$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: gmCvVcOWJm3BNkWT2A3YFzYCbXf4FSxwsf1JVDi31vQ= Subject key identifier: 35:52:F0:42:0A:DC:69:A8:27:59:34:7A:35:64:F4:55:FE:1B:6F:E7 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: BC Signing time: Sun 19 Oct 2025 09:10:46 +0000 Manifest this update: Sun 19 Oct 2025 09:10:46 +0000 Manifest next update: Sun 26 Oct 2025 09:10:46 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: f6x373rz8Akqr8asAWDfsbjrnGa6ldU7G+QUML08uMs=) 2: 088C9298981611EFBE510B59C4F9AE02.roa (hash: +mzl+XLmGyaMauQYRfPSe1wPo0jhs14C721ea24fx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Oct 19 09:10:46 2025 GMT Not After : Oct 26 09:10:46 2025 GMT Subject: CN=68f4ab16-5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:4c:f4:14:5c:7a:fc:c9:4f:0f:35:9d:ec:0a: ee:b0:98:6c:ef:4c:8e:5a:a8:7a:ef:df:2b:e0:07: 35:14:8d:e7:3b:d1:be:ff:47:ef:f0:e5:96:3d:0c: d4:5d:66:a8:58:44:65:73:e5:f8:04:e7:bc:02:51: 9e:0d:1a:f1:96:d3:0d:60:10:5b:ff:df:3b:87:44: da:7a:db:ad:57:c0:64:61:3a:38:3b:e1:98:8c:ae: f9:b8:d2:68:5c:e9:d6:6a:59:b2:55:4c:f0:ea:ec: e7:d2:09:46:d3:80:04:73:bc:65:03:25:51:ef:6e: cc:63:92:59:71:79:2f:1c:87:49:0b:65:b6:f3:f7: c0:03:df:fe:2d:99:a6:b0:ee:b4:27:d2:04:36:2c: 40:0d:79:48:db:ff:d1:fc:e1:f6:75:62:47:40:34: 25:6b:90:32:44:8d:4f:9a:ba:8d:b8:a2:d9:dd:29: 4e:42:86:e4:81:42:41:ab:cc:94:89:f0:e3:d5:04: ed:a9:d1:41:99:99:9e:b3:5d:ec:c9:3b:3e:71:ec: 02:3f:27:2b:08:27:ce:f6:54:9c:59:12:6f:08:0e: 3f:c9:16:1c:6a:89:1f:b1:47:e5:ed:97:37:59:ea: 88:67:51:a4:e4:65:a3:97:34:8f:37:15:6c:54:ec: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:F0:42:0A:DC:69:A8:27:59:34:7A:35:64:F4:55:FE:1B:6F:E7 X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:5b:2a:35:5f:84:45:5d:fb:19:6e:6e:ba:e4:d5:05:25:e5: 03:c9:10:c1:8a:1f:ae:8c:0d:98:a5:ef:67:f5:e3:ff:f6:69: 58:40:39:fd:bc:99:ab:66:43:f6:df:25:26:aa:92:80:37:7f: f3:5c:69:b6:78:12:de:e0:7e:44:60:21:8b:7b:27:72:6c:d8: 11:24:66:d1:1e:17:33:e5:96:ef:14:7f:c1:58:81:ca:a8:69: ff:f6:dd:f8:96:b4:81:67:38:41:79:6b:ae:48:c3:8c:58:d5: 18:a9:86:58:c2:2c:7c:78:2d:2c:2d:9b:5c:92:a4:c1:02:43: 2a:ac:5c:7f:b5:1b:14:b2:6e:85:7f:2c:17:59:61:b3:da:c4: 47:84:34:8f:60:f5:42:61:18:f6:f4:fe:87:82:85:10:88:0d: 03:b4:d6:22:b4:ee:e0:0c:dd:74:11:cd:71:27:e1:94:ae:45: 13:9d:b5:8e:5b:1d:5a:f1:e6:82:9f:f6:93:66:a3:9d:8e:f8: 91:11:e4:ec:bf:0e:b1:a3:cb:20:15:f5:ff:d5:0a:ba:a4:64: e5:ed:a7:61:c0:3b:be:90:5f:72:9a:57:58:6c:67:81:2e:14: 47:e5:7b:96:ab:19:0f:4e:e9:78:27:d3:8f:37:8d:a4:3f:1b: 10:4c:d8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjUxMDE5MDkxMDQ2WhcNMjUxMDI2MDkxMDQ2WjAYMRYwFAYD VQQDEw02OGY0YWIxNi01NjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+0z0FFx6/MlPDzWd7ArusJhs70yOWqh6798r4Ac1FI3nO9G+/0fv8OWWPQzU XWaoWERlc+X4BOe8AlGeDRrxltMNYBBb/987h0TaetutV8BkYTo4O+GYjK75uNJo XOnWalmyVUzw6uzn0glG04AEc7xlAyVR727MY5JZcXkvHIdJC2W28/fAA9/+LZmm sO60J9IENixADXlI2//R/OH2dWJHQDQla5AyRI1PmrqNuKLZ3SlOQobkgUJBq8yU ifDj1QTtqdFBmZmes13syTs+cewCPycrCCfO9lScWRJvCA4/yRYcaokfsUfl7Zc3 WeqIZ1Gk5GWjlzSPNxVsVOy68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVS8EIK 3GmoJ1k0ejVk9FX+G2/nMB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyWyo1X4RFXfsZbm665NUFJeUDyRDBih+ujA2Ype9n9eP/9mlYQDn9 vJmrZkP23yUmqpKAN3/zXGm2eBLe4H5EYCGLeydybNgRJGbRHhcz5ZbvFH/BWIHK qGn/9t34lrSBZzhBeWuuSMOMWNUYqYZYwix8eC0sLZtckqTBAkMqrFx/tRsUsm6F fywXWWGz2sRHhDSPYPVCYRj29P6HgoUQiA0DtNYitO7gDN10Ec1xJ+GUrkUTnbWO Wx1a8eaCn/aTZqOdjviREeTsvw6xo8sgFfX/1Qq6pGTl7adhwDu+kF9ymldYbGeB LhRH5XuWqxkPTul4J9OPN42kPxsQTNgT -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:33 2025 by rpki-client