$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: fZ3ixrOhwjw8Vs8DRe3VMvsfVWO8UiMF1QNOMkS1jVQ= Subject key identifier: 28:51:A5:26:B5:65:6B:74:13:B4:5D:04:9B:9E:E6:07:DF:7F:87:03 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 0111 Signing time: Sun 19 Oct 2025 08:07:09 +0000 Manifest this update: Sun 19 Oct 2025 08:07:08 +0000 Manifest next update: Sun 26 Oct 2025 08:07:08 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: qMVxDvy+6znuURJhtslkA0CC1XjfrdsFdxH9MF1oHxQ=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Oct 19 08:07:08 2025 GMT Not After : Oct 26 08:07:08 2025 GMT Subject: CN=68f49c2c-5fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:61:86:ce:dc:a4:87:98:c3:01:ed:dd:ab: 0c:85:d3:db:81:89:31:74:c3:5b:ef:aa:34:31:f4: c7:0f:b7:fa:ae:f1:6f:8f:db:01:75:03:9b:5f:49: 43:f3:ba:bd:d5:20:fc:48:94:ee:cb:d7:f9:7b:88: ba:be:f3:ea:f2:18:06:b3:ad:8c:a7:7e:95:ce:e3: 45:7e:df:4c:65:f9:69:70:c9:10:6a:88:5f:64:83: 00:1b:b4:35:51:8f:da:f8:83:48:b8:63:84:5b:03: 99:f4:9e:78:0f:fb:b4:0c:06:18:18:00:4a:74:bc: 3b:89:60:a4:69:86:cb:49:32:8d:dd:42:f9:71:ed: 5d:0d:73:cf:70:2c:85:99:78:e4:4d:52:13:71:d5: 8d:59:5b:59:34:80:b3:0c:e5:ab:c7:ea:a3:cb:b8: 6c:84:3e:7b:9d:02:5e:8d:5f:10:de:49:43:1e:c2: 0d:2c:72:10:38:c2:ff:bd:f8:7a:80:dd:4c:56:75: b7:db:47:cc:b1:64:27:82:f2:1b:3d:27:d1:c5:be: 4b:2d:95:27:85:f5:50:6e:e1:81:c6:fb:59:c4:6c: 76:18:25:2c:54:80:f6:38:91:b0:c9:41:cd:48:e7: 07:70:16:7a:2b:e2:43:85:3f:30:42:2d:75:63:12: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:A5:26:B5:65:6B:74:13:B4:5D:04:9B:9E:E6:07:DF:7F:87:03 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3f:6a:7f:31:e1:fa:64:f6:d1:9b:7a:1e:7d:19:1e:4e:e5: 3b:b2:04:3f:62:f6:d8:57:7e:42:07:32:58:68:35:0d:fe:0f: d9:b9:5a:f4:fe:e5:f0:c4:91:fb:0e:46:c6:20:b6:d8:3f:25: 18:2e:50:fd:eb:6c:52:c2:2b:64:a8:44:de:5e:60:b1:b2:20: 48:e8:62:e0:7c:af:68:20:59:34:aa:96:f0:a7:e1:50:44:53: 10:4a:ea:b8:14:d1:76:0c:3d:e5:01:cc:c5:32:62:55:e6:5e: 39:1f:66:b1:ea:50:9c:e3:83:a2:91:d6:be:d9:5b:47:a0:fd: 34:ef:2f:95:f8:5e:8d:be:6e:15:a4:5c:e2:7d:e0:8d:81:eb: b1:63:df:59:cf:28:d8:95:c3:41:54:a0:77:d6:02:4a:56:08: 9e:9c:6f:53:bf:ef:97:fd:c4:0f:fd:c7:32:05:6a:94:35:3b: 2f:da:33:7a:5d:a1:e9:4a:61:46:3b:ae:36:d5:c7:d7:71:5d: 3c:b5:09:b0:19:1b:71:fa:b7:56:af:b6:33:71:be:ff:6a:46: 09:a3:da:51:75:19:3d:32:c3:2c:06:a7:86:56:43:90:f8:74: 8b:9d:dd:c8:a6:3c:29:39:3a:be:ad:d4:c9:47:e1:2c:60:c5: 44:6b:46:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUxMDE5MDgwNzA4WhcNMjUxMDI2MDgwNzA4WjAYMRYwFAYD VQQDEw02OGY0OWMyYy01ZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZZhhs7cpIeYwwHt3asMhdPbgYkxdMNb76o0MfTHD7f6rvFvj9sBdQObX0lD 87q91SD8SJTuy9f5e4i6vvPq8hgGs62Mp36VzuNFft9MZflpcMkQaohfZIMAG7Q1 UY/a+INIuGOEWwOZ9J54D/u0DAYYGABKdLw7iWCkaYbLSTKN3UL5ce1dDXPPcCyF mXjkTVITcdWNWVtZNICzDOWrx+qjy7hshD57nQJejV8Q3klDHsINLHIQOML/vfh6 gN1MVnW320fMsWQngvIbPSfRxb5LLZUnhfVQbuGBxvtZxGx2GCUsVID2OJGwyUHN SOcHcBZ6K+JDhT8wQi11YxL7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChRpSa1 ZWt0E7RdBJue5gfff4cDMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByP2p/MeH6ZPbRm3oefRkeTuU7sgQ/YvbYV35CBzJYaDUN/g/ZuVr0 /uXwxJH7DkbGILbYPyUYLlD962xSwitkqETeXmCxsiBI6GLgfK9oIFk0qpbwp+FQ RFMQSuq4FNF2DD3lAczFMmJV5l45H2ax6lCc44Oikda+2VtHoP007y+V+F6Nvm4V pFzifeCNgeuxY99ZzyjYlcNBVKB31gJKVgienG9Tv++X/cQP/ccyBWqUNTsv2jN6 XaHpSmFGO6421cfXcV08tQmwGRtx+rdWr7Yzcb7/akYJo9pRdRk9MsMsBqeGVkOQ +HSLnd3IpjwpOTq+rdTJR+EsYMVEa0Y7 -----END CERTIFICATE-----Generated at Mon Oct 20 05:43:57 2025 by rpki-client