$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: gQY6cBdw/AGcj15EEFdsSenitV8AfxefhaCGV2Vf6z8= Subject key identifier: 41:9F:19:24:25:BC:F1:05:2F:BF:25:C3:86:F7:BD:5F:DB:46:25:28 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0C90 Signing time: Sat 18 Oct 2025 19:03:06 +0000 Manifest this update: Sat 18 Oct 2025 19:03:05 +0000 Manifest next update: Sat 25 Oct 2025 19:03:05 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: 351VHhgPxL7OjlqkeCVJbD4Cte8tH2oimaL9RG1H2i0=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Oct 18 19:03:05 2025 GMT Not After : Oct 25 19:03:05 2025 GMT Subject: CN=68f3e469-3a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:cb:35:79:70:62:90:b0:5e:90:af:97:fc: 33:d3:7d:63:47:f7:d7:c0:29:7f:1d:e8:fc:0e:df: a9:54:a4:c3:4e:00:78:30:6f:e5:a2:72:af:37:a6: da:0d:94:31:78:13:91:73:34:11:b7:bc:d6:a6:5e: 29:ce:44:a5:8f:92:46:13:6c:e5:e8:b1:25:69:f8: 5f:68:82:33:12:48:c6:33:64:78:b8:8c:c8:2f:a9: 0c:b7:cf:22:fe:58:fe:94:01:84:82:c9:49:ae:f2: 6b:db:df:28:0f:39:80:78:ba:e5:8e:19:a7:4c:5c: 14:12:30:94:ef:64:73:49:db:9c:5a:ec:c9:fc:1b: af:55:c6:cf:e1:ed:f2:25:74:aa:71:70:ab:96:50: b5:b5:61:77:dc:6c:82:2f:dd:2f:d1:4b:a9:06:87: 70:9b:31:4e:df:86:51:95:f4:29:35:68:c0:12:54: f0:ec:6d:b2:45:09:9c:39:39:59:45:11:39:9c:2b: 9b:4a:02:d6:4f:d6:8b:d4:70:70:e9:53:55:dc:ba: 29:b5:ab:80:22:03:20:21:89:88:77:b5:f2:00:b7: 3e:6d:12:1d:11:9f:da:35:32:ce:34:54:da:59:f2: 41:ad:e7:3e:7a:79:44:56:0b:d9:21:02:89:13:79: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9F:19:24:25:BC:F1:05:2F:BF:25:C3:86:F7:BD:5F:DB:46:25:28 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:28:f8:86:70:ab:82:94:da:dc:c9:78:90:a3:ca:38:33: 06:2b:bf:01:6d:e9:e8:73:b1:73:48:9a:c3:f6:f9:2e:ed:8a: 67:a2:27:c3:37:69:21:c5:82:6d:7d:5a:57:46:8a:2f:72:a0: 05:cb:c1:83:56:86:fe:da:aa:32:09:3a:75:58:d3:e0:bc:4b: 9a:5e:be:f1:13:06:24:6d:ef:50:68:e2:c4:b5:7a:e9:ea:dd: 6c:0f:fa:b9:17:28:5a:28:9a:e9:de:6e:f2:7d:c8:a2:43:75: 39:d5:87:10:53:8b:d8:2a:bf:83:46:16:cf:3f:4d:d8:0f:b8: a0:93:a6:5a:24:0d:41:ca:53:0c:93:95:a6:49:34:fe:51:11: 68:5a:19:d6:66:61:c6:c7:2d:23:16:47:36:de:74:17:46:bf: ea:dc:8b:06:62:75:f4:9b:0d:95:6b:71:34:54:d4:24:d9:73: 94:b3:21:cb:fd:8f:64:17:0f:52:b6:39:9a:d3:a1:7b:64:c3: 46:84:0a:a9:3b:f4:ce:ee:54:78:e5:ab:cc:27:c2:5e:6f:f5: de:f0:b3:bb:b6:83:bf:b0:7b:d4:56:f8:3e:58:c5:f7:2e:e7: fd:0b:36:2e:b4:96:9b:6c:eb:b7:ce:d2:5b:e7:fe:d6:ed:8d: 91:3d:60:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUxMDE4MTkwMzA1WhcNMjUxMDI1MTkwMzA1WjAYMRYwFAYD VQQDEw02OGYzZTQ2OS0zYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9PLNXlwYpCwXpCvl/wz031jR/fXwCl/Hej8Dt+pVKTDTgB4MG/lonKvN6ba DZQxeBORczQRt7zWpl4pzkSlj5JGE2zl6LElafhfaIIzEkjGM2R4uIzIL6kMt88i /lj+lAGEgslJrvJr298oDzmAeLrljhmnTFwUEjCU72RzSducWuzJ/BuvVcbP4e3y JXSqcXCrllC1tWF33GyCL90v0UupBodwmzFO34ZRlfQpNWjAElTw7G2yRQmcOTlZ RRE5nCubSgLWT9aL1HBw6VNV3LoptauAIgMgIYmId7XyALc+bRIdEZ/aNTLONFTa WfJBrec+enlEVgvZIQKJE3kx9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGfGSQl vPEFL78lw4b3vV/bRiUoMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+Sj4hnCrgpTa3Ml4kKPKODMGK78Bbenoc7FzSJrD9vku7YpnoifD N2khxYJtfVpXRoovcqAFy8GDVob+2qoyCTp1WNPgvEuaXr7xEwYkbe9QaOLEtXrp 6t1sD/q5FyhaKJrp3m7yfciiQ3U51YcQU4vYKr+DRhbPP03YD7igk6ZaJA1BylMM k5WmSTT+URFoWhnWZmHGxy0jFkc23nQXRr/q3IsGYnX0mw2Va3E0VNQk2XOUsyHL /Y9kFw9Stjma06F7ZMNGhAqpO/TO7lR45avMJ8Jeb/Xe8LO7toO/sHvUVvg+WMX3 Luf9CzYutJabbOu3ztJb5/7W7Y2RPWCJ -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:33 2025 by rpki-client