$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: h9aEqyWHZPi+l6dQP41yzT2r+12xpVWS2jvU5DIm0XA= Subject key identifier: 1F:72:A2:78:7A:CE:23:6A:3D:F2:37:B4:71:96:45:7F:66:7D:E0:7C Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 07C4 Signing time: Sat 18 Oct 2025 22:32:36 +0000 Manifest this update: Sat 18 Oct 2025 22:32:35 +0000 Manifest next update: Sat 25 Oct 2025 22:32:35 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: uzln+3JAK63teX7JPWJtIMCO1JJ/SJICVZo71jRJvDE=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Oct 18 22:32:35 2025 GMT Not After : Oct 25 22:32:35 2025 GMT Subject: CN=68f41584-f480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:2d:5f:0e:a9:87:33:1f:02:79:7a:22:aa: d3:d1:b0:6d:38:cb:29:94:1d:84:15:e9:67:77:aa: 66:b2:46:1c:d0:e4:82:95:e0:b5:9a:2b:40:e6:c8: d7:0b:3a:1b:47:6e:b6:76:d3:c9:6b:22:ec:a2:70: e0:e2:3c:5f:1a:37:de:92:9d:d9:6f:38:90:1c:f8: 74:82:f5:d3:3c:0c:3a:54:34:2c:d4:c4:1d:22:14: 93:75:91:2f:2a:dd:43:49:28:0c:51:dc:4b:b8:37: e6:cd:35:38:c2:23:65:cb:f6:37:95:bb:3e:62:df: d4:35:67:eb:ba:37:92:74:ab:c4:65:dc:c9:2d:32: 28:80:fc:38:ec:83:c3:7d:63:c1:b0:29:a2:2c:3f: a7:48:e3:3a:48:26:30:dd:96:09:3a:04:fd:81:66: c5:dc:d3:43:97:b7:40:cc:0d:c7:da:bd:da:6d:b2: ed:a5:8c:23:97:58:e5:ab:7b:1d:65:27:53:ef:2d: 9e:8e:f0:2b:39:30:0a:be:88:b1:94:d6:64:23:8e: 35:20:a5:9c:68:ef:51:86:b5:b8:6e:f6:d0:82:f1: 77:d6:be:14:cd:0c:17:d2:4a:6c:b4:12:47:01:9b: 2e:f4:ee:37:1d:60:6b:6b:51:4d:45:60:20:49:30: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:72:A2:78:7A:CE:23:6A:3D:F2:37:B4:71:96:45:7F:66:7D:E0:7C X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4d:0b:72:48:16:82:1a:02:9a:e9:7c:1e:3e:6f:6a:b8:00: bd:91:e8:12:a3:3c:a6:92:66:d9:52:8f:b8:ce:da:ed:41:8d: 8b:68:fb:f4:00:69:0e:cb:d2:21:e4:19:ba:fb:a6:64:1e:8a: 3a:3b:ec:92:a2:73:56:e0:96:4d:2a:32:ac:08:4c:2a:11:f4: 72:6c:a5:02:c2:a3:91:cb:c0:7c:b2:66:0e:1c:af:ce:0d:d4: a8:f6:ab:f1:16:06:54:d9:21:e6:8b:26:78:b0:b3:9f:c4:22: 2c:21:f3:6f:69:1e:90:78:3e:c4:d9:5a:87:c1:a0:80:80:e2: 95:3a:2f:14:5c:c0:c6:91:1f:25:89:d1:5a:ec:52:5f:c2:21: d5:ba:41:42:22:04:ee:dd:62:69:0d:cd:23:8a:ea:19:e6:8f: 89:f3:d1:4f:5e:e7:64:bb:b9:11:11:26:22:6b:dd:db:d5:c7: 78:ff:cb:d9:62:39:ab:f9:59:b9:6a:22:e7:2d:28:34:40:fe: 02:0f:26:c5:c4:e6:75:d5:35:1e:17:32:d6:24:f4:d6:93:fd: 7a:0b:e1:21:ee:22:f1:36:4c:24:09:9e:57:ba:cf:5a:a6:69: d0:66:ad:1c:f0:11:3b:d7:8d:25:12:88:7f:bf:06:56:9a:2c: 12:c7:83:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjUxMDE4MjIzMjM1WhcNMjUxMDI1MjIzMjM1WjAYMRYwFAYD VQQDEw02OGY0MTU4NC1mNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlAtXw6phzMfAnl6IqrT0bBtOMsplB2EFelnd6pmskYc0OSCleC1mitA5sjX CzobR262dtPJayLsonDg4jxfGjfekp3ZbziQHPh0gvXTPAw6VDQs1MQdIhSTdZEv Kt1DSSgMUdxLuDfmzTU4wiNly/Y3lbs+Yt/UNWfrujeSdKvEZdzJLTIogPw47IPD fWPBsCmiLD+nSOM6SCYw3ZYJOgT9gWbF3NNDl7dAzA3H2r3abbLtpYwjl1jlq3sd ZSdT7y2ejvArOTAKvoixlNZkI441IKWcaO9RhrW4bvbQgvF31r4UzQwX0kpstBJH AZsu9O43HWBra1FNRWAgSTCSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9yonh6 ziNqPfI3tHGWRX9mfeB8MB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZTQtySBaCGgKa6XwePm9quAC9kegSozymkmbZUo+4ztrtQY2LaPv0 AGkOy9Ih5Bm6+6ZkHoo6O+ySonNW4JZNKjKsCEwqEfRybKUCwqORy8B8smYOHK/O DdSo9qvxFgZU2SHmiyZ4sLOfxCIsIfNvaR6QeD7E2VqHwaCAgOKVOi8UXMDGkR8l idFa7FJfwiHVukFCIgTu3WJpDc0jiuoZ5o+J89FPXudku7kRESYia93b1cd4/8vZ Yjmr+Vm5aiLnLSg0QP4CDybFxOZ11TUeFzLWJPTWk/16C+Eh7iLxNkwkCZ5Xus9a pmnQZq0c8BE7140lEoh/vwZWmiwSx4Nd -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:16 2025 by rpki-client