c6:b5:11:16:6b:cb:71:8d:f6:02:30:9c:c7:6d:ad:c7:1e: a6:38:27:0b:b5:fc:88:7a:48:8c:45:cc:7c:9a:a2:6d:bd:14: 33:b1:f6:02:cb:7f:49:ee:45:fb:b3:b1:e9:3b:ff:87:4e:14: 9d:70:42:aa:df:63:31:a6:bf:db:c0:c3:45:dd:ad:d7:d7:2c: e5:3b:f6:a4:0f:d8:39:1f:0a:58:c2:6a:ad:77:ff:33:50:86: 83:a3:98:fe:1e:bd:e5:d9:a2:5b:b2:db:69:f9:69:8c:50:9c: ff:9b:ba:4b:0f:de:52:7a:e6:14:52:0b:72:2e:59:9f:dd:49: 58:db:7d:b6:fb:fe:7e:d5:fb:7d:5a:c1:b5:4d:f8:20:2d:93: 44:b8:57:81:91:55:a8:57:64:ec:8d:9f:cc:ff:c3:dc:7b:9f: dd:e0:87:62:a4:f9:8f:c8:02:b8:53:5f:35:10:2d:a4:4b:75: d4:01:8a:4d:e2:3a:82:f5:23:61:6f:a8:a7:9f:c4:e7:19:89: 34:41:d3:3f:4f:38:08:b0:6b:d2:21:c1:d7:12:30:3b:c2:c6: c6:91:97:46:32:db:88:9d:fe:1a:ed:ff:be:8c:a8:f4:ef:f7: 9a:7f:a9:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE OEZCN0EwQzMwHhcNMjUxMDE5MDQxODUzWhcNMjUxMDI2MDQxODUzWjAYMRYwFAYD VQQDEw02OGY0NjZhZS1mMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRcaY++uCorCTFX1x477LhAER2WrhsD/QgloNcyMsQfzeLPDtXva9UW89LYJ MrdmlqNkeuzvSKe3S8BHiSFRtS8jIB45OBS628JusgBiNTLVyFuaXDRMaHbLOHlx X+BYcVZYyclBkh06suhfebNtx2SBdoVW9v1pFEh53k0hKjx+YAeLEGFdpujPJc3s 3EQK6PY7QJEWyIr262BOFdLD9s0OT+VuX849dnV8LhcuUjG8E2wLknJvvSo9zptQ OXJXbhWbfBFqv7cmCR4G3bS6Fl+6DT5YHeqVRJ4+TA/xIgYzbGT9E5FW7edMSoVS 44n0k9dlu51LPRcdPM+DnS3/cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQkrD7H aK1JQwho20HPjc8JZQOkMB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm3xVZ/5eZTNYYXuOt6xIBhpL8xrURFmvLcY32AjCcx22txx6mOCcL tfyIekiMRcx8mqJtvRQzsfYCy39J7kX7s7HpO/+HThSdcEKq32Mxpr/bwMNF3a3X 1yzlO/akD9g5HwpYwmqtd/8zUIaDo5j+Hr3l2aJbsttp+WmMUJz/m7pLD95SeuYU UgtyLlmf3UlY2322+/5+1ft9WsG1TfggLZNEuFeBkVWoV2TsjZ/M/8Pce5/d4Idi pPmPyAK4U181EC2kS3XUAYpN4jqC9SNhb6inn8TnGYk0QdM/TzgIsGvSIcHXEjA7 wsbGkZdGMtuInf4a7f++jKj07/eaf6mU -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:54 2025 by rpki-client