$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: grbv2Tx+Dz9+G3R+tDkmrBd0V7/bH+E0G9LI1SaCzCQ= Subject key identifier: B6:1A:96:B9:32:6F:35:36:32:A9:BC:AE:55:1E:1D:4B:2C:D4:64:51 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 095B Signing time: Sat 18 Oct 2025 21:12:18 +0000 Manifest this update: Sat 18 Oct 2025 21:12:17 +0000 Manifest next update: Sat 25 Oct 2025 21:12:17 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: BaEN9Kmk52Dh7urvZh4ye6ou4p6QscfJnyJhT5JCHKI=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Oct 18 21:12:17 2025 GMT Not After : Oct 25 21:12:17 2025 GMT Subject: CN=68f402b1-a577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:e4:f1:eb:9b:3e:18:d1:85:94:b0:1f:88: 44:88:4a:48:96:a4:c0:22:f3:1a:d3:bb:7d:3d:4b: 86:cc:7f:20:47:5e:5b:b1:e2:b0:9b:7b:a0:38:1a: 46:7f:e1:19:14:bf:ce:9f:f8:cd:64:66:7b:65:d5: 80:a7:55:c5:64:da:6c:a4:46:2d:a9:fc:7d:82:3d: 00:41:53:e5:29:d2:8c:fd:b7:dc:5f:5b:8e:53:cf: 41:c5:e4:0a:51:53:29:11:e3:b0:26:5e:ba:9b:04: 2b:e1:61:56:b9:f5:0d:a9:49:38:70:1e:93:54:9c: 01:86:8e:6f:17:e8:d7:9f:1c:bf:c9:ec:c0:34:e5: 5d:9b:d9:7f:93:47:15:cd:db:ab:f7:e7:f1:c5:69: 9f:6e:00:32:fb:2b:d2:cd:99:c6:d2:49:fa:5b:c4: ca:ce:ec:43:74:e6:ca:1c:96:60:9f:fe:66:07:8a: dd:ee:71:a8:c8:fb:2c:d4:c8:5d:27:44:23:29:7b: 87:b3:31:75:de:54:ec:9a:82:3f:22:34:32:28:0a: 77:ae:9b:f4:61:90:51:84:45:45:77:81:a3:17:14: 44:48:e2:de:2b:ea:53:36:36:eb:64:8e:95:cf:34: 54:ff:8a:16:d5:b3:2b:65:9b:c3:dd:77:45:8b:35: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:96:B9:32:6F:35:36:32:A9:BC:AE:55:1E:1D:4B:2C:D4:64:51 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d3:13:b8:e8:b2:61:5d:38:6a:78:f8:7b:40:27:67:8e:3f: 9c:37:52:58:78:a0:57:01:3c:ce:d0:b3:a5:ce:60:fc:8f:54: 5f:0a:4b:e2:27:51:71:5c:38:b3:42:91:26:cb:21:86:e7:84: c4:19:17:f5:cf:ca:31:00:d7:5b:79:5a:07:32:09:78:0c:b1: a4:0e:e9:70:e8:39:8d:0d:7c:03:2e:d1:12:65:62:3a:41:7d: d5:c3:f4:e7:b7:5d:85:76:82:aa:a9:64:97:a8:b7:5d:e5:61: 21:5a:6b:d4:4c:2f:1d:1f:09:09:be:04:96:b3:d7:e4:0c:3a: e2:04:72:98:f9:19:4c:dc:6e:fb:08:41:c0:b3:a5:a0:31:ce: f0:39:0f:52:3c:b0:e8:50:ba:a4:ac:76:2a:03:dd:85:44:cf: f3:02:27:04:fc:2a:46:77:7b:f1:82:73:4b:91:5b:0e:a4:4e: c2:02:f6:77:44:e1:c4:d0:b2:55:b5:6d:aa:86:d7:3e:06:01: 6a:b8:55:c7:45:99:61:11:e2:29:91:47:90:e9:2d:8e:77:67: 81:3f:7d:5f:ee:b2:ae:cf:e2:65:4f:9c:91:eb:26:e9:cb:f9: 61:25:70:10:2c:ea:dd:3d:f8:14:b2:ef:d9:9f:08:d6:da:80: 10:31:97:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUxMDE4MjExMjE3WhcNMjUxMDI1MjExMjE3WjAYMRYwFAYD VQQDEw02OGY0MDJiMS1hNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0nk8eubPhjRhZSwH4hEiEpIlqTAIvMa07t9PUuGzH8gR15bseKwm3ugOBpG f+EZFL/On/jNZGZ7ZdWAp1XFZNpspEYtqfx9gj0AQVPlKdKM/bfcX1uOU89BxeQK UVMpEeOwJl66mwQr4WFWufUNqUk4cB6TVJwBho5vF+jXnxy/yezANOVdm9l/k0cV zdur9+fxxWmfbgAy+yvSzZnG0kn6W8TKzuxDdObKHJZgn/5mB4rd7nGoyPss1Mhd J0QjKXuHszF13lTsmoI/IjQyKAp3rpv0YZBRhEVFd4GjFxRESOLeK+pTNjbrZI6V zzRU/4oW1bMrZZvD3XdFizU8EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYalrky bzU2Mqm8rlUeHUss1GRRMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ0xO46LJhXThqePh7QCdnjj+cN1JYeKBXATzO0LOlzmD8j1RfCkvi J1FxXDizQpEmyyGG54TEGRf1z8oxANdbeVoHMgl4DLGkDulw6DmNDXwDLtESZWI6 QX3Vw/Tnt12FdoKqqWSXqLdd5WEhWmvUTC8dHwkJvgSWs9fkDDriBHKY+RlM3G77 CEHAs6WgMc7wOQ9SPLDoULqkrHYqA92FRM/zAicE/CpGd3vxgnNLkVsOpE7CAvZ3 ROHE0LJVtW2qhtc+BgFquFXHRZlhEeIpkUeQ6S2Od2eBP31f7rKuz+JlT5yR6ybp y/lhJXAQLOrdPfgUsu/ZnwjW2oAQMZc/ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:03 2025 by rpki-client