$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: rl4ydNbDrjXrXIie4OGSZEBG2a9HiNOOcmXbsMeoVvU= Subject key identifier: F3:22:1F:42:47:72:AD:14:CA:72:0E:2B:13:21:5C:78:00:54:36:A8 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 76 Signing time: Sun 19 Oct 2025 10:09:03 +0000 Manifest this update: Sun 19 Oct 2025 10:09:02 +0000 Manifest next update: Sun 26 Oct 2025 10:09:02 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: GbJsy/2eVFo7rOsasb7a/m7PnU4sPlWgp1BE7p1e1yc=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Oct 19 10:09:02 2025 GMT Not After : Oct 26 10:09:02 2025 GMT Subject: CN=68f4b8be-9bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:0c:91:0d:1f:64:2e:e1:91:33:d6:c5:52: 0f:dc:fd:d9:42:de:7f:05:1d:2a:17:a8:1c:c1:df: 12:0f:ed:f7:e8:bf:19:ce:bd:d8:08:14:3a:8d:fd: 65:0e:75:d2:8e:3b:ae:32:b0:97:89:4a:1a:3d:79: 36:1a:01:51:5d:57:6b:51:f0:27:cb:0e:2f:b6:b7: 27:c3:82:2f:80:ee:ff:83:d5:b4:5c:fb:d2:5d:e1: 75:fc:dd:3f:47:dc:4f:8b:78:34:37:f3:db:54:e8: bb:54:c9:d7:7c:a5:2a:e3:11:76:70:90:bd:3b:e6: 5e:7e:6e:dd:82:03:08:ad:54:f5:c3:79:0a:53:56: f7:e2:79:7d:36:52:48:2b:c7:67:11:58:47:94:8c: 0b:b7:4d:25:1e:35:10:28:86:d5:4a:23:b5:ef:56: ef:fa:08:8a:55:a9:8e:8f:37:3c:d8:30:7b:b5:c8: 8e:31:64:b9:af:c8:f8:92:07:16:bf:d3:2f:ed:d3: 8b:87:51:61:f7:dd:89:a3:70:dd:9f:b0:83:6f:3f: 5f:29:e0:c0:5b:ad:e1:7f:29:93:8c:d1:69:81:dc: 22:ca:b6:1a:af:34:21:1d:0c:16:dd:11:4d:fb:e8: 49:42:67:f3:9a:90:72:e8:c9:69:cf:6e:26:d6:08: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:1F:42:47:72:AD:14:CA:72:0E:2B:13:21:5C:78:00:54:36:A8 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2e:c2:42:0c:e2:7c:e0:30:0d:83:98:ac:71:c5:14:b6:39: b4:33:b4:dc:4b:e4:e6:ed:56:5e:44:5c:f9:27:e4:7f:1d:2b: bc:b2:8f:42:ad:11:1b:10:bd:17:53:29:74:91:ad:5e:f1:80: 03:fa:95:6d:71:d4:15:94:a5:73:fc:c4:ee:4d:4f:e8:55:88: 99:54:ca:87:d1:7c:55:9f:c9:78:d2:54:6d:17:47:a1:38:69: da:17:3c:4d:c1:8c:d9:e9:ad:4f:ab:f8:f2:b6:2d:00:03:57: d7:f9:74:e6:bc:76:41:f4:81:76:fd:4e:6c:f5:71:25:f8:5c: 99:b8:25:fa:73:a6:23:df:02:2e:5c:5a:24:d7:a4:1b:0f:a9: 16:2c:7a:f2:07:c8:ff:65:a6:22:2f:cd:e2:59:33:c7:62:59: f2:68:c8:80:7a:81:9d:f0:0c:2a:4d:34:31:89:78:7a:0c:ed: 00:f5:2a:a9:c5:89:33:68:d8:8c:40:f7:b8:c6:ca:f4:c1:4a: 07:2d:e1:42:dd:50:c7:89:6a:ea:17:f6:a9:49:b0:49:4b:a4: 78:ee:1a:27:72:90:44:44:f2:ab:03:ee:5c:19:fd:7b:3d:12: 69:7d:da:2c:44:1e:82:12:83:6f:60:b7:75:a8:ac:c3:5c:08: e6:28:72:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTEwMTkxMDA5MDJaFw0yNTEwMjYxMDA5MDJaMBgxFjAUBgNV BAMTDTY4ZjRiOGJlLTliYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAWgyRDR9kLuGRM9bFUg/c/dlC3n8FHSoXqBzB3xIP7ffovxnOvdgIFDqN/WUO ddKOO64ysJeJSho9eTYaAVFdV2tR8CfLDi+2tyfDgi+A7v+D1bRc+9Jd4XX83T9H 3E+LeDQ389tU6LtUydd8pSrjEXZwkL075l5+bt2CAwitVPXDeQpTVvfieX02Ukgr x2cRWEeUjAu3TSUeNRAohtVKI7XvVu/6CIpVqY6PNzzYMHu1yI4xZLmvyPiSBxa/ 0y/t04uHUWH33YmjcN2fsINvP18p4MBbreF/KZOM0WmB3CLKthqvNCEdDBbdEU37 6ElCZ/OakHLoyWnPbibWCEO1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8yIfQkdy rRTKcg4rEyFceABUNqgwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsuwkIM4nzgMA2DmKxxxRS2ObQztNxL5ObtVl5EXPkn5H8dK7yyj0Kt ERsQvRdTKXSRrV7xgAP6lW1x1BWUpXP8xO5NT+hViJlUyofRfFWfyXjSVG0XR6E4 adoXPE3BjNnprU+r+PK2LQADV9f5dOa8dkH0gXb9Tmz1cSX4XJm4JfpzpiPfAi5c WiTXpBsPqRYsevIHyP9lpiIvzeJZM8diWfJoyIB6gZ3wDCpNNDGJeHoM7QD1KqnF iTNo2IxA97jGyvTBSgct4ULdUMeJauoX9qlJsElLpHjuGidykERE8qsD7lwZ/Xs9 Eml92ixEHoISg29gt3WorMNcCOYocsU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:14 2025 by rpki-client