$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: b10wPWIWxpsKESGEVQFh/na7Ax99Vb0wdlZxviUhcwU= Subject key identifier: 55:DB:F3:41:8C:E8:DD:6E:98:D3:5F:A9:97:47:30:E9:3D:EA:BB:B7 Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 0346 Signing time: Sun 19 Oct 2025 03:07:40 +0000 Manifest this update: Sun 19 Oct 2025 03:07:39 +0000 Manifest next update: Sun 26 Oct 2025 03:07:39 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: EntGitJDCsVPSges/Pg8cRB8rW5TBqSX1M+SJIghCMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Oct 19 03:07:39 2025 GMT Not After : Oct 26 03:07:39 2025 GMT Subject: CN=68f455fb-371d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:cc:fe:ec:ac:ad:4a:af:a1:bc:1a:0b:8a: 21:8c:85:39:0a:14:a5:fc:3e:dd:4e:5e:a3:d8:a4: 4c:f9:3d:e9:07:cd:58:2c:6a:66:fd:ed:f8:07:94: 72:ae:a7:18:80:cd:f4:a3:d4:79:ff:5e:82:b2:09: 42:e1:65:76:ca:27:03:21:b1:a9:63:0b:d6:be:8a: 3a:da:af:fb:a8:70:8f:e7:cd:6b:36:c1:d1:c6:3a: df:e6:59:70:5f:40:00:f6:7d:79:07:d7:1a:ab:2e: f8:41:1e:17:54:9b:53:fa:5b:45:e2:b4:f1:c2:19: bb:4f:fb:63:91:62:6c:d4:8d:21:62:35:11:cd:e6: b7:d2:ec:4c:6d:3b:64:43:d2:f0:26:4c:12:0e:15: b9:c5:58:93:bf:67:21:bf:29:84:3e:cf:3c:5a:b5: 13:49:e4:61:1e:8c:0b:e8:f8:82:5b:18:89:03:9d: f1:d9:13:bb:b5:39:a8:e2:45:e8:d7:be:ef:55:7c: a9:90:49:b8:fd:e5:1c:2b:fa:9a:e2:a1:bf:bc:e5: 1d:52:ba:36:97:7f:7c:8f:df:e6:f3:fc:9e:83:50: 6d:15:60:53:85:e7:c1:c3:e3:8b:88:1e:c0:24:44: ca:03:a9:c0:b5:e3:0b:06:72:3e:16:6f:4d:47:2b: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DB:F3:41:8C:E8:DD:6E:98:D3:5F:A9:97:47:30:E9:3D:EA:BB:B7 X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:af:bc:4f:34:e0:d3:92:23:52:35:c3:ed:89:ca:f2:18:04: 3e:3e:93:af:44:78:0b:65:9b:ff:ea:f0:bd:8e:71:5f:11:1e: 6e:8f:31:c3:66:d8:66:ca:9b:ed:0e:cc:ef:dd:bf:ea:1a:1f: f5:6c:63:4e:22:ea:80:cf:ff:eb:a1:01:b6:b6:27:6f:7c:db: 4d:b5:8d:bf:6c:d1:db:d6:22:a1:d5:c5:91:ae:97:f1:c9:19: 2e:8c:a3:8c:a1:d7:b7:67:6e:60:4e:35:c4:b3:b9:d3:cb:65: d4:ae:55:a9:c5:a4:71:94:57:4f:a1:24:28:c9:c1:f2:a2:99: 35:b1:7b:ed:60:27:17:f1:58:ac:b2:08:5f:3a:c5:9b:b9:19: 05:f9:12:91:49:8b:69:12:26:05:2e:ef:e4:46:b9:77:a8:61: 8c:a3:dc:e4:6c:97:e3:d9:6f:93:1c:0a:43:53:8b:da:2b:51: 75:58:84:6f:0f:e1:08:ec:ca:96:91:25:d9:b0:3a:ba:f2:2e: ff:8c:7c:3b:c8:84:01:2b:3c:b9:78:5b:4b:4a:57:22:98:fc: 26:df:be:a2:04:42:5e:d7:bb:6a:e7:89:d5:e6:4f:91:74:d4: 5a:77:f9:0d:63:89:0e:4b:1f:39:cd:ad:6d:77:5d:06:fa:ad: 66:42:f7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjUxMDE5MDMwNzM5WhcNMjUxMDI2MDMwNzM5WjAYMRYwFAYD VQQDEw02OGY0NTVmYi0zNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0LM/uysrUqvobwaC4ohjIU5ChSl/D7dTl6j2KRM+T3pB81YLGpm/e34B5Ry rqcYgM30o9R5/16CsglC4WV2yicDIbGpYwvWvoo62q/7qHCP581rNsHRxjrf5llw X0AA9n15B9caqy74QR4XVJtT+ltF4rTxwhm7T/tjkWJs1I0hYjURzea30uxMbTtk Q9LwJkwSDhW5xViTv2chvymEPs88WrUTSeRhHowL6PiCWxiJA53x2RO7tTmo4kXo 177vVXypkEm4/eUcK/qa4qG/vOUdUro2l398j9/m8/yeg1BtFWBThefBw+OLiB7A JETKA6nAteMLBnI+Fm9NRytDIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXb80GM 6N1umNNfqZdHMOk96ru3MB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZr7xPNODTkiNSNcPticryGAQ+PpOvRHgLZZv/6vC9jnFfER5ujzHD ZthmypvtDszv3b/qGh/1bGNOIuqAz//roQG2tidvfNtNtY2/bNHb1iKh1cWRrpfx yRkujKOMode3Z25gTjXEs7nTy2XUrlWpxaRxlFdPoSQoycHyopk1sXvtYCcX8Vis sghfOsWbuRkF+RKRSYtpEiYFLu/kRrl3qGGMo9zkbJfj2W+THApDU4vaK1F1WIRv D+EI7MqWkSXZsDq68i7/jHw7yIQBKzy5eFtLSlcimPwm376iBEJe17tq54nV5k+R dNRad/kNY4kOSx85za1td10G+q1mQvds -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:54 2025 by rpki-client