$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: k0117sEC5BfVvNv3lRq3Ss3cF6znJTlaln67v0oQJC0= Subject key identifier: 48:A0:57:4B:2C:D4:4C:DE:90:AF:BA:69:AD:60:61:85:65:45:4F:36 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 34D2 Signing time: Sat 18 Oct 2025 15:20:59 +0000 Manifest this update: Sat 18 Oct 2025 15:20:57 +0000 Manifest next update: Sat 25 Oct 2025 15:20:57 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: 7Xwzv7KlAdFDi4bO2dPyYpyOW5qfKrtn/DrtHADF2UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: Oct 18 15:20:57 2025 GMT Not After : Oct 25 15:20:57 2025 GMT Subject: CN=68f3b05a-12ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:67:a4:a5:70:7d:35:28:d0:4c:a9:0e:da: 9e:aa:d0:39:d9:49:df:75:ee:74:e1:fd:a9:7f:ea: ce:03:c6:53:3a:52:8c:a7:fb:4b:3d:10:a9:49:0b: 35:28:de:b3:4b:a7:be:f4:33:9f:ca:c7:9b:d7:e0: 87:ae:01:9e:33:d4:41:aa:d0:00:c1:2f:ee:b6:d4: 97:2d:f3:02:51:4a:76:14:55:4e:9d:6e:16:0e:ca: 2f:cf:c7:5c:ff:8e:f7:fb:1d:4c:ce:ab:1f:82:4c: 7a:d9:83:fd:af:c7:e3:e5:0e:af:27:3e:5c:4a:74: 32:80:a9:c3:f0:96:fe:91:dd:99:1d:ff:69:bb:34: 72:6c:ca:b8:d2:0c:6f:82:78:cd:29:62:06:c6:75: db:9b:d9:2d:ba:31:15:37:d4:f7:f6:9b:89:bc:d4: 07:71:2d:f6:b3:4b:42:a6:d0:c4:f6:4c:bf:32:28: 2e:88:20:66:ae:f9:9b:0d:cc:b6:78:78:8e:e3:d4: e9:92:78:49:c0:ab:6f:d7:85:12:13:96:5c:ca:d2: fa:73:15:aa:ee:6c:fe:07:f3:6d:2e:73:43:40:d1: ae:5b:1c:f5:7e:a0:83:a3:9f:86:84:64:05:1c:da: 0f:12:58:80:76:6e:46:c1:f6:ab:89:5a:07:9f:5a: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A0:57:4B:2C:D4:4C:DE:90:AF:BA:69:AD:60:61:85:65:45:4F:36 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:17:13:eb:49:bd:05:b7:4a:f1:63:a3:23:da:41:cb:f1:eb: f9:0c:76:a6:75:b3:31:34:fe:bd:ab:da:e8:95:27:cc:de:15: 04:8e:44:eb:02:9f:67:d9:d6:c3:88:19:a4:6b:7d:0e:3b:07: 20:f9:44:b7:06:ae:72:0e:60:31:96:cf:71:39:bd:b4:a9:3d: 9c:c3:d4:71:bf:ad:21:c3:f2:61:75:9b:56:46:56:9e:d1:6e: 1e:f7:54:70:eb:0d:0b:31:01:bd:01:bd:8d:2b:9b:3b:b1:85: f3:a0:ce:51:ce:b2:c3:62:d6:a2:2a:87:82:45:34:14:c8:f4: 2d:24:ab:4e:4e:45:55:f9:ea:76:e2:b4:33:0b:75:e1:56:f7: 47:dd:62:bb:e1:58:61:bb:4f:99:02:a6:ff:e7:90:6f:ab:cd: ab:18:a5:d4:c0:ca:ba:27:f8:4a:57:b5:2b:00:a2:7c:8b:44: ac:61:83:56:2f:b7:2d:32:34:20:75:ab:43:26:c0:1e:fc:80: 64:c5:f8:7a:fe:79:8f:bf:05:e5:af:f7:d7:98:37:3b:0a:c1: 19:c3:a1:95:d6:bf:0f:cd:a5:eb:56:ac:a9:82:56:ba:66:98: 2e:47:17:94:cc:da:d9:91:b6:2f:d9:62:b9:f4:49:08:f3:67: 87:d8:d2:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjUxMDE4MTUyMDU3WhcNMjUxMDI1MTUyMDU3WjAYMRYwFAYD VQQDEw02OGYzYjA1YS0xMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEtnpKVwfTUo0EypDtqeqtA52Unfde504f2pf+rOA8ZTOlKMp/tLPRCpSQs1 KN6zS6e+9DOfyseb1+CHrgGeM9RBqtAAwS/uttSXLfMCUUp2FFVOnW4WDsovz8dc /473+x1Mzqsfgkx62YP9r8fj5Q6vJz5cSnQygKnD8Jb+kd2ZHf9puzRybMq40gxv gnjNKWIGxnXbm9ktujEVN9T39puJvNQHcS32s0tCptDE9ky/MiguiCBmrvmbDcy2 eHiO49TpknhJwKtv14USE5ZcytL6cxWq7mz+B/NtLnNDQNGuWxz1fqCDo5+GhGQF HNoPEliAdm5GwfariVoHn1qrYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEigV0ss 1EzekK+6aa1gYYVlRU82MB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxFxPrSb0Ft0rxY6Mj2kHL8ev5DHamdbMxNP69q9rolSfM3hUEjkTr Ap9n2dbDiBmka30OOwcg+US3Bq5yDmAxls9xOb20qT2cw9Rxv60hw/JhdZtWRlae 0W4e91Rw6w0LMQG9Ab2NK5s7sYXzoM5RzrLDYtaiKoeCRTQUyPQtJKtOTkVV+ep2 4rQzC3XhVvdH3WK74Vhhu0+ZAqb/55Bvq82rGKXUwMq6J/hKV7UrAKJ8i0SsYYNW L7ctMjQgdatDJsAe/IBkxfh6/nmPvwXlr/fXmDc7CsEZw6GV1r8PzaXrVqypgla6 ZpguRxeUzNrZkbYv2WK59EkI82eH2NL1 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:50 2025 by rpki-client