$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: ImSryYLCt7TozdNIPRoe7VkFmTZYESNateKRNzu6SWU= Subject key identifier: 7F:4E:03:CE:2C:CD:24:0B:45:6F:24:E7:11:5E:F2:76:8C:4B:01:4F Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 15EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 15EA Signing time: Sat 18 Oct 2025 17:11:28 +0000 Manifest this update: Sat 18 Oct 2025 17:11:27 +0000 Manifest next update: Sat 25 Oct 2025 17:11:27 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: 880QjV26tW7hz5ZW9qSQmCMxb6REJStAIVmhuHeKpw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5610 (0x15ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Oct 18 17:11:27 2025 GMT Not After : Oct 25 17:11:27 2025 GMT Subject: CN=68f3ca40-e308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:5f:fc:fb:7b:5a:74:29:7a:54:38:8d:f6: 6e:1a:d9:55:9a:10:e1:65:c8:df:56:36:17:d6:84: 58:6c:ed:48:4a:94:fe:37:22:70:50:e8:16:5e:c2: 37:9c:ed:37:0e:01:77:4b:56:46:a8:8b:6b:b9:96: d1:8a:54:8f:cf:6c:27:03:af:17:32:c1:ce:2d:a6: 19:38:4f:53:73:f4:bd:32:f4:9c:70:47:42:37:55: 1f:ac:44:b5:0a:42:43:0f:bc:34:a6:63:46:08:8c: 3d:65:a8:b3:24:fd:b1:de:0a:86:79:48:3f:72:61: 6a:be:a3:38:f1:b2:2a:aa:47:09:25:33:7a:99:49: ef:12:61:25:2b:58:1a:6e:b5:19:d3:82:46:47:44: 92:3c:66:6e:11:ea:37:f6:86:eb:77:c2:af:7e:43: 2e:d7:7a:0a:17:e0:2c:b5:45:9f:7f:1f:38:26:cb: 0f:ca:4f:91:d1:82:72:09:fa:8c:44:e3:55:3f:40: 61:4c:63:d3:16:dd:fe:df:d8:26:3e:33:17:34:21: c7:4f:11:6f:e8:0b:d1:58:08:8f:28:1a:8f:30:3e: fb:09:98:57:00:1e:98:49:9d:04:6f:82:a6:88:97: 38:dc:78:5a:87:92:9f:0c:03:6f:9f:e8:ba:7f:23: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4E:03:CE:2C:CD:24:0B:45:6F:24:E7:11:5E:F2:76:8C:4B:01:4F X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f0:f4:7e:24:0c:9c:38:3e:65:7a:d4:18:58:16:71:d1:29: b8:27:65:c7:22:0d:2f:5a:e6:07:82:16:a2:b2:49:df:ef:56: b8:4d:7d:ba:b9:f8:07:0a:5d:4d:ae:97:7f:05:31:c9:f3:07: 11:33:09:d5:f9:b5:84:10:02:ec:87:9f:1b:99:1d:6c:0d:63: d1:20:fd:f5:1d:0c:21:60:df:fe:91:82:00:46:c4:c4:13:af: e9:26:ca:2f:bf:9e:db:67:31:c0:13:09:cb:fb:8a:fb:01:82: ab:e7:51:c4:e6:62:46:57:e7:5d:9b:62:da:5a:af:b5:54:d1: d0:68:d4:c4:a8:d2:8f:1e:bc:f1:ed:c2:95:1a:5a:d2:4f:ff: d8:fe:9b:c8:39:ef:ae:5b:36:2e:a7:55:3c:eb:37:17:79:fd: ae:76:21:27:36:5e:97:28:f7:f0:68:57:31:44:b2:63:ad:2b: 32:bb:ec:7c:5e:55:fe:b3:c0:68:b6:15:16:b4:1d:96:cf:a6: ea:d3:5a:48:ef:b8:2f:48:19:32:d1:19:b5:ec:13:e5:c1:20: c7:23:41:85:a7:dc:7a:95:79:c0:69:f2:44:6b:e9:48:af:4e: 20:41:3f:61:48:71:b0:d3:be:9e:ba:b4:5a:1a:9a:43:e1:87: ee:41:31:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUxMDE4MTcxMTI3WhcNMjUxMDI1MTcxMTI3WjAYMRYwFAYD VQQDEw02OGYzY2E0MC1lMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6Bf/Pt7WnQpelQ4jfZuGtlVmhDhZcjfVjYX1oRYbO1ISpT+NyJwUOgWXsI3 nO03DgF3S1ZGqItruZbRilSPz2wnA68XMsHOLaYZOE9Tc/S9MvSccEdCN1UfrES1 CkJDD7w0pmNGCIw9ZaizJP2x3gqGeUg/cmFqvqM48bIqqkcJJTN6mUnvEmElK1ga brUZ04JGR0SSPGZuEeo39obrd8KvfkMu13oKF+AstUWffx84JssPyk+R0YJyCfqM RONVP0BhTGPTFt3+39gmPjMXNCHHTxFv6AvRWAiPKBqPMD77CZhXAB6YSZ0Eb4Km iJc43Hhah5KfDANvn+i6fyMSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9OA84s zSQLRW8k5xFe8naMSwFPMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB78PR+JAycOD5letQYWBZx0Sm4J2XHIg0vWuYHghaisknf71a4TX26 ufgHCl1Nrpd/BTHJ8wcRMwnV+bWEEALsh58bmR1sDWPRIP31HQwhYN/+kYIARsTE E6/pJsovv57bZzHAEwnL+4r7AYKr51HE5mJGV+ddm2LaWq+1VNHQaNTEqNKPHrzx 7cKVGlrST//Y/pvIOe+uWzYup1U86zcXef2udiEnNl6XKPfwaFcxRLJjrSsyu+x8 XlX+s8BothUWtB2Wz6bq01pI77gvSBky0Rm17BPlwSDHI0GFp9x6lXnAafJEa+lI r04gQT9hSHGw076eurRaGppD4YfuQTE2 -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:56 2025 by rpki-client