$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: 8ZIHLFADQuKsOzk4AKtE26t8wgiOI9AyM0P8PO/Rny8= Subject key identifier: 89:8B:90:58:A3:58:46:A9:73:85:56:19:1B:E5:8A:88:B2:27:A9:41 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 7E Signing time: Sun 19 Oct 2025 10:02:34 +0000 Manifest this update: Sun 19 Oct 2025 10:02:33 +0000 Manifest next update: Sun 26 Oct 2025 10:02:33 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: FiQ07+VsAPGOTqdzaXvVJvnbhzHD9dgwgQ184xkSf6Q=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Oct 19 10:02:33 2025 GMT Not After : Oct 26 10:02:33 2025 GMT Subject: CN=68f4b739-cbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:06:67:ee:09:15:45:3d:07:8a:e9:d8:7c: 5b:25:1f:ee:36:c2:f5:e1:c1:d7:36:03:e3:96:28: f8:22:cb:92:fd:c4:fa:6c:4e:79:e3:53:15:0e:25: 99:37:31:e0:e8:d5:16:09:a8:5b:30:e2:53:a0:95: 77:d5:3e:8f:46:34:7a:55:14:4b:dc:ef:bc:36:61: 4e:66:a3:af:0d:ee:cf:f6:e2:b5:cf:93:e3:46:30: d4:bc:3d:fd:7f:f3:e9:b6:6e:17:00:e1:4f:1c:39: 3a:36:d7:34:50:f3:7b:97:dd:60:36:9f:8f:54:08: ab:28:fe:c7:e5:1b:2d:01:8e:c5:69:93:22:f2:e2: c2:99:1a:ca:fd:a7:f2:c9:19:bd:fe:7b:19:56:b7: 59:aa:b4:f8:f9:9e:db:7f:84:01:23:78:8d:66:52: cc:1c:9e:35:dd:db:b0:d0:75:0f:a4:ed:0d:02:12: 2c:a6:d1:a9:55:d1:72:8c:24:db:fb:2c:0b:ec:14: 65:ea:78:65:f6:2d:60:39:f5:b5:33:dd:c9:ac:4f: 86:e5:ce:53:2c:b1:a2:6c:60:ad:e8:79:75:7d:70: 50:15:ed:d5:f4:ef:ce:c5:ee:b2:07:6a:63:41:35: 5d:42:05:4c:4d:c3:8f:8f:ce:aa:ae:dd:5e:70:fa: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8B:90:58:A3:58:46:A9:73:85:56:19:1B:E5:8A:88:B2:27:A9:41 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cf:6f:fa:24:d6:93:53:8c:2e:9c:f5:11:53:f9:11:25:22: 86:d3:16:d4:63:1f:12:bc:2c:a7:dc:bd:c1:ce:33:ac:17:e0: d4:86:7e:67:e7:a3:a0:fb:0d:b6:72:7d:57:bd:5b:90:4b:40: c0:5f:8b:71:02:c1:6c:1a:0c:ad:f0:8a:ac:f5:b9:f6:18:73: 8c:66:f9:1e:71:a5:cf:09:cd:96:36:d8:96:52:fb:73:da:e3: 4f:95:8d:a4:67:93:df:c8:90:a5:2d:e5:c9:de:5c:9a:45:81: 2e:40:e8:19:32:df:82:1e:66:cd:6a:f7:24:7a:5b:10:cb:ec: 1e:a8:2d:82:8a:b8:75:7c:0b:cf:f0:ed:25:ce:c8:9e:aa:0e: bc:01:c1:7b:c8:2f:33:6c:66:47:da:fc:c0:e3:23:53:e7:c3: c1:22:11:a6:52:79:e4:ec:2a:d7:48:b6:4c:63:c3:68:4e:4b: 29:44:b1:54:05:aa:24:ac:18:c2:94:37:6c:a8:4e:68:91:7b: ac:a9:78:e8:31:08:39:cc:be:1b:65:10:72:fe:ac:11:7f:38: 15:ee:3a:60:cb:29:ef:f1:4a:15:76:11:8e:6f:98:ad:02:e4: 65:d6:f2:12:ed:33:fa:a4:c0:0a:f5:f3:83:cd:7e:27:dc:15: 8a:37:ff:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4 RkU3MDBCNjMwHhcNMjUxMDE5MTAwMjMzWhcNMjUxMDI2MTAwMjMzWjAYMRYwFAYD VQQDEw02OGY0YjczOS1jYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhcGZ+4JFUU9B4rp2HxbJR/uNsL14cHXNgPjlij4IsuS/cT6bE5541MVDiWZ NzHg6NUWCahbMOJToJV31T6PRjR6VRRL3O+8NmFOZqOvDe7P9uK1z5PjRjDUvD39 f/Pptm4XAOFPHDk6Ntc0UPN7l91gNp+PVAirKP7H5RstAY7FaZMi8uLCmRrK/afy yRm9/nsZVrdZqrT4+Z7bf4QBI3iNZlLMHJ413duw0HUPpO0NAhIsptGpVdFyjCTb +ywL7BRl6nhl9i1gOfW1M93JrE+G5c5TLLGibGCt6Hl1fXBQFe3V9O/Oxe6yB2pj QTVdQgVMTcOPj86qrt1ecPr4fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImLkFij WEapc4VWGRvlioiyJ6lBMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w VkdlbEpzT0NYc09QNXdDMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAz2/6JNaTU4wunPURU/kRJSKG0xbUYx8SvCyn3L3BzjOsF+DUhn5n 56Og+w22cn1XvVuQS0DAX4txAsFsGgyt8Iqs9bn2GHOMZvkecaXPCc2WNtiWUvtz 2uNPlY2kZ5PfyJClLeXJ3lyaRYEuQOgZMt+CHmbNavckelsQy+weqC2Cirh1fAvP 8O0lzsieqg68AcF7yC8zbGZH2vzA4yNT58PBIhGmUnnk7CrXSLZMY8NoTkspRLFU BaokrBjClDdsqE5okXusqXjoMQg5zL4bZRBy/qwRfzgV7jpgyynv8UoVdhGOb5it AuRl1vIS7TP6pMAK9fODzX4n3BWKN/+O -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:44 2025 by rpki-client