$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: txporR/w7vgLm5NeKsIyylccvgmLACNJJHN3xhCBUzQ= Subject key identifier: E5:FD:4C:4C:EC:93:EC:F5:E1:20:B9:9B:C4:2C:D2:41:DA:71:CE:BF Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 0961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 095A Signing time: Sat 18 Oct 2025 21:13:01 +0000 Manifest this update: Sat 18 Oct 2025 21:13:00 +0000 Manifest next update: Sat 25 Oct 2025 21:13:00 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: PuXBdDDEc/pa/mYJAizjnF3A8sCKrkzGX5T39R9WHTM=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Oct 18 21:13:00 2025 GMT Not After : Oct 25 21:13:00 2025 GMT Subject: CN=68f402dc-135a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:78:6a:68:47:2b:a7:c1:16:53:62:2f:53: bd:24:3c:4b:bd:34:1f:4b:3e:50:2f:2b:84:36:64: 89:42:b5:46:0e:ce:54:7c:28:9e:91:d8:b8:0f:ae: 63:1b:87:9d:6f:a6:bf:62:c2:a3:3e:23:80:31:1c: a1:4e:de:3b:77:b2:5e:a9:c0:ca:c7:05:79:c1:1a: a0:f0:f1:16:18:0b:01:27:9d:f4:f9:1f:ba:a1:b1: 30:41:1a:07:8d:75:7a:ea:6b:0f:8c:96:25:f6:6c: 8a:d3:3f:47:9d:a2:94:c4:db:96:d3:e4:7d:fb:fd: c1:3b:70:7f:85:e8:2f:f1:86:bf:9e:8a:8e:41:88: a1:56:d2:d8:a3:77:a1:12:91:19:81:4b:2f:59:83: b4:68:d0:55:dd:64:ae:29:c5:e7:63:26:79:02:54: d9:15:cd:3d:11:38:9a:cd:68:d4:0f:7f:2c:b2:dc: 53:18:3d:d4:a7:ba:21:17:91:b1:1f:9c:bd:da:ec: 1a:67:da:f9:e7:92:0b:0d:b4:af:8d:16:d7:c2:0d: 3e:01:f7:5a:50:49:43:ad:05:41:68:7d:e6:8f:15: 64:d3:65:66:e6:5c:a7:9d:7a:be:1a:09:88:b5:3f: 90:d1:37:6a:c7:2d:a3:8e:99:c0:d3:44:6e:91:18: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:4C:4C:EC:93:EC:F5:E1:20:B9:9B:C4:2C:D2:41:DA:71:CE:BF X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a3:1a:d5:fa:74:a1:88:e4:f7:4e:4e:f1:c1:da:89:75:be: 9a:ac:7f:cd:a8:3c:b0:3f:77:25:87:38:69:f1:69:ef:74:05: 88:6e:2c:cc:b6:3a:bc:9a:5e:59:af:36:e7:64:2b:c5:52:58: b1:0b:d5:be:5a:eb:9b:d3:65:67:64:04:ed:40:9e:3c:e2:a6: 27:6a:75:05:51:a0:ac:90:4a:66:30:39:73:bb:1c:58:65:76: 93:e8:ce:0e:73:d6:b5:3d:94:16:e0:9e:b1:9e:94:61:fa:0d: 48:0b:f1:2e:37:d2:c3:08:2b:15:ea:18:6c:e4:2b:29:cc:ce: 50:e7:d5:9a:8b:dc:56:b3:82:03:7b:c9:c6:cd:7d:f4:00:7f: 3a:5d:9f:9b:46:eb:eb:72:8b:a9:0b:f7:de:c7:d9:dd:ab:33: a5:53:2d:95:a6:db:db:e9:1c:3b:a6:cf:7c:16:88:64:17:1f: fc:54:e3:77:28:cf:6b:ff:5a:71:c6:48:1b:8e:57:b3:1a:05: 99:58:71:58:b8:1b:83:67:e6:52:7e:0a:98:95:f3:c1:9d:9d: 38:b9:89:66:d0:08:81:2b:51:9e:84:d2:bb:ff:06:f4:99:90: 81:e3:84:20:9b:6a:0b:f4:39:23:91:7b:4e:45:11:46:0a:4d: 43:ed:06:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUxMDE4MjExMzAwWhcNMjUxMDI1MjExMzAwWjAYMRYwFAYD VQQDEw02OGY0MDJkYy0xMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhV4amhHK6fBFlNiL1O9JDxLvTQfSz5QLyuENmSJQrVGDs5UfCiekdi4D65j G4edb6a/YsKjPiOAMRyhTt47d7JeqcDKxwV5wRqg8PEWGAsBJ530+R+6obEwQRoH jXV66msPjJYl9myK0z9HnaKUxNuW0+R9+/3BO3B/hegv8Ya/noqOQYihVtLYo3eh EpEZgUsvWYO0aNBV3WSuKcXnYyZ5AlTZFc09ETiazWjUD38sstxTGD3Up7ohF5Gx H5y92uwaZ9r555ILDbSvjRbXwg0+AfdaUElDrQVBaH3mjxVk02Vm5lynnXq+GgmI tT+Q0Tdqxy2jjpnA00RukRhv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOX9TEzs k+z14SC5m8Qs0kHacc6/MB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCoxrV+nShiOT3Tk7xwdqJdb6arH/NqDywP3clhzhp8WnvdAWIbizM tjq8ml5ZrzbnZCvFUlixC9W+Wuub02VnZATtQJ484qYnanUFUaCskEpmMDlzuxxY ZXaT6M4Oc9a1PZQW4J6xnpRh+g1IC/EuN9LDCCsV6hhs5CspzM5Q59Wai9xWs4ID e8nGzX30AH86XZ+bRuvrcoupC/fex9ndqzOlUy2Vptvb6Rw7ps98FohkFx/8VON3 KM9r/1pxxkgbjlezGgWZWHFYuBuDZ+ZSfgqYlfPBnZ04uYlm0AiBK1GehNK7/wb0 mZCB44Qgm2oL9DkjkXtORRFGCk1D7QZs -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:52 2025 by rpki-client