$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json) Hash identifier: wylVLNwJWt6yqfKnLAnffT8XwSrhYvc8eRh51XdpDow= Subject key identifier: B3:BC:FF:41:BA:9C:00:49:EF:2A:84:FD:AF:76:EE:83:7A:56:49:F4 Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft Manifest number: 38 Signing time: Sun 19 Oct 2025 11:01:34 +0000 Manifest this update: Sun 19 Oct 2025 11:01:33 +0000 Manifest next update: Sun 26 Oct 2025 11:01:33 +0000 Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: HlXEThiYJmL/sNu15uc1w3xIkak1IDRfK4qzPM95ZT4=) 2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: tlZH4+U+/czJd2gewk6CoHNSlqFgULLAe9q38ySSPEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Validity Not Before: Oct 19 11:01:33 2025 GMT Not After : Oct 26 11:01:33 2025 GMT Subject: CN=68f4c50d-2b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bd:f4:73:c9:c0:49:a2:11:4b:67:b3:dd:73: 58:62:14:12:5b:97:16:e3:09:db:60:46:3c:7f:33: e7:63:f6:6a:c1:02:73:ca:91:dc:9d:fe:8d:4a:f0: d9:aa:dc:22:bc:66:f6:c7:a4:1e:dc:4d:6e:02:dd: 91:6d:7a:cb:11:42:7c:fa:8d:d5:9b:96:29:3c:19: 66:03:ea:41:07:99:6a:5d:ee:1d:c2:79:a5:69:f5: 8b:6e:c4:06:bc:7c:21:c6:d1:03:5e:9f:ab:c2:d5: a5:b1:12:b7:cc:55:3b:2e:a0:5a:5d:7d:37:d3:45: 8a:17:56:0d:b2:aa:06:ba:19:36:c0:94:38:4d:9b: 53:c8:61:81:47:26:0a:5b:5f:e8:ad:51:83:25:40: b6:de:ae:7e:f9:3f:a2:c8:a3:dd:58:85:6b:a9:11: 02:43:3d:65:5f:cc:b4:bc:f2:99:7c:72:5d:de:06: 34:25:ea:fc:38:b6:90:18:38:fc:c5:73:b5:f1:c6: 6d:c9:7c:bd:d3:af:58:fc:97:dd:e7:94:7d:f7:1a: 60:36:10:6d:f8:c5:bd:30:72:f9:57:80:ce:84:e4: 1d:24:a0:22:37:c8:8a:95:70:09:fb:a4:71:30:4e: 2c:ef:5f:76:d3:0e:ab:1c:0a:0a:cb:6c:f9:23:61: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BC:FF:41:BA:9C:00:49:EF:2A:84:FD:AF:76:EE:83:7A:56:49:F4 X509v3 Authority Key Identifier: keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:56:89:80:a6:b2:ad:44:b9:00:1b:8e:e7:e1:f5:ec:84:2e: 8b:71:15:3d:26:62:5d:6e:94:c7:07:a9:56:62:0a:b6:aa:1c: 49:fb:43:e9:b4:55:78:ee:16:b3:88:f6:f4:26:e9:7d:90:9f: ef:d7:1c:6b:a1:43:f0:cd:43:64:95:d5:e9:af:81:02:dd:32: 3c:0f:6d:18:13:6d:9f:ce:25:4d:7d:9e:fb:a2:8f:bf:ef:4a: 0b:e4:59:dc:7e:36:40:2f:90:9b:01:7e:ca:4a:d6:3a:b5:2e: 64:29:88:6c:ed:aa:72:cd:ab:48:67:2e:81:74:bc:73:fe:ff: 67:e7:aa:99:91:79:3f:75:fe:9d:14:d9:ab:0c:fc:5b:26:b9: e0:b3:f0:48:6f:94:74:25:f1:16:46:f5:ba:12:69:3e:5a:d9: ca:d2:f1:d8:1c:e8:94:ca:ca:c7:97:56:b9:74:f8:ee:22:18: 21:df:09:da:a5:42:f8:89:0e:7e:83:ce:8e:d0:15:5f:05:77: 51:43:f9:b6:7d:9a:ca:0b:75:b4:e8:af:90:d2:5f:9f:08:3c: 83:2c:f8:3f:6f:f9:b9:19:ed:e5:e7:3d:4c:97:ee:a8:75:bb: b4:e0:96:19:34:94:c8:70:4c:8e:f5:13:58:82:dc:24:d4:73: 11:0b:d7:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw NjI2NTQwNTAeFw0yNTEwMTkxMTAxMzNaFw0yNTEwMjYxMTAxMzNaMBgxFjAUBgNV BAMTDTY4ZjRjNTBkLTJiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxvfRzycBJohFLZ7Pdc1hiFBJblxbjCdtgRjx/M+dj9mrBAnPKkdyd/o1K8Nmq 3CK8ZvbHpB7cTW4C3ZFtessRQnz6jdWblik8GWYD6kEHmWpd7h3CeaVp9YtuxAa8 fCHG0QNen6vC1aWxErfMVTsuoFpdfTfTRYoXVg2yqga6GTbAlDhNm1PIYYFHJgpb X+itUYMlQLbern75P6LIo91YhWupEQJDPWVfzLS88pl8cl3eBjQl6vw4tpAYOPzF c7Xxxm3JfL3Tr1j8l93nlH33GmA2EG34xb0wcvlXgM6E5B0koCI3yIqVcAn7pHEw TizvX3bTDqscCgrLbPkjYWMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs7z/Qbqc AEnvKoT9r3bug3pWSfQwHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2Lzc2RjgyMDUwNUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hr RXZIVXFxT1NqUXdZbVZBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZWiYCmsq1EuQAbjufh9eyELotxFT0mYl1ulMcHqVZiCraqHEn7Q+m0 VXjuFrOI9vQm6X2Qn+/XHGuhQ/DNQ2SV1emvgQLdMjwPbRgTbZ/OJU19nvuij7/v SgvkWdx+NkAvkJsBfspK1jq1LmQpiGztqnLNq0hnLoF0vHP+/2fnqpmReT91/p0U 2asM/FsmueCz8EhvlHQl8RZG9boSaT5a2crS8dgc6JTKyseXVrl0+O4iGCHfCdql QviJDn6Dzo7QFV8Fd1FD+bZ9msoLdbTor5DSX58IPIMs+D9v+bkZ7eXnPUyX7qh1 u7Tglhk0lMhwTI71E1iC3CTUcxEL150= -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:45 2025 by rpki-client