$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: UkOz0o+pOtkNpAS+TnRoPGccuCZmePIEuecBniPN48g= Subject key identifier: 5B:A9:06:E7:D9:3D:22:0F:34:78:F4:DC:D2:82:D9:C1:89:5F:38:B7 Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 51 Signing time: Sun 19 Oct 2025 10:39:26 +0000 Manifest this update: Sun 19 Oct 2025 10:39:25 +0000 Manifest next update: Sun 26 Oct 2025 10:39:25 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: Zz1Fox4H+bb5B4QQExQYyDtbwrsg25VaCAZg5yw70xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Oct 19 10:39:25 2025 GMT Not After : Oct 26 10:39:25 2025 GMT Subject: CN=68f4bfdd-8cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:ad:76:9a:20:e4:6d:62:e6:f1:a4:68:67: 41:0f:21:06:e2:60:58:12:05:ea:45:7e:08:23:1c: 14:62:97:d1:ea:29:74:a2:28:62:0b:59:60:1a:7a: a7:8b:80:43:4f:24:07:4e:fa:9a:a6:e4:1c:d7:c6: 8a:d8:4e:d2:a9:09:07:d6:9c:c5:04:85:56:6a:56: df:3d:fd:18:7f:a0:da:b4:be:10:2c:33:74:a8:4d: c5:87:9a:d1:2f:6b:3a:96:fb:d0:74:54:02:17:48: 4a:3e:a3:d9:56:e5:da:37:13:79:a5:5f:6d:3b:99: d5:fe:d9:c6:25:da:13:ab:c4:2e:29:e5:91:a9:a9: 1f:f1:e8:04:60:89:3b:bd:82:b8:1a:39:d2:89:7d: 79:61:54:e3:03:94:3d:e7:90:b8:50:f0:30:6e:da: 7e:3d:00:bc:fb:1b:14:6c:e9:5d:07:a8:7a:4d:70: 52:3a:2f:ca:6f:48:42:d9:08:bc:f7:d8:7a:33:f2: 7a:c8:5e:d6:3b:0d:8a:ee:f4:ae:26:4f:c2:ef:62: c8:d7:8f:ba:06:58:3f:2d:b3:92:55:44:e7:f7:c7: c0:18:54:25:92:15:88:c8:33:7b:70:db:26:7d:f8: 2a:1a:11:0b:bc:68:34:73:be:56:8c:35:cd:e3:0a: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:06:E7:D9:3D:22:0F:34:78:F4:DC:D2:82:D9:C1:89:5F:38:B7 X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:69:e3:bb:83:98:cf:67:32:1c:ec:59:33:49:73:fe:4d:53: 9f:1f:4b:99:24:ff:4a:ca:68:90:81:80:82:f2:59:bc:ad:d1: b8:41:ca:a2:82:3f:a4:42:a0:97:19:3d:ea:66:d9:0e:14:4c: ab:f2:3d:f5:c2:10:be:2a:65:ce:c8:68:40:69:eb:b2:a7:8f: b8:63:89:ab:da:44:79:b6:14:11:38:81:18:20:a9:2f:40:e8: c9:af:1d:e4:b7:8d:7e:54:23:6a:73:17:5e:85:ae:fb:99:af: db:ff:d3:f0:72:8f:57:2d:3c:56:91:f4:1c:62:52:c9:e4:18: 8b:94:4c:b9:ce:05:f0:26:7b:60:95:ea:c4:36:1e:68:e2:73: 6b:e0:7e:e6:44:8e:65:38:1a:e2:81:3b:82:ef:11:aa:7c:5c: f5:4f:af:55:9a:5d:6f:04:4f:86:cd:e1:30:a5:d9:f4:33:38: e1:83:ab:6d:e0:31:c2:48:0b:16:19:17:cb:76:b8:27:82:3b: d0:92:45:5c:2b:81:7d:78:ca:93:ed:24:ca:d9:d3:1f:4e:ca: 57:0f:2c:fa:0f:47:b2:1b:20:10:7c:0c:0d:9b:b1:27:b7:7a: e1:a5:3a:b4:f6:8c:1c:d2:34:55:4b:1a:a6:4b:99:3c:2e:9f: 03:fb:44:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTEwMTkxMDM5MjVaFw0yNTEwMjYxMDM5MjVaMBgxFjAUBgNV BAMTDTY4ZjRiZmRkLThjZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0pa12miDkbWLm8aRoZ0EPIQbiYFgSBepFfggjHBRil9HqKXSiKGILWWAaeqeL gENPJAdO+pqm5BzXxorYTtKpCQfWnMUEhVZqVt89/Rh/oNq0vhAsM3SoTcWHmtEv azqW+9B0VAIXSEo+o9lW5do3E3mlX207mdX+2cYl2hOrxC4p5ZGpqR/x6ARgiTu9 grgaOdKJfXlhVOMDlD3nkLhQ8DBu2n49ALz7GxRs6V0HqHpNcFI6L8pvSELZCLz3 2Hoz8nrIXtY7DYru9K4mT8LvYsjXj7oGWD8ts5JVROf3x8AYVCWSFYjIM3tw2yZ9 +CoaEQu8aDRzvlaMNc3jCmrfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW6kG59k9 Ig80ePTc0oLZwYlfOLcwHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI9p47uDmM9nMhzsWTNJc/5NU58fS5kk/0rKaJCBgILyWbyt0bhByqKC P6RCoJcZPepm2Q4UTKvyPfXCEL4qZc7IaEBp67Knj7hjiavaRHm2FBE4gRggqS9A 6MmvHeS3jX5UI2pzF16FrvuZr9v/0/Byj1ctPFaR9BxiUsnkGIuUTLnOBfAme2CV 6sQ2Hmjic2vgfuZEjmU4GuKBO4LvEap8XPVPr1WaXW8ET4bN4TCl2fQzOOGDq23g McJICxYZF8t2uCeCO9CSRVwrgX14ypPtJMrZ0x9OylcPLPoPR7IbIBB8DA2bsSe3 euGlOrT2jBzSNFVLGqZLmTwunwP7RPs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:58 2025 by rpki-client