$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: RTPdV9x2A1+Jx3LrfDqmuzKqsXcSS7tr9qPx0n7WaQY= Subject key identifier: 7B:73:48:48:34:0C:3E:68:CC:0F:5B:EC:25:9B:3D:EF:89:50:2A:7A Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 0947 Signing time: Sat 18 Oct 2025 21:14:25 +0000 Manifest this update: Sat 18 Oct 2025 21:14:25 +0000 Manifest next update: Sat 25 Oct 2025 21:14:25 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: U4qzrWkfMWIwZIX8DNa+UQUhT9UorUW7qk+MO4xikhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Oct 18 21:14:25 2025 GMT Not After : Oct 25 21:14:25 2025 GMT Subject: CN=68f40331-3db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:20:d4:ea:6c:55:aa:53:c8:cb:64:cf:c8: f4:44:e7:15:c1:12:65:ca:82:7d:b2:1d:6b:a7:75: cd:1b:97:fc:b8:56:07:b4:ea:19:f5:03:4d:d6:d2: f2:00:bb:56:ae:ce:f7:15:2c:49:8d:f4:27:0b:c8: 27:db:59:db:9f:cc:9a:35:0a:f1:4a:f7:a2:5d:62: b0:50:c7:8e:f6:44:b3:44:bd:54:a9:46:9b:92:fd: 96:c5:b8:e9:9d:95:7c:2d:1f:f6:3f:0d:36:67:f1: 2d:c8:16:c0:3b:59:16:ae:57:84:e3:bb:f5:57:9a: 89:24:77:36:7b:9f:65:fe:67:0e:9b:12:d7:fc:45: cf:d7:0f:c4:cd:9a:7e:5f:a2:f0:af:45:b0:d8:b0: 1f:09:b4:d9:f7:a2:17:08:db:cb:ba:da:50:54:7b: e7:6e:51:b9:4d:a2:f2:32:a6:12:ee:f5:a7:49:4c: f1:fc:d2:11:b9:80:75:61:45:8c:8f:af:27:ec:1b: c7:4f:3c:84:ab:5f:e6:03:35:38:41:1e:d8:98:5d: 4c:5a:3e:97:a8:d7:6f:10:9b:7a:8c:1d:b3:58:24: f3:0e:75:f0:69:b0:34:3e:00:b9:11:de:ad:1c:a2: 4d:ce:a6:54:80:b5:4c:3b:31:37:e1:19:4d:70:9b: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:73:48:48:34:0C:3E:68:CC:0F:5B:EC:25:9B:3D:EF:89:50:2A:7A X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:94:c0:b9:3a:30:2b:0d:7b:e5:46:aa:88:f1:73:45:7c:6d: cd:3f:14:bc:98:e2:01:c9:27:0a:a2:ba:6e:dd:f5:db:b3:78: 16:98:ac:f1:cb:aa:63:5b:22:4d:2d:2d:22:62:47:5b:65:78: f0:d5:d5:6d:eb:2b:04:42:23:a4:1d:e9:aa:d9:0d:e1:99:ba: 78:9f:6b:6f:7d:23:56:55:8a:be:0d:ff:82:ac:7f:c1:eb:8b: 6f:d3:3e:26:68:91:a9:15:aa:5e:31:84:e7:89:82:a4:c4:43: f9:39:71:c8:0b:53:32:f4:a1:4e:a6:e9:f7:57:47:1d:21:76: 75:73:7e:16:d4:35:01:97:98:83:e4:9c:8a:8c:89:46:51:40: 99:f4:f6:23:19:4b:d7:94:ce:ab:1b:5c:ad:e3:70:3a:2e:3b: 2d:85:28:3f:44:4a:01:7d:96:78:be:3a:e7:fd:c8:51:5c:70: 85:25:71:bf:4b:cc:ae:c8:bf:31:3d:86:49:ac:25:4c:93:98: 3a:af:1e:63:75:28:6c:1b:19:d5:f3:08:6c:94:56:db:5c:74: 8a:83:23:e4:ef:3d:fa:a4:54:15:9b:d6:90:e8:68:15:37:db: be:1e:54:e9:a8:c8:b2:7c:5c:b5:77:af:4b:80:85:a4:ae:80: fe:3c:ce:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUxMDE4MjExNDI1WhcNMjUxMDI1MjExNDI1WjAYMRYwFAYD VQQDEw02OGY0MDMzMS0zZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UQg1OpsVapTyMtkz8j0ROcVwRJlyoJ9sh1rp3XNG5f8uFYHtOoZ9QNN1tLy ALtWrs73FSxJjfQnC8gn21nbn8yaNQrxSveiXWKwUMeO9kSzRL1UqUabkv2Wxbjp nZV8LR/2Pw02Z/EtyBbAO1kWrleE47v1V5qJJHc2e59l/mcOmxLX/EXP1w/EzZp+ X6Lwr0Ww2LAfCbTZ96IXCNvLutpQVHvnblG5TaLyMqYS7vWnSUzx/NIRuYB1YUWM j68n7BvHTzyEq1/mAzU4QR7YmF1MWj6XqNdvEJt6jB2zWCTzDnXwabA0PgC5Ed6t HKJNzqZUgLVMOzE34RlNcJsICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtzSEg0 DD5ozA9b7CWbPe+JUCp6MB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhlMC5OjArDXvlRqqI8XNFfG3NPxS8mOIByScKorpu3fXbs3gWmKzx y6pjWyJNLS0iYkdbZXjw1dVt6ysEQiOkHemq2Q3hmbp4n2tvfSNWVYq+Df+CrH/B 64tv0z4maJGpFapeMYTniYKkxEP5OXHIC1My9KFOpun3V0cdIXZ1c34W1DUBl5iD 5JyKjIlGUUCZ9PYjGUvXlM6rG1yt43A6LjsthSg/REoBfZZ4vjrn/chRXHCFJXG/ S8yuyL8xPYZJrCVMk5g6rx5jdShsGxnV8whslFbbXHSKgyPk7z36pFQVm9aQ6GgV N9u+HlTpqMiyfFy1d69LgIWkroD+PM5u -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:25 2025 by rpki-client