$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: iLMRP9f2AgnlArN5LMrfgHThI6MJ1xoYndmirEEmbGA= Subject key identifier: A4:2D:74:5E:29:E8:F6:85:C4:9C:15:C1:15:E8:9F:80:6F:1D:AA:37 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 248E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 247E Signing time: Mon 20 Oct 2025 15:59:35 +0000 Manifest this update: Mon 20 Oct 2025 15:59:35 +0000 Manifest next update: Mon 27 Oct 2025 15:59:35 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: LqLIJ7acf9iMZgIIQs98J5XDgjkeQvTVC914OuO+sw8=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9358 (0x248e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Oct 20 15:59:35 2025 GMT Not After : Oct 27 15:59:35 2025 GMT Subject: CN=68f65c67-a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:83:d1:77:0b:34:8e:c6:2b:75:a5:4f:32: 87:c4:72:2a:63:b3:1b:e7:da:69:8b:e3:e9:b4:93: 9c:ff:db:cd:08:41:27:ac:7b:ef:cb:1c:a2:c6:b5: 96:64:44:89:94:46:b4:65:1d:c4:a2:ca:f1:a4:ce: 8f:e9:64:67:35:18:fe:c8:90:d5:8c:5f:81:96:4e: 0e:97:7c:16:85:87:3a:3e:24:af:ea:a6:de:5d:6a: 6b:a3:f7:74:20:6a:07:75:02:e9:a4:9f:60:24:d3: 14:cb:81:a6:75:ce:35:81:1a:2f:55:95:98:db:d3: 2d:25:d0:4f:8b:ec:f1:27:b7:44:f3:97:15:f4:b6: 03:37:41:47:3a:30:8e:79:5b:12:49:c6:82:27:30: d0:f8:7f:eb:67:3b:72:e9:b7:ad:c5:51:e7:cd:44: 33:64:5c:c2:35:3d:5b:64:e1:4c:98:05:79:ea:08: 84:89:f9:b0:69:4a:64:fb:53:c3:5b:6a:69:84:ce: 7f:cb:e7:00:71:cd:1c:df:7c:ff:fa:4f:3b:c6:d6: 27:6a:ec:cd:32:5d:07:53:47:b6:71:11:99:31:60: 4e:67:af:22:4d:e0:e9:1e:bc:e5:cb:47:a0:21:61: af:db:73:c4:cd:65:93:14:16:e1:de:ef:c3:41:d1: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:74:5E:29:E8:F6:85:C4:9C:15:C1:15:E8:9F:80:6F:1D:AA:37 X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a5:50:11:e4:ff:bb:30:ec:f4:55:ba:cc:66:0d:f3:38:cc: c6:89:9c:97:0a:39:6f:a4:36:c9:0c:2e:45:79:fc:f0:6f:86: 60:65:f9:d9:3d:6b:ab:1b:46:f7:97:2e:31:22:cd:21:2e:2f: 0d:41:39:e8:9c:2d:71:8a:a2:c4:6f:57:8a:b1:50:f2:0e:00: 76:d2:d8:09:30:b8:68:d4:86:5c:9f:57:be:ae:bf:4f:71:a2: 1e:f1:80:15:a8:30:9f:bb:f5:b9:33:66:cb:14:67:4d:cf:94: 12:a2:fc:ef:8b:de:92:43:fe:e8:17:32:f8:77:a8:3b:09:54: d3:d6:30:be:a3:39:34:98:a1:6b:26:a0:c4:19:3e:0f:8e:76: 45:29:86:7e:89:a5:7b:15:8b:d6:70:aa:d0:11:ef:a8:24:05: 21:53:41:6c:3d:b8:2f:5f:68:ed:91:b8:d8:8f:ad:d9:81:e6: 8c:1c:64:a3:eb:bd:34:4e:dd:18:b8:a2:b4:c8:95:25:06:d0: 09:cc:45:c3:d8:66:c3:20:57:2e:d2:ea:42:35:ba:e6:b7:35: c8:f1:8a:e8:6b:e4:1c:c9:c7:9f:ae:86:d1:a1:14:ab:3a:27: 94:c1:35:ba:70:08:ff:28:9f:83:6f:26:11:0f:78:f3:c8:77: 41:0f:62:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUxMDIwMTU1OTM1WhcNMjUxMDI3MTU1OTM1WjAYMRYwFAYD VQQDEw02OGY2NWM2Ny1hNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNmD0XcLNI7GK3WlTzKHxHIqY7Mb59ppi+PptJOc/9vNCEEnrHvvyxyixrWW ZESJlEa0ZR3EosrxpM6P6WRnNRj+yJDVjF+Blk4Ol3wWhYc6PiSv6qbeXWpro/d0 IGoHdQLppJ9gJNMUy4Gmdc41gRovVZWY29MtJdBPi+zxJ7dE85cV9LYDN0FHOjCO eVsSScaCJzDQ+H/rZzty6betxVHnzUQzZFzCNT1bZOFMmAV56giEifmwaUpk+1PD W2pphM5/y+cAcc0c33z/+k87xtYnauzNMl0HU0e2cRGZMWBOZ68iTeDpHrzly0eg IWGv23PEzWWTFBbh3u/DQdEmuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQtdF4p 6PaFxJwVwRXon4BvHao3MB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCApVAR5P+7MOz0VbrMZg3zOMzGiZyXCjlvpDbJDC5Fefzwb4ZgZfnZ PWurG0b3ly4xIs0hLi8NQTnonC1xiqLEb1eKsVDyDgB20tgJMLho1IZcn1e+rr9P caIe8YAVqDCfu/W5M2bLFGdNz5QSovzvi96SQ/7oFzL4d6g7CVTT1jC+ozk0mKFr JqDEGT4PjnZFKYZ+iaV7FYvWcKrQEe+oJAUhU0FsPbgvX2jtkbjYj63ZgeaMHGSj 6700Tt0YuKK0yJUlBtAJzEXD2GbDIFcu0upCNbrmtzXI8Yroa+QcycefrobRoRSr OieUwTW6cAj/KJ+DbyYRD3jzyHdBD2L4 -----END CERTIFICATE-----Generated at Tue Oct 21 00:52:57 2025 by rpki-client