$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: N3ysIaJQu2dlfmcr5SbP7OFIvliwYxqHBfNVNwJ2caI= Subject key identifier: 54:6B:1F:46:B1:E0:C2:E9:8C:44:E5:3D:25:33:00:EC:D2:91:CD:3A Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 01D4 Signing time: Sun 19 Oct 2025 05:23:22 +0000 Manifest this update: Sun 19 Oct 2025 05:23:22 +0000 Manifest next update: Sun 26 Oct 2025 05:23:22 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: XocNeUenM+iuTCkNfM83gHdWZJO0woqT127/nk4xBEQ=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: wIfWv8k11m2nJjvD9OZyvuvwJHOiHTaCFNkOK+76jZw=) 3: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 8Baf5eHeRnNrGmSSDb+55e+ExZ2m5tnzgHIxbW3wB58=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: /e5dKdsxY7i/S5RsJcqyRRAjOevxOXqA06J4ijaW9S8=) 5: 118AB342249511EFBF275B73C4F9AE02.roa (hash: ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: 1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Oct 19 05:23:22 2025 GMT Not After : Oct 26 05:23:22 2025 GMT Subject: CN=68f475ca-057c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:b5:6d:2a:9d:7c:25:3d:c4:b9:04:04:3a: bf:ae:75:d1:7d:5c:34:ec:a2:cb:12:e8:31:3a:bb: 8a:78:e0:8e:f0:d4:5c:03:6b:75:51:a4:be:de:1c: 81:84:2b:ac:1f:32:2e:5a:95:48:00:71:23:79:7c: 81:30:f4:a5:e2:f1:66:25:99:ee:aa:7a:b6:f0:ad: 46:df:b8:c4:f1:a9:b0:f5:f6:bf:52:54:1f:97:56: a9:09:80:a7:14:76:fe:b2:65:76:ea:c7:58:b2:6a: 95:c0:9c:d0:ec:35:a7:0f:0f:26:8e:40:5f:b9:91: 28:b6:67:ea:d8:8e:90:e9:a6:ab:cd:87:58:21:db: 1b:45:b4:66:19:36:68:2f:65:df:3c:fa:b6:00:4f: d8:8f:2e:08:f9:60:c5:e5:c8:5c:23:86:62:14:34: 35:d3:d7:da:d8:1a:d3:5f:c0:b5:6d:2b:a8:c7:b4: 74:82:7e:d8:ca:fd:72:9d:34:5a:c2:91:1e:ed:d9: c4:ce:4d:2c:c2:09:18:5c:ba:cc:1a:bc:b7:d5:54: 0a:39:0e:dc:11:af:28:52:31:0d:66:be:4d:e4:80: f4:26:7e:2a:7a:5d:fa:13:b2:29:d7:b9:de:31:80: 80:19:14:d7:18:8f:cf:c0:e5:31:a1:77:b4:8a:cc: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:1F:46:B1:E0:C2:E9:8C:44:E5:3D:25:33:00:EC:D2:91:CD:3A X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:da:61:46:3c:15:55:41:63:1e:26:3d:89:12:f2:9e:17:bc: 0b:62:07:65:29:53:df:0a:b0:04:fe:60:67:50:04:ad:44:a4: 3c:ad:ce:53:d1:66:08:da:38:4d:f0:ef:09:35:da:e7:dc:32: 14:5c:e8:f3:19:85:9d:71:5b:b5:3e:22:de:10:ff:f9:0b:a7: 61:e3:36:9d:3d:b9:de:33:4f:7f:4a:9e:cc:99:56:2e:05:ab: cf:6d:b4:ce:7f:3b:11:91:7c:84:1a:34:4b:56:36:bb:f8:1d: ab:69:d9:23:f6:1a:41:44:89:21:e5:19:7a:45:14:9c:aa:13: 39:51:4f:8e:09:e7:f6:50:a7:50:ee:2c:ba:e5:df:4b:eb:f8: 5d:0a:97:af:56:6f:23:b6:5a:78:47:bc:a7:d4:40:21:33:4e: 20:65:3f:f6:56:2a:f8:ac:50:f7:87:4c:84:6f:c9:7e:60:f3: 81:7b:16:10:64:32:dc:cc:f3:10:63:54:5a:fb:bc:26:24:e6: e9:14:ed:e4:07:30:2b:b9:8c:d7:30:03:18:4d:9c:ab:3b:f5: 85:50:88:ea:92:7f:80:3f:b6:48:65:ce:87:78:8c:96:36:ad: fe:09:a3:b5:72:cf:48:08:b6:d5:39:75:47:e6:6a:d2:97:1f: b0:4e:9b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjUxMDE5MDUyMzIyWhcNMjUxMDI2MDUyMzIyWjAYMRYwFAYD VQQDEw02OGY0NzVjYS0wNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUq1bSqdfCU9xLkEBDq/rnXRfVw07KLLEugxOruKeOCO8NRcA2t1UaS+3hyB hCusHzIuWpVIAHEjeXyBMPSl4vFmJZnuqnq28K1G37jE8amw9fa/UlQfl1apCYCn FHb+smV26sdYsmqVwJzQ7DWnDw8mjkBfuZEotmfq2I6Q6aarzYdYIdsbRbRmGTZo L2XfPPq2AE/Yjy4I+WDF5chcI4ZiFDQ109fa2BrTX8C1bSuox7R0gn7Yyv1ynTRa wpEe7dnEzk0swgkYXLrMGry31VQKOQ7cEa8oUjENZr5N5ID0Jn4qel36E7Ip17ne MYCAGRTXGI/PwOUxoXe0iswCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRrH0ax 4MLpjETlPSUzAOzSkc06MB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl2mFGPBVVQWMeJj2JEvKeF7wLYgdlKVPfCrAE/mBnUAStRKQ8rc5T 0WYI2jhN8O8JNdrn3DIUXOjzGYWdcVu1PiLeEP/5C6dh4zadPbneM09/Sp7MmVYu BavPbbTOfzsRkXyEGjRLVja7+B2radkj9hpBRIkh5Rl6RRScqhM5UU+OCef2UKdQ 7iy65d9L6/hdCpevVm8jtlp4R7yn1EAhM04gZT/2Vir4rFD3h0yEb8l+YPOBexYQ ZDLczPMQY1Ra+7wmJObpFO3kBzAruYzXMAMYTZyrO/WFUIjqkn+AP7ZIZc6HeIyW Nq3+CaO1cs9ICLbVOXVH5mrSlx+wTps+ -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:30 2025 by rpki-client