$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: zAv+Bpw/7+Qg9LY7fsUt1R9s4Pl6vnPCPP/iNo6SN8I= Subject key identifier: 38:3C:3B:93:44:9F:7E:79:DE:5A:95:BE:AA:A5:05:92:9C:33:A2:16 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 02EB Signing time: Sun 19 Oct 2025 05:42:31 +0000 Manifest this update: Sun 19 Oct 2025 05:42:30 +0000 Manifest next update: Sun 26 Oct 2025 05:42:30 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: RCM94klcdsApbSA3paCYpsyLJZuhsMkw8RNSklX+c0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Oct 19 05:42:30 2025 GMT Not After : Oct 26 05:42:30 2025 GMT Subject: CN=68f47a46-13ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:47:68:b9:bb:e7:76:09:67:37:3d:24:e7: be:d6:01:54:33:f4:3e:7a:65:51:d4:30:eb:ae:56: b0:be:5c:fd:b1:38:c8:a1:55:45:fc:b8:02:cf:2f: 45:6b:7a:50:a1:5f:b3:10:93:58:3b:41:f4:17:13: d8:88:34:fc:5b:1d:2e:b7:0f:6c:dd:d1:a3:04:53: a1:07:57:5e:24:2b:90:93:a5:87:6e:85:34:41:6c: 9d:8b:3d:30:6d:61:e8:ce:f2:f8:cd:bc:bc:09:d6: f5:43:c3:03:3d:af:24:1b:16:2b:67:37:6c:69:19: b7:d2:f5:04:21:d6:d8:1f:01:74:ef:20:92:1e:27: b2:39:3a:3f:6b:38:80:b7:0d:b7:b3:2f:8a:0c:4e: bc:e4:c9:bc:a0:69:ff:83:ac:dd:63:6a:db:69:ee: b0:83:73:54:10:5a:15:3c:44:66:e8:1f:a6:1d:8a: f1:f8:1d:1d:97:dc:70:39:84:1c:fd:84:85:13:9b: ba:7d:ab:78:88:33:b1:96:1b:b3:df:d9:9b:cc:63: 92:7f:72:5b:ae:77:d7:2c:6f:d5:29:49:55:ca:5f: ac:a3:86:d1:4a:4c:df:da:c1:aa:05:91:56:cf:c0: 63:d2:eb:4c:0d:39:76:6e:d7:52:6d:fd:65:ff:a0: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3C:3B:93:44:9F:7E:79:DE:5A:95:BE:AA:A5:05:92:9C:33:A2:16 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f7:ad:42:2e:92:58:81:12:4c:90:69:e5:b4:55:d1:e6:63: 97:f0:64:35:3c:09:d6:41:99:7d:e2:6e:0c:87:76:46:7b:37: 5d:93:50:b8:8b:72:94:16:b8:a5:2d:8d:7e:65:cd:f1:7e:3f: b4:96:b7:e5:6c:ef:eb:14:a7:4e:97:c0:e2:76:ab:46:c2:ee: ea:c0:f5:b7:cb:68:52:70:aa:58:e8:9d:ad:bc:59:07:96:c3: 36:2d:29:51:85:4b:5c:71:bd:6b:62:45:f8:a3:b7:7b:3e:bc: 3e:b4:eb:f3:c0:3f:2f:c0:e3:81:7a:f1:7c:d1:88:d9:0f:2d: 04:99:ba:88:37:e6:aa:5b:68:28:e5:4a:1e:46:d9:bb:d5:e1: e4:3e:31:40:f2:66:09:71:91:3a:fa:9b:fa:e5:55:fe:22:ad: 83:1a:69:74:55:c9:2d:ac:10:96:7a:fa:35:7b:73:9a:e2:8e: bd:7e:a7:91:15:2b:56:93:d0:1e:36:de:7b:71:57:0f:46:8e: 9b:c3:6a:d0:c5:56:a5:57:dc:df:1d:a5:b8:7f:7b:77:21:0a: 41:f8:55:4f:9f:d0:94:85:5f:6f:9a:74:9d:05:88:1a:75:69: 82:28:25:69:1b:c1:cb:ca:56:09:95:b6:a8:7c:71:62:00:b6: 14:ae:db:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUxMDE5MDU0MjMwWhcNMjUxMDI2MDU0MjMwWjAYMRYwFAYD VQQDEw02OGY0N2E0Ni0xM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3epHaLm753YJZzc9JOe+1gFUM/Q+emVR1DDrrlawvlz9sTjIoVVF/LgCzy9F a3pQoV+zEJNYO0H0FxPYiDT8Wx0utw9s3dGjBFOhB1deJCuQk6WHboU0QWydiz0w bWHozvL4zby8Cdb1Q8MDPa8kGxYrZzdsaRm30vUEIdbYHwF07yCSHieyOTo/aziA tw23sy+KDE685Mm8oGn/g6zdY2rbae6wg3NUEFoVPERm6B+mHYrx+B0dl9xwOYQc /YSFE5u6fat4iDOxlhuz39mbzGOSf3JbrnfXLG/VKUlVyl+so4bRSkzf2sGqBZFW z8Bj0utMDTl2btdSbf1l/6B4NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg8O5NE n3553lqVvqqlBZKcM6IWMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU961CLpJYgRJMkGnltFXR5mOX8GQ1PAnWQZl94m4Mh3ZGezddk1C4 i3KUFrilLY1+Zc3xfj+0lrflbO/rFKdOl8DidqtGwu7qwPW3y2hScKpY6J2tvFkH lsM2LSlRhUtccb1rYkX4o7d7Prw+tOvzwD8vwOOBevF80YjZDy0EmbqIN+aqW2go 5UoeRtm71eHkPjFA8mYJcZE6+pv65VX+Iq2DGml0VcktrBCWevo1e3Oa4o69fqeR FStWk9AeNt57cVcPRo6bw2rQxValV9zfHaW4f3t3IQpB+FVPn9CUhV9vmnSdBYga dWmCKCVpG8HLylYJlbaofHFiALYUrtt3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:14 2025 by rpki-client