$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: D46v8WQgpev5ppZQ03LSuFHB5v6bjOEAlK/X03/WrSE= Subject key identifier: 8C:FA:67:FC:43:EE:78:66:EF:6B:71:01:8D:65:7D:3C:D3:8A:FF:E9 Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 1414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 140C Signing time: Mon 20 Oct 2025 17:19:22 +0000 Manifest this update: Mon 20 Oct 2025 17:19:21 +0000 Manifest next update: Mon 27 Oct 2025 17:19:21 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: bONsCfummxfzS1Ej3BYpLZeNyqUu6SDROweMVKgJMz8=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: ttQKVIA3bhQ3yn0h9mDnukLDStF7uBzvZvWVyzWWSJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5140 (0x1414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Oct 20 17:19:21 2025 GMT Not After : Oct 27 17:19:21 2025 GMT Subject: CN=68f66f19-111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:5c:1a:69:33:6b:5f:d0:89:02:fc:19:ca: 22:ae:84:87:9a:1c:3f:f6:db:57:f7:50:11:57:fc: 28:7e:6e:c4:ce:81:68:da:97:d4:35:47:78:6a:6b: 3f:84:5f:03:d6:83:04:ac:3e:a6:5d:7a:25:8d:c3: b6:e8:4f:56:82:d9:79:ae:de:5c:b8:36:c6:e4:b8: 31:04:4f:91:3c:f0:63:98:8b:f2:f6:a0:d6:ec:1c: 69:0a:d8:8b:1f:36:94:35:af:e9:11:e8:8a:58:68: 1c:4a:e1:90:6a:ea:40:5b:85:da:32:2a:81:b4:0e: 42:10:2b:78:dc:5d:69:a6:67:62:2b:4d:3a:20:3f: 4a:b0:03:a9:2d:6f:f3:ba:bd:71:9f:fa:96:b2:5f: 51:55:c3:2a:9e:69:c2:e7:ba:6a:63:94:c7:c3:d8: e9:36:90:da:48:88:52:14:06:d5:07:e2:0f:3a:71: b9:51:18:35:72:2a:14:ae:14:1d:40:60:76:2f:55: 3a:00:75:e7:ee:48:63:cc:36:94:dd:bb:8c:c3:6c: e8:4b:97:be:32:b8:42:49:81:9c:cd:64:9b:ec:70: 9e:89:51:42:95:a3:43:e0:70:21:30:11:71:ff:28: 7f:f8:91:e3:28:eb:d5:ca:63:92:11:8c:57:5a:93: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:67:FC:43:EE:78:66:EF:6B:71:01:8D:65:7D:3C:D3:8A:FF:E9 X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:1e:a0:3a:df:79:5f:e8:ef:ad:57:c2:d5:db:fa:9a:35: f0:6d:3c:76:1a:9d:82:98:4e:72:cf:a6:c9:61:12:1c:8f:2e: f6:3c:88:a4:6d:80:18:8a:81:50:f4:07:19:1e:ad:92:30:77: 91:e1:ef:2b:c2:bb:99:1b:f2:d3:6b:9c:a3:7b:23:c4:cc:12: ed:8f:2e:7a:9b:fd:88:d1:79:83:89:25:0e:ff:5a:94:61:19: be:d9:43:db:ec:42:d5:5d:46:97:b7:83:40:de:bc:62:75:1e: b2:61:35:0e:be:0b:83:78:cc:0c:39:39:eb:18:2a:03:71:d9: f9:2f:e4:d3:1d:96:39:79:f0:9b:83:2a:a1:35:ca:dd:78:3c: 79:16:e9:e9:a0:48:65:78:30:a6:0d:f4:01:69:e5:06:8a:a5: 08:9f:35:a2:dd:35:3e:a9:68:6b:37:e8:16:f6:c9:a0:a1:b7: be:69:f5:65:2e:7e:84:14:3e:df:72:9d:81:fa:46:40:60:7c: bd:e6:35:fa:3e:78:6a:e8:01:7b:46:25:1a:aa:e0:00:30:1c: d9:10:b1:26:63:b0:5c:a5:b5:4d:00:5c:7e:18:a2:44:9a:83: dc:0e:2e:a7:24:b1:30:eb:29:44:82:aa:29:47:e1:9e:fd:ef: 76:33:b0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUxMDIwMTcxOTIxWhcNMjUxMDI3MTcxOTIxWjAYMRYwFAYD VQQDEw02OGY2NmYxOS0xMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRRcGmkza1/QiQL8GcoiroSHmhw/9ttX91ARV/wofm7EzoFo2pfUNUd4ams/ hF8D1oMErD6mXXoljcO26E9Wgtl5rt5cuDbG5LgxBE+RPPBjmIvy9qDW7BxpCtiL HzaUNa/pEeiKWGgcSuGQaupAW4XaMiqBtA5CECt43F1ppmdiK006ID9KsAOpLW/z ur1xn/qWsl9RVcMqnmnC57pqY5THw9jpNpDaSIhSFAbVB+IPOnG5URg1cioUrhQd QGB2L1U6AHXn7khjzDaU3buMw2zoS5e+MrhCSYGczWSb7HCeiVFClaND4HAhMBFx /yh/+JHjKOvVymOSEYxXWpN+CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz6Z/xD 7nhm72txAY1lfTzTiv/pMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYbh6gOt95X+jvrVfC1dv6mjXwbTx2Gp2CmE5yz6bJYRIcjy72PIik bYAYioFQ9AcZHq2SMHeR4e8rwruZG/LTa5yjeyPEzBLtjy56m/2I0XmDiSUO/1qU YRm+2UPb7ELVXUaXt4NA3rxidR6yYTUOvguDeMwMOTnrGCoDcdn5L+TTHZY5efCb gyqhNcrdeDx5FunpoEhleDCmDfQBaeUGiqUInzWi3TU+qWhrN+gW9smgobe+afVl Ln6EFD7fcp2B+kZAYHy95jX6Pnhq6AF7RiUaquAAMBzZELEmY7BcpbVNAFx+GKJE moPcDi6nJLEw6ylEgqopR+Ge/e92M7CG -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:22 2025 by rpki-client