$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: 0imtJIEt7sLVPrxMmr8azN2DAKki8QGoeTuZqUVj1zw= Subject key identifier: 8B:DD:3E:C4:70:DA:91:15:FB:72:2B:8D:6B:95:06:E0:65:40:AC:8C Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: D5 Signing time: Sun 19 Oct 2025 08:42:20 +0000 Manifest this update: Sun 19 Oct 2025 08:42:19 +0000 Manifest next update: Sun 26 Oct 2025 08:42:19 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: gvNeQaql8HavRKE/DPXo8pTX7fTJdcCFUL72yyVMy4g=) 2: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: JKusbC5VvwUuAdGYiNShuHqXM4sIB8wqjTbQ4/y/qsw=) 3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: Fnj7JWgwdsaeofMVq5UcxcqhmE7c7PXdT8GOJ7pFYSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Oct 19 08:42:19 2025 GMT Not After : Oct 26 08:42:19 2025 GMT Subject: CN=68f4a46b-6a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e9:a9:7f:28:aa:e5:dc:31:04:25:ec:ee:8b: 47:cf:ac:23:57:7a:37:79:d3:92:ca:47:b4:7e:1f: 2f:e1:3c:0b:72:f8:08:48:58:fa:3b:69:98:a1:42: cc:b2:ac:3f:58:d5:b9:f8:d5:25:3b:f0:af:8f:a8: 84:cb:af:78:3b:81:4d:e9:e2:a7:f3:2d:e8:63:5a: c5:dc:51:b1:dd:9d:9c:c3:d8:c6:98:48:d7:62:6c: 68:e9:f9:8f:22:c7:d0:33:a1:7d:6f:f2:e8:8e:54: fe:89:2c:74:3b:80:ac:d2:40:a8:cb:45:12:d1:de: 04:6b:09:a0:df:5e:29:3a:53:46:93:f3:73:2b:7f: 55:e8:b8:fe:0d:94:f5:79:01:07:6e:40:1a:3e:b4: f5:a2:7e:6b:12:80:62:c4:42:58:7f:b9:a3:fd:cf: 31:c0:ba:de:52:d2:ed:f9:38:ca:47:3b:ff:ba:0b: 9d:80:b2:c2:4f:98:86:e9:28:f7:3f:75:3a:f4:cd: 66:4c:6e:88:89:de:df:46:57:29:b8:b5:3b:e0:1c: 9e:22:2a:7b:8e:2e:4a:4a:d8:24:35:89:f7:82:4c: 1b:86:51:46:d1:69:c0:54:db:ec:dd:e5:14:db:64: bb:d7:3c:b1:22:31:69:d9:e6:a2:e9:42:97:d8:e8: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:3E:C4:70:DA:91:15:FB:72:2B:8D:6B:95:06:E0:65:40:AC:8C X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:3b:9e:79:f6:f9:e8:4c:a3:66:f0:28:19:54:50:40:46:d8: 59:32:b6:4f:e3:96:56:58:6d:6e:97:b5:aa:91:16:d9:28:00: 16:28:ce:2b:e7:63:6e:b2:63:29:fa:2c:c8:d6:0c:95:ac:b3: e7:e2:36:0a:53:f6:b7:22:e7:ad:c9:63:0a:c5:08:22:f2:19: 17:59:06:c9:7c:9c:fe:5e:41:f1:66:d5:d4:2a:75:0a:81:17: 83:6b:19:73:9b:ec:c6:a7:97:08:a6:78:e7:26:6d:0e:1b:c2: 9c:ff:ea:0b:a1:64:ad:d9:55:f6:75:6f:e5:7f:95:1e:39:c5: e2:31:d9:12:96:6f:80:c5:19:c3:fc:c1:0e:fa:f4:d7:c2:4a: ca:c8:f7:4f:dd:85:d4:78:29:00:a1:f0:43:90:ea:fc:12:c4: b2:b8:b5:96:89:71:71:96:b1:2d:ec:87:97:bf:92:25:a8:7e: 35:e9:86:8c:8f:e5:bb:f2:01:85:f7:ab:a1:a3:76:6f:d5:9a: cb:5a:1f:16:ae:2a:21:e6:3a:2a:17:b9:8f:8e:44:36:cc:f0: b4:db:a5:56:8e:13:db:80:a1:95:3c:42:88:03:b4:05:23:f4: a4:7f:c9:34:6c:fd:be:d2:68:d2:55:1f:1d:25:39:50:92:f4: c5:96:bc:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUxMDE5MDg0MjE5WhcNMjUxMDI2MDg0MjE5WjAYMRYwFAYD VQQDEw02OGY0YTQ2Yi02YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7umpfyiq5dwxBCXs7otHz6wjV3o3edOSyke0fh8v4TwLcvgISFj6O2mYoULM sqw/WNW5+NUlO/Cvj6iEy694O4FN6eKn8y3oY1rF3FGx3Z2cw9jGmEjXYmxo6fmP IsfQM6F9b/LojlT+iSx0O4Cs0kCoy0US0d4Eawmg314pOlNGk/NzK39V6Lj+DZT1 eQEHbkAaPrT1on5rEoBixEJYf7mj/c8xwLreUtLt+TjKRzv/ugudgLLCT5iG6Sj3 P3U69M1mTG6Iid7fRlcpuLU74ByeIip7ji5KStgkNYn3gkwbhlFG0WnAVNvs3eUU 22S71zyxIjFp2eai6UKX2Og4QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvdPsRw 2pEV+3IrjWuVBuBlQKyMMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCO5559vnoTKNm8CgZVFBARthZMrZP45ZWWG1ul7WqkRbZKAAWKM4r 52NusmMp+izI1gyVrLPn4jYKU/a3IuetyWMKxQgi8hkXWQbJfJz+XkHxZtXUKnUK gReDaxlzm+zGp5cIpnjnJm0OG8Kc/+oLoWSt2VX2dW/lf5UeOcXiMdkSlm+AxRnD /MEO+vTXwkrKyPdP3YXUeCkAofBDkOr8EsSyuLWWiXFxlrEt7IeXv5IlqH416YaM j+W78gGF96uho3Zv1ZrLWh8Wrioh5joqF7mPjkQ2zPC026VWjhPbgKGVPEKIA7QF I/Skf8k0bP2+0mjSVR8dJTlQkvTFlrzR -----END CERTIFICATE-----Generated at Mon Oct 20 23:14:55 2025 by rpki-client