$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: My05TCbcHPVyl6q+vHtnirXDfIfLpYoxmVDKszb45is= Subject key identifier: 20:80:E5:1E:24:40:F8:7F:6A:40:A1:4B:92:9F:B0:2F:FF:5E:82:05 Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 0136 Signing time: Sun 19 Oct 2025 07:18:15 +0000 Manifest this update: Sun 19 Oct 2025 07:18:15 +0000 Manifest next update: Sun 26 Oct 2025 07:18:15 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: sl443k6rSVvBrP+whXFhl7Q+VW5Sy6dxfdbfbX0hn0s=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: Oct 19 07:18:15 2025 GMT Not After : Oct 26 07:18:15 2025 GMT Subject: CN=68f490b7-f2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:23:4a:d3:25:8c:4b:1b:1e:ea:c6:d0:f8: 93:7f:0f:7e:52:61:2c:59:e9:2f:ea:5b:3b:9a:fb: db:27:c3:9c:75:9e:3c:0c:b5:d5:33:1f:45:f2:62: f8:74:6f:4e:4f:08:dd:6d:68:18:80:30:6c:59:8a: eb:60:45:9b:2c:af:28:bc:44:dd:04:b4:aa:3e:5b: b4:cd:a9:e6:ca:0a:e5:b7:91:54:64:de:25:fa:34: 8c:d4:57:e6:a3:78:ef:62:0f:58:1d:6d:92:64:0b: 99:21:b8:1e:a3:a3:b6:58:48:8b:ce:68:b7:35:4b: 3c:76:67:13:ed:62:70:2b:23:37:7f:2c:f7:1d:04: ca:ed:b1:4a:57:69:64:9d:f6:a2:06:db:58:a1:38: 3b:f3:61:bb:44:3b:cb:df:67:ac:48:d2:78:6b:4f: bc:25:f7:4f:d3:ca:2d:6f:0e:9f:1e:ce:df:08:b8: be:d7:91:5b:e8:c9:82:a4:cb:15:b2:f3:d9:36:a5: 0e:38:e7:0f:53:a0:d4:09:11:c7:fc:60:90:d8:1d: 9e:67:98:b0:aa:f0:82:8c:01:58:e9:c3:f5:0d:94: b1:40:67:21:e8:71:11:cc:66:d4:83:25:54:b4:a5: 55:b8:f7:cf:0d:f8:8d:27:a1:f7:f8:e1:7c:3e:6e: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:E5:1E:24:40:F8:7F:6A:40:A1:4B:92:9F:B0:2F:FF:5E:82:05 X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:18:38:ce:cc:e1:8c:3b:d1:46:f9:0d:65:be:37:ae:34: 4a:f0:f4:63:8d:67:fb:b5:46:31:13:e9:1b:02:fb:8e:e2:c0: 54:b2:e6:9b:ec:af:2a:5f:2f:af:3b:6e:7f:28:67:00:9e:49: a5:72:55:8a:a2:a1:f7:59:01:bf:fe:c5:ab:e9:ea:39:ed:83: 3f:9b:95:40:c4:36:b1:55:45:f4:b3:f1:4f:50:c9:d9:cc:85: cc:72:c5:24:30:e5:14:b4:07:86:c8:ca:03:03:6b:a1:fa:c9: a5:1c:b0:a1:6a:42:8a:d1:7d:74:51:d1:af:83:de:67:46:54: 10:e0:fb:d9:42:73:05:41:6a:4b:a4:e1:a5:98:4b:75:23:ac: 82:6f:8f:e0:b4:40:b7:f9:fc:aa:bd:23:67:68:ba:da:10:f0: d1:23:e4:20:ae:d4:12:a1:a0:39:ab:49:0e:1b:46:29:eb:df: ca:84:c9:41:24:66:59:d4:e3:54:ea:be:6b:0d:31:97:0d:43: 3b:60:65:79:b3:1a:48:4e:08:d9:2c:ea:64:e5:b7:08:eb:82: 20:e1:cf:26:1d:86:2f:bc:dd:d3:c2:1d:00:ad:3b:a3:3b:cd: 14:d9:62:e2:42:1a:81:75:b1:cb:9d:23:0f:d8:f1:4e:94:7a: b2:ed:4a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjUxMDE5MDcxODE1WhcNMjUxMDI2MDcxODE1WjAYMRYwFAYD VQQDEw02OGY0OTBiNy1mMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ0jStMljEsbHurG0PiTfw9+UmEsWekv6ls7mvvbJ8OcdZ48DLXVMx9F8mL4 dG9OTwjdbWgYgDBsWYrrYEWbLK8ovETdBLSqPlu0zanmygrlt5FUZN4l+jSM1Ffm o3jvYg9YHW2SZAuZIbgeo6O2WEiLzmi3NUs8dmcT7WJwKyM3fyz3HQTK7bFKV2lk nfaiBttYoTg782G7RDvL32esSNJ4a0+8JfdP08otbw6fHs7fCLi+15Fb6MmCpMsV svPZNqUOOOcPU6DUCRHH/GCQ2B2eZ5iwqvCCjAFY6cP1DZSxQGch6HERzGbUgyVU tKVVuPfPDfiNJ6H3+OF8Pm5duQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCA5R4k QPh/akChS5KfsC//XoIFMB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9sxg4zszhjDvRRvkNZb43rjRK8PRjjWf7tUYxE+kbAvuO4sBUsuab 7K8qXy+vO25/KGcAnkmlclWKoqH3WQG//sWr6eo57YM/m5VAxDaxVUX0s/FPUMnZ zIXMcsUkMOUUtAeGyMoDA2uh+smlHLChakKK0X10UdGvg95nRlQQ4PvZQnMFQWpL pOGlmEt1I6yCb4/gtEC3+fyqvSNnaLraEPDRI+QgrtQSoaA5q0kOG0Yp69/KhMlB JGZZ1ONU6r5rDTGXDUM7YGV5sxpITgjZLOpk5bcI64Ig4c8mHYYvvN3Twh0ArTuj O80U2WLiQhqBdbHLnSMP2PFOlHqy7Upy -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:18 2025 by rpki-client