$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: qtuiBcrzkoV/UgIggxDk4L5pYJxByrXD6PVu++sJx+4= Subject key identifier: 15:8C:47:1F:78:FD:F9:E2:AA:65:38:6D:22:7A:3A:6D:05:69:97:35 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B55 Signing time: Sat 18 Oct 2025 16:37:07 +0000 Manifest this update: Sat 18 Oct 2025 16:37:06 +0000 Manifest next update: Sat 25 Oct 2025 16:37:06 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: 2j5NP302KlA71oCYtaB1xpBBInienjKY7qoahqkCy+I=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7021 (0x1b6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Oct 18 16:37:06 2025 GMT Not After : Oct 25 16:37:06 2025 GMT Subject: CN=68f3c232-197e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:f7:fe:df:00:d2:28:01:4f:c3:9b:c4:7d: 76:6a:80:9d:73:c9:12:77:41:ff:85:0a:ba:7a:1f: 21:ca:ca:b1:12:e2:29:3c:a9:f5:a6:e4:e2:59:28: 22:8f:9e:74:bd:9b:b0:29:51:a2:56:f7:08:6d:0b: 30:46:4c:3f:e4:68:ee:4d:80:6f:fe:af:ad:79:90: e7:86:7e:75:11:a5:ce:b7:88:20:4e:62:75:44:d8: 4b:d4:be:dd:ad:76:11:f5:65:1a:0f:7d:50:b6:4d: a3:af:4d:9d:02:8c:c0:2a:44:45:f2:08:72:b8:fb: cd:a5:df:e3:e1:2c:11:eb:06:20:17:a1:cc:e2:7b: 55:c7:45:d4:11:c1:a7:e0:02:27:3b:8b:16:ba:dd: 83:e4:db:3d:06:da:42:24:c3:3a:f9:b2:39:e0:4d: 7d:65:25:0c:84:55:bd:f1:fa:fa:66:16:d1:d4:f7: 31:8a:75:a4:7c:52:60:9f:5d:dd:8c:29:fc:9a:04: 36:0d:11:a2:6e:9c:db:9e:d2:52:be:7e:68:43:6a: 91:f5:28:0f:d4:a5:0f:4c:39:5f:ac:e4:cd:9a:c9: dd:18:93:35:3e:5e:ac:d2:3c:da:a6:d4:d7:9a:4e: 2a:41:94:8d:4f:96:53:cf:86:57:3a:5b:ce:21:eb: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8C:47:1F:78:FD:F9:E2:AA:65:38:6D:22:7A:3A:6D:05:69:97:35 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:db:41:76:8f:6d:b7:66:9d:d7:ea:49:b7:bc:95:2a:f3:87: c9:3a:6f:a7:63:7d:cd:1e:eb:84:6d:01:97:00:f1:5d:9d:45: 82:fd:56:67:71:63:da:8f:35:3d:d2:7c:28:78:ab:be:db:49: 28:5d:e0:00:19:c9:9d:e2:8c:a3:fe:1e:2b:d4:23:92:b9:bd: 29:51:60:b2:38:7d:20:c5:e4:f5:4f:21:25:e1:c7:35:b7:1d: f0:0e:97:b2:41:6c:94:34:4e:5f:7e:1b:de:70:be:85:ec:47: 7e:c7:4e:96:f3:a2:60:82:1a:e3:56:bb:b9:1c:99:b7:c3:5e: 91:f6:88:89:5d:4b:f7:d6:4f:b7:6b:03:f6:15:5c:50:07:20: 4c:4c:cd:4f:cc:32:23:73:d0:c9:fd:7f:cc:84:77:24:b6:38: bb:12:63:3a:d7:15:ce:30:09:2e:e5:f4:81:0a:d0:0e:a8:bb: 05:7e:3f:dd:10:b2:ae:29:d4:73:89:bd:d2:e7:15:33:c7:a8: b8:e3:a1:d9:ad:92:8d:70:00:79:21:7b:ae:fa:05:41:3f:27: 72:17:30:dd:98:7b:f0:b3:f2:d4:a9:af:96:f3:9d:66:18:87: b5:b5:cd:72:bb:d2:44:7d:5f:8d:bb:d5:6d:00:3a:fa:f3:12: 52:87:44:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUxMDE4MTYzNzA2WhcNMjUxMDI1MTYzNzA2WjAYMRYwFAYD VQQDEw02OGYzYzIzMi0xOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR73/t8A0igBT8ObxH12aoCdc8kSd0H/hQq6eh8hysqxEuIpPKn1puTiWSgi j550vZuwKVGiVvcIbQswRkw/5GjuTYBv/q+teZDnhn51EaXOt4ggTmJ1RNhL1L7d rXYR9WUaD31Qtk2jr02dAozAKkRF8ghyuPvNpd/j4SwR6wYgF6HM4ntVx0XUEcGn 4AInO4sWut2D5Ns9BtpCJMM6+bI54E19ZSUMhFW98fr6ZhbR1PcxinWkfFJgn13d jCn8mgQ2DRGibpzbntJSvn5oQ2qR9SgP1KUPTDlfrOTNmsndGJM1Pl6s0jzaptTX mk4qQZSNT5ZTz4ZXOlvOIetadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWMRx94 /fniqmU4bSJ6Om0FaZc1MB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf20F2j223Zp3X6km3vJUq84fJOm+nY33NHuuEbQGXAPFdnUWC/VZn cWPajzU90nwoeKu+20koXeAAGcmd4oyj/h4r1COSub0pUWCyOH0gxeT1TyEl4cc1 tx3wDpeyQWyUNE5ffhvecL6F7Ed+x06W86JgghrjVru5HJm3w16R9oiJXUv31k+3 awP2FVxQByBMTM1PzDIjc9DJ/X/MhHcktji7EmM61xXOMAku5fSBCtAOqLsFfj/d ELKuKdRzib3S5xUzx6i446HZrZKNcAB5IXuu+gVBPydyFzDdmHvws/LUqa+W851m GIe1tc1yu9JEfV+Nu9VtADr68xJSh0S3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:12 2025 by rpki-client