$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: L0hZNCU7VsHwpIfbBgqoQSD6oP+dD+HZ1AuHgh0ZWmY= Subject key identifier: 0D:E4:F8:66:14:99:E9:72:59:8B:8F:54:99:D3:F4:AC:71:1F:66:5E Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 0103 Signing time: Sun 19 Oct 2025 07:59:43 +0000 Manifest this update: Sun 19 Oct 2025 07:59:42 +0000 Manifest next update: Sun 26 Oct 2025 07:59:42 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: EUPwJ8BbkSd+D0G+cfkT66PuwAyTdFTGI5jvZcQ2mqY=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Oct 19 07:59:42 2025 GMT Not After : Oct 26 07:59:42 2025 GMT Subject: CN=68f49a6f-b54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:5f:b3:a3:9c:98:39:52:38:4e:48:06:71: 9e:a8:93:6b:56:74:0b:cd:bc:6c:48:77:35:d5:6a: c0:9b:99:c5:93:70:53:90:08:4e:14:40:02:a5:a8: 63:a8:54:71:b6:fb:13:d9:08:14:b9:8d:ca:12:f2: 4b:44:2e:71:52:eb:b7:c1:49:e0:c8:8b:cd:13:8e: 04:7d:42:3b:29:e1:32:2f:06:4f:50:3b:e5:76:dd: 3c:77:cf:b1:7f:0b:ee:2d:d9:06:01:ae:32:d7:e6: 33:11:99:2f:66:25:6f:54:1a:5a:f8:ea:51:5b:90: d2:4b:dd:37:ef:1d:ea:3f:42:ed:31:71:42:23:17: 24:be:54:2b:12:e3:b6:5c:a7:ff:73:a2:e6:f7:a3: a5:16:9a:97:76:3c:cd:26:fb:a3:94:e5:4a:bc:df: a3:91:df:f2:8f:ac:b0:9f:f6:85:98:e8:d8:0d:c5: c5:0a:ea:59:9b:28:9a:bd:12:77:6d:a7:01:86:07: 33:97:0b:ac:60:f0:eb:19:32:2f:a0:36:25:33:4d: ff:14:78:d4:d1:54:d5:88:e4:4d:74:da:86:8f:e9: 8c:1e:50:98:c4:e0:09:5c:4d:ea:0e:0a:11:99:2b: 67:26:67:d3:f8:24:08:4c:91:06:56:c3:72:ce:59: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E4:F8:66:14:99:E9:72:59:8B:8F:54:99:D3:F4:AC:71:1F:66:5E X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2a:ef:ac:51:c6:c2:1e:b1:24:d2:3d:fa:6a:b0:a4:44:8b: fb:32:4b:5b:0e:de:04:83:76:bd:78:94:39:d2:1f:06:49:65: bb:09:bb:80:54:19:af:e1:44:a1:01:a7:5d:4e:04:e8:c3:4a: c0:8c:e8:aa:76:bc:1e:1c:57:c1:aa:77:f3:86:7e:f0:32:aa: e9:13:6a:e4:64:cc:70:18:00:3f:c2:1b:34:1b:88:bf:28:33: 5f:f0:85:bc:9d:c4:84:30:76:45:76:f7:3d:d8:c6:a1:b7:7f: 8e:a6:8c:18:e9:39:f5:5b:82:1c:a2:67:85:49:4d:05:b0:f9: 2e:cf:1e:4f:24:18:2a:0c:f5:0a:46:73:b0:52:7e:18:74:57: b8:d0:32:19:e8:de:1a:cb:78:2f:1d:b2:bd:29:53:e5:4f:96: 77:13:62:5c:e5:c4:17:fc:61:28:db:19:94:76:32:75:86:dc: e1:38:3a:de:42:c1:3f:05:25:9c:36:15:22:c1:9a:44:f2:b3: cf:51:11:9d:75:d6:fc:55:d5:44:53:91:1d:a4:74:a0:e0:d5: ab:ff:9e:73:fb:0e:8b:9f:52:4b:a2:f5:34:42:da:e0:4f:d8: 1f:d3:6f:06:97:43:81:1f:ac:93:fa:51:51:e5:0e:b5:46:c1: 01:8c:25:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUxMDE5MDc1OTQyWhcNMjUxMDI2MDc1OTQyWjAYMRYwFAYD VQQDEw02OGY0OWE2Zi1iNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzVfs6OcmDlSOE5IBnGeqJNrVnQLzbxsSHc11WrAm5nFk3BTkAhOFEACpahj qFRxtvsT2QgUuY3KEvJLRC5xUuu3wUngyIvNE44EfUI7KeEyLwZPUDvldt08d8+x fwvuLdkGAa4y1+YzEZkvZiVvVBpa+OpRW5DSS9037x3qP0LtMXFCIxckvlQrEuO2 XKf/c6Lm96OlFpqXdjzNJvujlOVKvN+jkd/yj6ywn/aFmOjYDcXFCupZmyiavRJ3 bacBhgczlwusYPDrGTIvoDYlM03/FHjU0VTViORNdNqGj+mMHlCYxOAJXE3qDgoR mStnJmfT+CQITJEGVsNyzlmyLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3k+GYU melyWYuPVJnT9KxxH2ZeMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrKu+sUcbCHrEk0j36arCkRIv7MktbDt4Eg3a9eJQ50h8GSWW7CbuA VBmv4UShAaddTgTow0rAjOiqdrweHFfBqnfzhn7wMqrpE2rkZMxwGAA/whs0G4i/ KDNf8IW8ncSEMHZFdvc92Maht3+OpowY6Tn1W4IcomeFSU0FsPkuzx5PJBgqDPUK RnOwUn4YdFe40DIZ6N4ay3gvHbK9KVPlT5Z3E2Jc5cQX/GEo2xmUdjJ1htzhODre QsE/BSWcNhUiwZpE8rPPURGdddb8VdVEU5EdpHSg4NWr/55z+w6Ln1JLovU0Qtrg T9gf028Gl0OBH6yT+lFR5Q61RsEBjCWe -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:01 2025 by rpki-client