$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft File: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json) Hash identifier: bbY2yEpuLBBVPWhcwRf9C8nO9h9pGzi/xQdHoBb3Ea4= Subject key identifier: ED:3A:F2:68:05:8A:70:D0:92:64:48:A3:0A:FA:F6:70:CA:7E:12:FC Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft Manifest number: 2B Signing time: Sun 19 Oct 2025 11:21:44 +0000 Manifest this update: Sun 19 Oct 2025 11:21:44 +0000 Manifest next update: Sun 26 Oct 2025 11:21:44 +0000 Files and hashes: 1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: P8dlKiJEdDaQwJbcbK+BUxmUtYnKQ4N3tIdW5lYWFLM=) 2: EABC58AC9AE911F091103146C4F9AE02.roa (hash: JMJ4tMD2yKnGlkUeo4o3VFgeqaBuupZ+4i0kIiz7kAA=) 3: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: I0RVpIxu3FJSWG6c9nRYnbbSBrKB3qOukimW1QY+X3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Validity Not Before: Oct 19 11:21:44 2025 GMT Not After : Oct 26 11:21:44 2025 GMT Subject: CN=68f4c9c8-be26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:95:9c:b9:41:bc:51:35:03:a2:0c:5b:6f: 96:8f:d2:08:91:98:3d:b7:61:7c:9d:de:05:ee:e4: a5:01:ff:d6:e0:33:3d:a1:69:b3:82:ae:b9:9b:49: 7d:78:e7:db:bc:53:2b:7b:ee:07:48:12:3d:e4:95: 7c:60:4f:72:8b:a0:df:62:7f:5c:24:ed:42:02:1b: 0c:ac:92:8d:0d:83:5c:7f:36:fd:90:c5:4c:f2:47: 04:23:98:62:29:3c:e2:97:6f:0f:84:5b:ef:ea:6d: fc:ae:8f:68:1a:2e:23:a7:ce:29:9a:a4:7f:8f:92: c5:d8:65:54:f9:ed:98:2d:d6:3a:25:48:0e:b9:de: 01:d3:0c:87:85:f2:68:1a:a9:0f:81:92:73:1b:56: 8a:43:e5:a5:75:88:26:b3:46:0c:8a:66:3e:ac:c0: 1c:66:b7:2c:0e:2d:e4:78:15:6f:c4:aa:ea:90:eb: f5:5d:2c:3a:91:9c:4b:c1:9e:72:6f:a8:bf:94:c5: c9:d1:20:e7:e4:65:76:17:b9:1a:39:54:9f:07:ea: 9e:64:ee:e2:21:1c:a4:4c:b1:1f:ac:a3:bb:fe:18: 66:41:cc:3d:87:85:27:cc:42:5c:e0:e6:2b:e8:ab: 80:cb:09:0f:22:ad:c8:03:66:7c:23:f6:25:86:58: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3A:F2:68:05:8A:70:D0:92:64:48:A3:0A:FA:F6:70:CA:7E:12:FC X509v3 Authority Key Identifier: keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:7e:23:ee:b8:02:71:9d:e4:5f:96:1d:82:b3:e1:01:9b:d8: f0:af:f5:17:dd:66:41:d1:36:9a:20:db:cc:4d:ce:43:f1:88: 72:ec:cd:a9:44:d1:88:8b:47:72:b3:7c:ac:b8:3c:b6:b9:8f: 27:7c:5d:de:f9:b2:a5:81:8d:f0:4a:63:1e:44:5b:45:6e:1f: 54:f9:0d:34:12:f9:92:df:a6:67:c8:c9:b9:3c:48:9f:ac:4e: 3b:cb:b4:e6:df:00:29:a4:e9:70:d1:3b:5b:26:1b:76:be:a9: 80:fa:09:35:c7:d9:7c:58:ee:b6:be:ca:14:6f:8f:7c:85:12: d9:fc:9d:e0:d5:a9:65:56:a1:2c:4a:ff:6a:3e:8c:5f:05:1e: 08:a5:92:d0:ef:94:b2:0b:4b:8d:36:28:2a:81:9d:2d:5a:90: ee:3f:fa:6f:b0:b7:ef:38:04:ed:bc:b9:3b:53:22:df:a1:e8: 32:4e:33:ff:82:64:36:01:b0:e4:62:c6:13:17:2f:be:e3:9f: 49:f5:ff:64:05:58:e8:4f:55:7d:5f:db:6f:92:0d:5d:5e:3e: 53:e0:7c:7c:4d:b6:ac:18:92:74:f5:ea:7f:17:6f:2a:f5:c6: 99:8d:6c:fc:67:b9:64:cb:ca:3f:6a:2d:2f:e6:f6:8a:b9:30: 57:fe:0b:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzA2NTExMC8GA1UEBRMoNjU0QkNGRDcwQUJDNjBCNTQxMzkyODUzMDVFRkQwRTMx NUMzMzY4RTAeFw0yNTEwMTkxMTIxNDRaFw0yNTEwMjYxMTIxNDRaMBgxFjAUBgNV BAMTDTY4ZjRjOWM4LWJlMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbS5WcuUG8UTUDogxbb5aP0giRmD23YXyd3gXu5KUB/9bgMz2habOCrrmbSX14 59u8Uyt77gdIEj3klXxgT3KLoN9if1wk7UICGwysko0Ng1x/Nv2QxUzyRwQjmGIp POKXbw+EW+/qbfyuj2gaLiOnzimapH+PksXYZVT57Zgt1jolSA653gHTDIeF8mga qQ+BknMbVopD5aV1iCazRgyKZj6swBxmtywOLeR4FW/EquqQ6/VdLDqRnEvBnnJv qL+UxcnRIOfkZXYXuRo5VJ8H6p5k7uIhHKRMsR+so7v+GGZBzD2HhSfMQlzg5ivo q4DLCQ8ircgDZnwj9iWGWKN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7TryaAWK cNCSZEijCvr2cMp+EvwwHwYDVR0jBBgwFoAUZUvP1wq8YLVBOShTBe/Q4xXDNo4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMDY1L0RCMzUxNEIwODIz MzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5v NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlV2UDF3cThZTFZCT1NoVEJlX1E0eFhETm80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MDY1L0RCMzUxNEIwODIzMzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxW Qk9TaFRCZV9RNHhYRE5vNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKx+I+64AnGd5F+WHYKz4QGb2PCv9RfdZkHRNpog28xNzkPxiHLszalE 0YiLR3KzfKy4PLa5jyd8Xd75sqWBjfBKYx5EW0VuH1T5DTQS+ZLfpmfIybk8SJ+s TjvLtObfACmk6XDRO1smG3a+qYD6CTXH2XxY7ra+yhRvj3yFEtn8neDVqWVWoSxK /2o+jF8FHgilktDvlLILS402KCqBnS1akO4/+m+wt+84BO28uTtTIt+h6DJOM/+C ZDYBsORixhMXL77jn0n1/2QFWOhPVX1f22+SDV1ePlPgfHxNtqwYknT16n8Xbyr1 xpmNbPxnuWTLyj9qLS/m9oq5MFf+CzE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:35:00 2025 by rpki-client