$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: oMPXnzZ+UfMTke8rj0ECxqRj0MxsVxhBjICTdg02Z5o= Subject key identifier: 48:DA:F3:8A:2B:67:BB:BB:B7:8B:02:8B:34:D2:3B:C0:B4:F9:CA:CF Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E1A Signing time: Sat 18 Oct 2025 18:29:18 +0000 Manifest this update: Sat 18 Oct 2025 18:29:17 +0000 Manifest next update: Sat 25 Oct 2025 18:29:17 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: VO2EMMXtvOUoK9LMS830I5fbUXbBwKJYSv2sAsAXnf4=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Oct 18 18:29:17 2025 GMT Not After : Oct 25 18:29:17 2025 GMT Subject: CN=68f3dc7d-c164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:6d:a3:b9:e0:53:e5:8e:23:28:cd:6e:8e: 1a:fb:13:5f:da:ad:20:7e:04:f8:53:4c:7f:95:f3: 7a:57:3a:ad:c9:67:c8:2f:74:87:f9:2c:4c:97:6b: 30:03:c4:fc:83:5d:19:e5:18:8a:03:24:1e:87:34: 7a:60:ff:10:14:69:b4:ee:ca:e1:a8:b8:d5:05:cc: 15:2f:3b:fc:84:55:0f:28:a7:e4:bc:49:d6:3d:58: c8:0f:c9:c8:bf:cd:7b:fc:f9:e0:2d:7a:2a:cb:af: c5:af:cd:2c:23:75:25:72:20:c0:78:67:1e:9d:0e: ea:ab:89:53:bb:d1:6b:ad:b4:93:84:ed:c6:9f:51: 9b:49:6f:45:c9:b5:4e:da:df:80:d5:52:2d:7b:4e: 68:3a:48:da:95:62:15:ee:59:5d:32:fd:0b:8c:e7: e3:32:35:89:d8:d5:36:e7:2e:e3:63:c7:65:0c:32: 12:e7:dd:e9:15:38:ea:0b:6d:e9:b1:f0:8f:ab:8f: e4:f4:ea:d3:b4:b2:5e:2d:aa:7a:0d:57:17:09:50: 36:a7:f2:9f:0c:1f:85:08:db:bc:7f:31:72:16:1f: 9a:43:bc:3a:6f:ab:ee:af:1f:0d:91:4b:05:25:e4: eb:d2:99:42:cc:48:78:93:8c:65:5a:8c:f0:d9:51: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:F3:8A:2B:67:BB:BB:B7:8B:02:8B:34:D2:3B:C0:B4:F9:CA:CF X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:dc:f9:34:8e:c6:d2:4e:6c:8d:f1:bc:9f:ab:6e:7a:48:0b: 66:20:ed:6a:08:b4:88:61:0f:c3:fd:6f:c6:1b:26:c7:c9:9b: 25:fe:42:df:90:3f:5e:fc:4a:a2:53:57:da:76:26:2b:ec:5d: 2e:55:67:8a:ab:ae:b0:92:88:4b:b9:b9:3a:e7:e1:15:8a:de: 6e:fe:c1:dc:fa:96:07:70:9b:47:27:65:11:23:19:67:1e:32: 74:0a:28:22:fd:d9:37:0a:44:e9:81:99:8b:76:88:76:e5:80: 2e:e5:cc:27:fc:d0:e1:35:6b:b6:6b:6c:47:84:7d:69:9e:b2: a7:5f:46:db:82:29:45:82:8b:0e:8d:bc:cc:76:7a:7b:a1:e3: d1:45:34:fc:77:c6:ca:b0:27:8c:0a:5e:28:15:02:3d:92:44: 6d:9d:87:1b:a5:81:8d:db:32:55:4c:91:43:6d:4a:dd:d1:87: ff:5e:81:b5:ce:b3:a4:cb:9e:6a:93:27:46:43:43:40:e8:eb: 39:af:97:6e:69:56:cb:e0:04:db:b3:ea:89:3a:ac:cd:0f:9b: 81:f1:a0:ca:b5:e0:83:29:34:f2:9d:73:79:88:e6:b4:c0:a1: 6c:4d:e3:86:89:79:72:5e:06:b3:0d:77:94:73:48:6e:51:ed: 2d:f4:1c:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUxMDE4MTgyOTE3WhcNMjUxMDI1MTgyOTE3WjAYMRYwFAYD VQQDEw02OGYzZGM3ZC1jMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38lto7ngU+WOIyjNbo4a+xNf2q0gfgT4U0x/lfN6VzqtyWfIL3SH+SxMl2sw A8T8g10Z5RiKAyQehzR6YP8QFGm07srhqLjVBcwVLzv8hFUPKKfkvEnWPVjID8nI v817/PngLXoqy6/Fr80sI3UlciDAeGcenQ7qq4lTu9FrrbSThO3Gn1GbSW9FybVO 2t+A1VIte05oOkjalWIV7lldMv0LjOfjMjWJ2NU25y7jY8dlDDIS593pFTjqC23p sfCPq4/k9OrTtLJeLap6DVcXCVA2p/KfDB+FCNu8fzFyFh+aQ7w6b6vurx8NkUsF JeTr0plCzEh4k4xlWozw2VE41QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEja84or Z7u7t4sCizTSO8C0+crPMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ3Pk0jsbSTmyN8byfq256SAtmIO1qCLSIYQ/D/W/GGybHyZsl/kLf kD9e/EqiU1fadiYr7F0uVWeKq66wkohLubk65+EVit5u/sHc+pYHcJtHJ2URIxln HjJ0Cigi/dk3CkTpgZmLdoh25YAu5cwn/NDhNWu2a2xHhH1pnrKnX0bbgilFgosO jbzMdnp7oePRRTT8d8bKsCeMCl4oFQI9kkRtnYcbpYGN2zJVTJFDbUrd0Yf/XoG1 zrOky55qkydGQ0NA6Os5r5duaVbL4ATbs+qJOqzND5uB8aDKteCDKTTynXN5iOa0 wKFsTeOGiXlyXgazDXeUc0huUe0t9Bz3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:26 2025 by rpki-client