$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: 8SrGz1654XdP4ovssjiMBoGEhg25zunwluqBLcnnhSo= Subject key identifier: 8D:4F:B7:8C:02:53:B4:D8:62:9C:A2:E8:AF:B9:4A:30:38:E8:55:46 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 02BA Signing time: Sun 19 Oct 2025 03:36:06 +0000 Manifest this update: Sun 19 Oct 2025 03:36:05 +0000 Manifest next update: Sun 26 Oct 2025 03:36:05 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: R2q1SUtwuhz9rlZtxAFOBdZTH3gkYiezRyMxEMGozX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Oct 19 03:36:05 2025 GMT Not After : Oct 26 03:36:05 2025 GMT Subject: CN=68f45ca6-421f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:c4:6b:6c:98:57:81:dc:23:05:43:ce:8c: d7:a4:0c:53:0d:82:d0:eb:8e:13:69:c5:b7:40:06: e0:6e:ad:5d:e3:fd:10:af:97:86:cc:b7:11:f5:dd: 5c:44:98:23:9e:46:91:ca:ab:fa:85:76:1d:c0:52: 1e:35:2b:e6:71:84:91:8b:08:e4:bb:93:ed:36:3c: 0b:df:f1:32:a2:92:69:32:42:79:07:0b:71:20:89: cb:f8:5e:5c:b4:e7:d5:9f:39:c2:44:93:9b:7e:58: fa:15:e3:07:e3:ea:10:cf:44:4f:4d:c8:9c:b5:82: 00:55:96:3f:60:b5:47:e2:2f:7d:aa:fb:7f:c7:96: 46:8d:cb:23:ab:f8:72:b8:33:16:a7:ef:cc:ae:83: e3:e8:91:0a:82:d4:00:ec:25:af:a7:61:33:70:2b: 37:6c:fe:4b:3e:2d:52:18:9f:e1:a0:22:f7:60:82: 88:c8:d7:62:64:1b:d7:3d:93:ce:63:0e:8d:6a:fe: 99:6f:04:3a:e4:64:58:38:09:76:a7:d4:f3:c5:5d: 10:fe:24:1d:cb:67:45:ee:8e:b7:5e:01:ca:cc:4b: 44:f4:03:89:a5:1a:af:e9:77:86:cc:ce:6d:31:02: cf:07:ba:90:f3:da:82:5c:f2:ed:fc:84:de:97:1a: 74:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:B7:8C:02:53:B4:D8:62:9C:A2:E8:AF:B9:4A:30:38:E8:55:46 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ed:b3:da:ec:a9:3b:be:5a:be:3e:f0:58:d2:0b:ff:ed:50: ff:29:cd:ad:1d:43:15:b9:4d:d8:89:4e:86:d8:e8:9e:46:e5: 7e:5c:1e:52:8b:eb:9f:42:01:ba:1c:91:05:df:74:0d:32:b9: 31:ed:2c:d2:41:45:d6:6d:63:11:0d:d3:ee:c5:b7:00:5b:11: 4a:ad:54:fb:02:3a:3f:08:c5:de:3b:f6:34:a0:44:e5:5b:4a: 8b:1e:89:ba:64:8b:9d:b6:9f:30:fa:93:7a:f2:48:77:a7:fe: b8:3f:57:6d:23:98:d5:82:e1:6f:0a:de:ff:fc:1d:22:f2:1e: 3e:39:57:20:f1:7a:86:c4:b7:8f:7c:4c:48:8f:37:56:da:27: a8:f6:e8:26:6e:72:65:99:2d:f8:c5:01:0c:32:ce:83:42:41: 72:0d:4d:cb:b7:ef:40:f2:36:8d:a7:b1:4f:69:5d:6a:60:ca: f6:93:63:84:ad:e0:15:8d:e0:56:47:be:00:0f:74:a2:1a:47: 58:af:f5:b5:57:b1:97:fe:6e:a9:b4:e8:dd:3c:e8:29:8a:48: ab:6e:f0:d4:3c:3c:02:31:20:d0:02:3d:e6:00:7a:7b:3a:f8: d1:75:9f:9a:e3:93:74:21:01:86:60:c1:c1:5b:10:8d:9a:82: ae:20:e0:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUxMDE5MDMzNjA1WhcNMjUxMDI2MDMzNjA1WjAYMRYwFAYD VQQDEw02OGY0NWNhNi00MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvrEa2yYV4HcIwVDzozXpAxTDYLQ644TacW3QAbgbq1d4/0Qr5eGzLcR9d1c RJgjnkaRyqv6hXYdwFIeNSvmcYSRiwjku5PtNjwL3/EyopJpMkJ5BwtxIInL+F5c tOfVnznCRJObflj6FeMH4+oQz0RPTcictYIAVZY/YLVH4i99qvt/x5ZGjcsjq/hy uDMWp+/MroPj6JEKgtQA7CWvp2EzcCs3bP5LPi1SGJ/hoCL3YIKIyNdiZBvXPZPO Yw6Nav6ZbwQ65GRYOAl2p9TzxV0Q/iQdy2dF7o63XgHKzEtE9AOJpRqv6XeGzM5t MQLPB7qQ89qCXPLt/ITelxp0GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1Pt4wC U7TYYpyi6K+5SjA46FVGMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB47bPa7Kk7vlq+PvBY0gv/7VD/Kc2tHUMVuU3YiU6G2OieRuV+XB5S i+ufQgG6HJEF33QNMrkx7SzSQUXWbWMRDdPuxbcAWxFKrVT7Ajo/CMXeO/Y0oETl W0qLHom6ZIudtp8w+pN68kh3p/64P1dtI5jVguFvCt7//B0i8h4+OVcg8XqGxLeP fExIjzdW2ieo9ugmbnJlmS34xQEMMs6DQkFyDU3Lt+9A8jaNp7FPaV1qYMr2k2OE reAVjeBWR74AD3SiGkdYr/W1V7GX/m6ptOjdPOgpikirbvDUPDwCMSDQAj3mAHp7 OvjRdZ+a45N0IQGGYMHBWxCNmoKuIOC2 -----END CERTIFICATE-----Generated at Mon Oct 20 17:10:58 2025 by rpki-client