$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: f5QbcrkgJizzODduk59tJ0ca1Ka0Ew6W7DjDDVO2DcU= Subject key identifier: 70:B2:26:A9:9F:FB:3B:30:6C:92:EC:69:16:D6:CC:45:76:A7:85:4B Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B5D Signing time: Sat 18 Oct 2025 20:04:32 +0000 Manifest this update: Sat 18 Oct 2025 20:04:30 +0000 Manifest next update: Sat 25 Oct 2025 20:04:30 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: KVJatoac6Wpndp66Er9/kZmo5EEDx6S47mXCSKseUAg=) 2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 3: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) 4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) 5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Oct 18 20:04:30 2025 GMT Not After : Oct 25 20:04:30 2025 GMT Subject: CN=68f3f2ce-1aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:bc:17:98:74:36:3e:81:90:fb:0d:e6:4c: 79:42:da:ef:9b:31:ce:40:5d:0b:e5:94:b7:4d:a9: e7:39:5f:a1:42:69:a6:91:5c:97:1f:1f:a3:15:c6: e1:8a:c5:3a:d0:f8:ff:30:a5:79:d8:a4:f2:8e:aa: a5:53:4a:95:b5:fd:76:30:9b:3e:1d:14:e7:42:90: a7:09:fc:27:d5:38:1f:7a:98:c0:c6:bc:0f:82:d4: d0:fb:cc:31:8e:18:7a:c9:94:48:da:9e:cc:fe:54: 91:ec:0f:41:55:e4:91:fd:c5:35:51:aa:06:16:83: 9e:71:8f:67:53:c3:61:ab:de:94:2e:a6:9a:6f:9d: df:88:05:63:ae:08:aa:eb:7d:ff:c2:c8:3c:a9:57: e2:af:3d:d5:2e:6c:ed:0e:d9:b5:84:de:a0:33:f1: 7f:6f:ff:c9:f3:6e:fc:f6:ca:73:e7:c0:99:74:91: 55:76:6e:82:e4:c5:20:5c:42:23:14:b2:ec:e3:24: e2:1b:06:43:45:33:d6:03:a1:f2:88:69:93:5d:a7: 5f:d6:6b:54:e3:6a:63:a5:6d:0d:79:a9:47:bd:36: 53:d6:44:ea:11:60:c8:dd:f0:df:12:06:3d:06:97: 48:3c:34:98:a4:0e:f4:81:b3:d1:d4:25:b8:da:db: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B2:26:A9:9F:FB:3B:30:6C:92:EC:69:16:D6:CC:45:76:A7:85:4B X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9f:35:88:12:e3:77:7b:8d:26:28:34:15:e4:5e:93:15:44: 2a:cb:ea:06:b1:45:b4:bb:0b:50:a2:46:96:33:fb:a9:2b:29: 1d:e5:f8:31:90:18:d9:09:67:38:b7:2e:f3:2a:31:e8:65:68: dd:d1:ce:c6:f0:ab:f3:94:98:41:8e:34:e3:2f:9f:34:d8:5f: 4f:ed:f3:4c:e0:f2:9c:d5:3d:8c:4e:ea:bb:82:be:ac:aa:60: 4b:42:cd:1c:d3:48:95:e6:7e:a2:40:fe:28:58:4e:a1:a6:5c: 9b:14:c0:38:4b:fd:a7:c2:2b:af:8f:4d:25:b4:b3:68:c3:56: a7:ff:77:df:b7:24:cb:a1:80:85:87:6f:52:ba:d8:f8:be:f4: e7:35:aa:ce:4b:d5:16:55:51:9c:32:be:62:94:95:c4:37:08: 29:f9:09:fc:71:c5:9f:b8:69:5c:ff:83:54:b3:ac:00:d1:24: bf:8d:f0:73:59:94:95:ff:a8:bc:fc:86:f3:5c:fd:19:e8:23: ed:2f:00:a9:3e:4d:9d:b4:b8:17:f5:01:af:2a:55:f6:93:7f: 22:00:ca:2c:a6:ac:92:83:93:51:c3:29:9f:bb:1b:be:91:0a: a0:08:76:6c:3c:8f:5e:9a:b0:9c:1a:02:63:ea:d0:dd:4a:3e: 14:00:58:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUxMDE4MjAwNDMwWhcNMjUxMDI1MjAwNDMwWjAYMRYwFAYD VQQDEw02OGYzZjJjZS0xYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsW8F5h0Nj6BkPsN5kx5QtrvmzHOQF0L5ZS3TannOV+hQmmmkVyXHx+jFcbh isU60Pj/MKV52KTyjqqlU0qVtf12MJs+HRTnQpCnCfwn1TgfepjAxrwPgtTQ+8wx jhh6yZRI2p7M/lSR7A9BVeSR/cU1UaoGFoOecY9nU8Nhq96ULqaab53fiAVjrgiq 633/wsg8qVfirz3VLmztDtm1hN6gM/F/b//J82789spz58CZdJFVdm6C5MUgXEIj FLLs4yTiGwZDRTPWA6HyiGmTXadf1mtU42pjpW0NealHvTZT1kTqEWDI3fDfEgY9 BpdIPDSYpA70gbPR1CW42tu27wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCyJqmf +zswbJLsaRbWzEV2p4VLMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8nzWIEuN3e40mKDQV5F6TFUQqy+oGsUW0uwtQokaWM/upKykd5fgx kBjZCWc4ty7zKjHoZWjd0c7G8KvzlJhBjjTjL5802F9P7fNM4PKc1T2MTuq7gr6s qmBLQs0c00iV5n6iQP4oWE6hplybFMA4S/2nwiuvj00ltLNow1an/3fftyTLoYCF h29Sutj4vvTnNarOS9UWVVGcMr5ilJXENwgp+Qn8ccWfuGlc/4NUs6wA0SS/jfBz WZSV/6i8/IbzXP0Z6CPtLwCpPk2dtLgX9QGvKlX2k38iAMospqySg5NRwymfuxu+ kQqgCHZsPI9emrCcGgJj6tDdSj4UAFhK -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:33 2025 by rpki-client