$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: YjE5pGF5o1X/ndtr6rvBF4KFiEXj3zyIwPDKP2cLekU= Subject key identifier: 7B:71:71:E0:AE:0C:FF:E4:81:52:21:C7:DB:13:B8:85:6F:91:D1:24 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 01B4 Signing time: Sun 19 Oct 2025 05:51:58 +0000 Manifest this update: Sun 19 Oct 2025 05:51:58 +0000 Manifest next update: Sun 26 Oct 2025 05:51:58 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: PlIY+PxoKNgN7vtpI7niShvXPDv9BvSexVFXnHWHfBI=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Oct 19 05:51:58 2025 GMT Not After : Oct 26 05:51:58 2025 GMT Subject: CN=68f47c7e-6d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:b8:70:2c:37:cc:e0:4e:f3:05:06:90:2a: a2:93:1a:69:33:d8:c6:6c:5a:eb:e7:a1:ab:bf:68: a1:27:2f:ee:1d:57:28:25:8b:cd:e8:88:f2:8d:03: 27:2e:b1:30:1f:e4:7f:50:b2:79:7d:ec:01:72:f4: 2f:06:27:fa:d0:bb:93:89:2f:72:ac:94:07:43:7b: 30:a1:93:65:78:d3:10:d3:1d:0e:09:ed:c2:0c:43: 39:20:0a:35:50:da:6c:e5:1e:52:d7:65:59:9f:d9: 16:1c:90:6c:f0:4f:08:7a:8b:3c:71:c3:25:9d:d8: 2e:55:c1:08:34:3d:8a:24:98:a2:59:0b:f0:6d:fd: 8f:da:35:07:e9:09:da:ad:27:46:b0:f9:96:89:35: 96:c1:ee:b1:f2:25:00:52:b6:ac:22:bc:d0:a4:59: 65:ff:d5:74:bb:02:24:76:51:68:48:ee:ed:c0:42: 58:a2:27:f2:07:f6:39:cf:5a:7d:b3:3a:b9:2f:07: bb:6e:bd:19:00:b7:44:38:8f:3e:4b:a0:0f:7c:b6: 89:f1:b2:c9:8f:77:4c:f7:45:a0:33:18:f7:2f:fe: 34:43:7a:37:92:c7:40:27:a4:d6:07:2e:70:47:5e: ca:ac:ab:08:13:b9:1d:ed:59:6e:4f:1e:be:f8:ab: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:71:E0:AE:0C:FF:E4:81:52:21:C7:DB:13:B8:85:6F:91:D1:24 X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:02:c2:5c:9b:e9:dc:3d:f8:16:cc:72:dc:a7:00:ca:f1:7e: f0:d3:cb:10:9b:79:b8:43:7e:6e:b2:32:83:32:aa:fc:19:9c: ae:01:fa:6f:5b:19:ae:a3:07:5f:a8:1e:6b:25:66:79:7c:0a: 73:29:54:be:d6:df:90:9b:10:83:29:17:15:15:52:f8:85:08: 4c:8f:48:79:82:a0:9b:12:7a:4d:32:8f:c9:74:92:5c:d0:37: 07:14:f0:c4:e1:69:ee:93:31:9f:22:e1:ba:13:99:b0:6e:56: 71:01:7c:2c:72:ae:7c:64:37:5a:93:72:9c:c6:60:ef:46:c9: c8:72:b7:60:2e:68:bc:2a:bb:7e:1a:57:69:26:03:49:08:d2: 24:12:12:6b:5d:8b:c3:e4:77:af:e6:a2:01:f5:73:1c:c8:ab: 1a:78:f4:a5:4e:2b:a2:d2:5c:de:94:9f:ab:ee:cd:da:d6:2e: 8c:a3:e9:f3:7a:0e:95:e3:b4:2e:16:3d:ab:73:b8:31:62:1e: 62:c8:7f:df:81:43:ca:02:f6:15:04:fd:d5:f1:77:db:23:3a: 59:75:65:69:0b:e2:c7:72:91:d2:bd:92:c0:d0:89:6f:85:8d: 49:53:0c:c6:6a:1b:67:01:72:e6:83:21:02:50:5a:4a:15:be: 6f:2d:a4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUxMDE5MDU1MTU4WhcNMjUxMDI2MDU1MTU4WjAYMRYwFAYD VQQDEw02OGY0N2M3ZS02ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vu4cCw3zOBO8wUGkCqikxppM9jGbFrr56Grv2ihJy/uHVcoJYvN6IjyjQMn LrEwH+R/ULJ5fewBcvQvBif60LuTiS9yrJQHQ3swoZNleNMQ0x0OCe3CDEM5IAo1 UNps5R5S12VZn9kWHJBs8E8Ieos8ccMlndguVcEIND2KJJiiWQvwbf2P2jUH6Qna rSdGsPmWiTWWwe6x8iUAUrasIrzQpFll/9V0uwIkdlFoSO7twEJYoifyB/Y5z1p9 szq5Lwe7br0ZALdEOI8+S6APfLaJ8bLJj3dM90WgMxj3L/40Q3o3ksdAJ6TWBy5w R17KrKsIE7kd7VluTx6++KuAawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtxceCu DP/kgVIhx9sTuIVvkdEkMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBAsJcm+ncPfgWzHLcpwDK8X7w08sQm3m4Q35usjKDMqr8GZyuAfpv WxmuowdfqB5rJWZ5fApzKVS+1t+QmxCDKRcVFVL4hQhMj0h5gqCbEnpNMo/JdJJc 0DcHFPDE4WnukzGfIuG6E5mwblZxAXwscq58ZDdak3KcxmDvRsnIcrdgLmi8Krt+ GldpJgNJCNIkEhJrXYvD5Hev5qIB9XMcyKsaePSlTiui0lzelJ+r7s3a1i6Mo+nz eg6V47QuFj2rc7gxYh5iyH/fgUPKAvYVBP3V8XfbIzpZdWVpC+LHcpHSvZLA0Ilv hY1JUwzGahtnAXLmgyECUFpKFb5vLaR/ -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:45 2025 by rpki-client