$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: ZylLpk4+5PwIcvv9zfpjRX9IRFUuuhNf5pcyUcLWfwE= Subject key identifier: 40:5A:29:EF:89:DC:A4:7C:F5:66:DD:B7:FA:6F:A0:BD:D4:70:FE:C4 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 248E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 246E Signing time: Sat 18 Oct 2025 16:02:16 +0000 Manifest this update: Sat 18 Oct 2025 16:02:15 +0000 Manifest next update: Sat 25 Oct 2025 16:02:15 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: Y9DeWMpjUyBj2yxnG24hYk+vDlqYXyj3/vL8Yqwl/wI=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: Jn0BrvewJ0VHEBEPQp+4AkXwLJvrQBlbc50TDzwhQxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9358 (0x248e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Oct 18 16:02:15 2025 GMT Not After : Oct 25 16:02:15 2025 GMT Subject: CN=68f3ba07-d8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:73:89:6d:fe:6a:c9:18:cf:ba:d2:62:86: 81:e1:eb:38:45:28:6a:6a:44:a7:21:57:80:46:0f: 16:fa:10:fc:33:5d:ff:02:ed:6f:1f:bf:66:04:bd: f5:3f:9d:60:d2:6b:0b:2c:f3:e4:17:68:37:7c:17: 7b:3f:b6:e2:d7:5c:c6:47:16:b3:70:98:9f:a4:f4: 40:56:7a:ba:d7:91:ed:d1:73:81:39:97:63:81:e2: 7d:05:c9:80:2f:10:be:52:4b:cc:85:39:d6:30:0b: 7f:a9:67:ec:14:57:e9:40:42:b7:1c:e7:cd:c6:23: c2:4c:f4:6d:6d:69:e9:2d:e8:17:8a:b7:65:d0:39: d1:3e:0a:e3:64:eb:a5:6b:43:9e:df:87:ed:3b:1a: 92:2d:9a:b4:d4:8b:9a:85:fc:a0:1b:c1:4d:a5:ff: ef:47:dd:c1:42:c0:96:8a:32:b4:f7:35:33:23:33: 97:33:0a:31:62:bf:ca:b8:92:c2:6e:30:21:f2:ba: 45:1b:46:cc:77:0c:26:ef:55:3e:92:ff:3e:e8:d4: 68:f2:a6:d9:f6:21:7a:00:4c:64:74:80:94:03:9c: 66:e2:ce:c2:3a:a6:3f:85:27:2f:c5:23:aa:cf:ed: b4:39:74:0b:79:f6:c8:e1:83:26:97:53:08:6c:ce: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5A:29:EF:89:DC:A4:7C:F5:66:DD:B7:FA:6F:A0:BD:D4:70:FE:C4 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:89:87:ac:d8:bb:f6:8e:b7:3a:75:87:f6:6b:f3:d4:47:11: ca:f9:94:2f:c8:2b:2b:bc:ed:76:7a:3f:9d:88:32:b0:25:bf: d6:93:9b:12:72:ef:0d:f9:81:13:50:35:dc:c3:ce:ef:dc:1f: 95:58:02:86:ca:b3:86:9a:7b:06:64:35:b2:70:68:ec:d8:d1: 6a:6c:ca:b4:16:5b:4d:2c:3b:7c:9f:21:4c:99:60:83:a0:a2: 2b:d3:c4:26:b7:6f:29:cf:07:45:35:38:fe:c4:93:e7:dc:9c: 46:52:ee:91:ad:2a:44:e1:b7:52:f5:54:4a:10:ba:f0:c4:2a: 22:e4:a6:19:89:d5:a1:7a:85:68:86:74:e3:49:9f:97:f9:21: 4b:97:f3:4e:47:cd:f6:b5:f1:cf:cc:06:96:f8:b4:59:f3:00: 5b:c8:cd:e6:bb:5d:13:47:71:b5:f7:59:d2:db:8b:39:96:f3: 9f:82:b5:2d:22:b4:d7:c1:b2:85:91:65:14:c3:02:a8:4c:df: 9a:ce:7b:b6:20:25:df:d7:df:29:fd:96:cd:60:ed:a4:d6:e1: 5d:4e:7a:48:88:6f:83:df:c6:34:c9:ba:9e:3b:71:a4:81:73: 59:d2:e2:90:e9:d8:b0:c3:f9:00:32:7a:10:a2:2f:48:20:0b: 9a:af:87:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUxMDE4MTYwMjE1WhcNMjUxMDI1MTYwMjE1WjAYMRYwFAYD VQQDEw02OGYzYmEwNy1kOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhtziW3+askYz7rSYoaB4es4RShqakSnIVeARg8W+hD8M13/Au1vH79mBL31 P51g0msLLPPkF2g3fBd7P7bi11zGRxazcJifpPRAVnq615Ht0XOBOZdjgeJ9BcmA LxC+UkvMhTnWMAt/qWfsFFfpQEK3HOfNxiPCTPRtbWnpLegXirdl0DnRPgrjZOul a0Oe34ftOxqSLZq01IuahfygG8FNpf/vR93BQsCWijK09zUzIzOXMwoxYr/KuJLC bjAh8rpFG0bMdwwm71U+kv8+6NRo8qbZ9iF6AExkdICUA5xm4s7COqY/hScvxSOq z+20OXQLefbI4YMml1MIbM6y5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBaKe+J 3KR89Wbdt/pvoL3UcP7EMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQiYes2Lv2jrc6dYf2a/PURxHK+ZQvyCsrvO12ej+diDKwJb/Wk5sS cu8N+YETUDXcw87v3B+VWAKGyrOGmnsGZDWycGjs2NFqbMq0FltNLDt8nyFMmWCD oKIr08Qmt28pzwdFNTj+xJPn3JxGUu6RrSpE4bdS9VRKELrwxCoi5KYZidWheoVo hnTjSZ+X+SFLl/NOR832tfHPzAaW+LRZ8wBbyM3mu10TR3G191nS24s5lvOfgrUt IrTXwbKFkWUUwwKoTN+aznu2ICXf198p/ZbNYO2k1uFdTnpIiG+D38Y0ybqeO3Gk gXNZ0uKQ6diww/kAMnoQoi9IIAuar4di -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:40 2025 by rpki-client