$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft File: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json) Hash identifier: 1u+YMwSJf5JVu9UmWWdjHFzbUguUy6m9JSp0cOsBOLE= Subject key identifier: 9C:B7:D7:FC:A7:45:E2:C5:CA:7E:4C:9F:A6:E5:A1:C5:9F:08:2D:C8 Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 Certificate issuer: /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft Manifest number: 95 Signing time: Sun 19 Oct 2025 09:38:42 +0000 Manifest this update: Sun 19 Oct 2025 09:38:41 +0000 Manifest next update: Sun 26 Oct 2025 09:38:41 +0000 Files and hashes: 1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: j9Wm8WQKiOGR7WoMbkH8qNHdQz0DQK3SpOO5kbvvfak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Validity Not Before: Oct 19 09:38:41 2025 GMT Not After : Oct 26 09:38:41 2025 GMT Subject: CN=68f4b1a1-d6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:74:ab:c2:38:c5:bc:48:00:57:c9:7c:34: 52:ce:07:dc:ce:48:5d:a2:ee:60:7f:93:28:ce:ab: c5:58:bf:58:30:31:15:ee:75:4f:16:ba:33:d6:79: 8c:19:50:54:c9:a3:23:a6:2c:b1:6f:6b:1e:5f:b0: bc:65:41:36:a3:48:b5:6f:55:6a:ef:be:fa:d1:18: 92:58:1e:9c:4c:d0:2b:8a:54:d3:a1:a1:90:62:4b: 87:63:40:04:b9:69:3c:67:a3:df:ab:86:e5:11:f8: 35:b5:b8:e3:4f:be:d2:2f:8b:0a:62:94:46:34:11: c7:90:b0:b1:b3:2b:b3:f1:46:9f:93:7e:fd:4f:6f: f3:21:0e:0f:3e:38:1f:f1:aa:ab:e7:59:c4:58:5c: d4:f6:71:b3:1a:5d:09:b5:98:c3:2b:3d:ca:f1:7a: 7e:d8:d2:f4:9b:dc:d1:d3:d6:fe:ea:4a:74:be:26: 23:71:9d:45:8f:15:9f:4a:1f:55:f5:9a:b2:94:da: bd:2c:5b:98:f4:20:c0:89:c3:0a:6c:e8:a3:7e:cc: 9b:41:08:55:4e:a8:6b:30:9f:39:1a:17:0b:cb:66: 93:1f:e0:e9:57:59:00:2e:a5:18:73:ec:3d:58:bd: 6e:6c:22:1f:af:30:33:e2:c8:b0:60:50:50:d0:04: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:D7:FC:A7:45:E2:C5:CA:7E:4C:9F:A6:E5:A1:C5:9F:08:2D:C8 X509v3 Authority Key Identifier: keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:45:dd:21:9a:6f:d3:f2:40:47:7d:ac:e7:d7:b2:e9:ac:77: 37:7e:b0:d6:16:b9:59:94:3c:a4:ca:98:91:5e:c0:0b:c3:2a: a3:82:06:f0:ed:59:2f:cc:3f:6c:79:a2:59:e5:df:66:2f:3a: e6:f5:ef:01:09:d4:a6:77:c3:5f:00:e1:57:d5:18:e9:7c:ca: 49:52:f9:0a:8b:85:0b:f9:b4:2e:ff:8f:28:4c:92:ef:dc:67: 72:78:7c:8b:f0:4c:1a:ec:5e:92:1a:c4:51:a5:62:19:63:5b: 44:a8:1a:d1:dc:74:15:96:87:0c:dc:cc:2b:da:dc:48:ab:1f: c0:a1:4d:1b:38:b1:24:bf:91:97:38:e6:82:59:8f:30:db:59: ce:9b:23:2d:59:d4:f5:61:de:ee:26:fb:7f:8f:e6:06:a0:3e: d1:35:1c:99:80:d7:2b:96:f0:73:70:9c:1f:8d:39:fb:a6:99: c4:2d:43:a9:6e:bd:ce:3e:a8:fd:f7:f0:c6:ee:8f:5b:bf:67: 87:5f:76:9b:c6:25:97:6d:64:8d:56:4f:c7:c8:82:2c:f4:51: b9:f5:8f:1f:79:73:ac:2f:81:eb:9b:b2:76:d4:1a:c9:8c:c3: 7b:c1:ea:73:9e:f3:74:90:60:9a:df:5e:1d:34:d9:ac:37:ab: 6c:8e:96:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1MzYxMTAvBgNVBAUTKEYzMzY3RDc0NDQ4Mzk5QzE4RUY2N0M3Qzk4NjEwN0I4 MTRCMTJENjQwHhcNMjUxMDE5MDkzODQxWhcNMjUxMDI2MDkzODQxWjAYMRYwFAYD VQQDEw02OGY0YjFhMS1kNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzV0q8I4xbxIAFfJfDRSzgfczkhdou5gf5MozqvFWL9YMDEV7nVPFroz1nmM GVBUyaMjpiyxb2seX7C8ZUE2o0i1b1Vq77760RiSWB6cTNArilTToaGQYkuHY0AE uWk8Z6Pfq4blEfg1tbjjT77SL4sKYpRGNBHHkLCxsyuz8Uafk379T2/zIQ4PPjgf 8aqr51nEWFzU9nGzGl0JtZjDKz3K8Xp+2NL0m9zR09b+6kp0viYjcZ1FjxWfSh9V 9ZqylNq9LFuY9CDAicMKbOijfsybQQhVTqhrMJ85GhcLy2aTH+DpV1kALqUYc+w9 WL1ubCIfrzAz4siwYFBQ0AT/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy31/yn ReLFyn5Mn6blocWfCC3IMB8GA1UdIwQYMBaAFPM2fXREg5nBjvZ8fJhhB7gUsS1k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjUzNi9BMzA1RjRFNEM5 OUExMUVGQjRDRUVGMUVDNEY5QUUwMi84elo5ZEVTRG1jR085bng4bUdFSHVCU3hM V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjUzNi9BMzA1RjRFNEM5OUExMUVGQjRDRUVGMUVDNEY5QUUwMi84elo5ZEVTRG1j R085bng4bUdFSHVCU3hMV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNRd0hmm/T8kBHfazn17LprHc3frDWFrlZlDykypiRXsALwyqjggbw 7VkvzD9seaJZ5d9mLzrm9e8BCdSmd8NfAOFX1RjpfMpJUvkKi4UL+bQu/48oTJLv 3GdyeHyL8Ewa7F6SGsRRpWIZY1tEqBrR3HQVlocM3Mwr2txIqx/AoU0bOLEkv5GX OOaCWY8w21nOmyMtWdT1Yd7uJvt/j+YGoD7RNRyZgNcrlvBzcJwfjTn7ppnELUOp br3OPqj99/DG7o9bv2eHX3abxiWXbWSNVk/HyIIs9FG59Y8feXOsL4Hrm7J21BrJ jMN7wepznvN0kGCa314dNNmsN6tsjpZ4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:07 2025 by rpki-client