$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json) Hash identifier: hurjgNGV5CW8i51cRs1v4q1LeXiA9WyK1PXDCzvDWnA= Subject key identifier: D5:88:0C:F8:EF:E4:BB:F5:02:1A:98:C2:D1:8C:B8:9A:30:D9:FA:47 Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft Manifest number: 11 Signing time: Sun 19 Oct 2025 11:38:46 +0000 Manifest this update: Sun 19 Oct 2025 11:38:46 +0000 Manifest next update: Sun 26 Oct 2025 11:38:46 +0000 Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: 66YaL6z75st+F07zkLs6vW2+rahbjPEYNTbbAfca8vE=) 2: 2159B7B8A41F11F087C1F02CC4F9AE02.roa (hash: o9+trdGZs9g/j9AiQD7kTRhw8blN1x7JWncUYHM5y3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Validity Not Before: Oct 19 11:38:46 2025 GMT Not After : Oct 26 11:38:46 2025 GMT Subject: CN=68f4cdc6-a7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:9e:76:51:04:e9:d7:ee:38:96:fd:9a:62: dd:c5:9f:24:30:10:54:24:2f:47:1a:eb:22:c7:a1: 70:db:f4:6f:0d:d5:5b:4e:c0:d3:4c:60:67:f6:f2: ab:2e:68:e9:4f:6f:2f:09:06:04:e6:49:39:bb:de: 13:58:c7:f0:b0:07:b9:79:18:ca:99:39:19:4d:45: 21:ca:d3:53:a5:7a:d5:f6:05:a4:25:fc:e5:e6:d5: 0c:17:80:66:55:f3:b8:3d:68:11:4a:4c:d6:7a:55: 4a:8a:4b:fa:4f:4a:76:61:e9:e8:78:2f:57:2c:5f: c1:81:72:f1:0c:c5:e5:5b:f5:26:d6:9e:ff:91:20: 21:f0:6d:4e:ff:0b:13:46:46:a8:82:50:63:57:c9: cc:17:78:4e:2e:94:0f:04:68:57:60:ad:e6:ee:37: d6:78:67:26:a8:e4:34:a1:5d:b6:02:80:af:74:22: f4:cd:a0:fe:4f:a9:6d:b3:45:cd:03:5d:8e:fe:69: ee:ce:c5:4a:3c:6b:9e:40:e9:e7:0c:99:2d:44:a5: e5:89:60:6f:cd:e0:e9:d3:f0:9d:08:ac:f8:80:6a: 85:e4:3a:b0:df:6f:d8:2f:65:8c:99:20:b5:41:76: 0b:72:53:9c:7e:bf:f6:1e:ee:39:86:7c:ad:c4:26: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:0C:F8:EF:E4:BB:F5:02:1A:98:C2:D1:8C:B8:9A:30:D9:FA:47 X509v3 Authority Key Identifier: keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:46:2c:72:49:8d:08:fb:16:b7:be:a8:db:da:14:6b:c2:dc: ef:7e:7c:5b:c9:82:79:96:ea:7f:d2:84:9e:b7:b2:48:5a:7a: 30:ab:b0:1a:89:ef:af:b8:b4:88:a4:e9:24:43:d0:4b:0b:5d: a5:80:da:b7:96:eb:a2:8d:6e:15:ed:5f:2a:4b:05:6f:21:61: a0:5d:5e:5c:ef:bd:76:42:4a:cd:b5:f5:d8:6f:4d:40:99:be: a4:cb:26:14:28:d5:7a:3e:12:63:b3:9b:82:03:06:8b:06:4f: 3b:de:f6:9f:98:1e:96:0f:ec:53:ae:4a:82:c5:50:70:4a:e6: c2:6c:76:15:a6:c9:b4:3d:dc:56:a3:6c:ac:8a:01:4c:7c:5b: c3:5d:74:57:45:f6:3f:0e:4c:99:78:09:bb:2c:9f:b6:bd:01: 3e:8c:d5:34:ef:87:7c:99:1e:24:7f:79:4a:4d:17:02:d5:fb: 5c:7c:b1:8c:5a:32:51:24:f2:8d:c5:9c:b9:8f:dd:bf:21:8b: b9:84:77:a6:16:58:a3:d4:0e:ea:f9:cc:54:f3:d8:8f:5d:b6: 71:09:6b:a0:7f:0d:06:2e:96:28:25:ae:ed:d9:7b:ed:86:5a: 0e:bd:bd:12:cb:fa:dc:38:c9:a5:ef:94:e4:59:26:0a:17:30: e7:ea:a2:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw RjM0NUY0MjAeFw0yNTEwMTkxMTM4NDZaFw0yNTEwMjYxMTM4NDZaMBgxFjAUBgNV BAMTDTY4ZjRjZGM2LWE3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBop52UQTp1+44lv2aYt3FnyQwEFQkL0ca6yLHoXDb9G8N1VtOwNNMYGf28qsu aOlPby8JBgTmSTm73hNYx/CwB7l5GMqZORlNRSHK01OletX2BaQl/OXm1QwXgGZV 87g9aBFKTNZ6VUqKS/pPSnZh6eh4L1csX8GBcvEMxeVb9SbWnv+RICHwbU7/CxNG RqiCUGNXycwXeE4ulA8EaFdgrebuN9Z4Zyao5DShXbYCgK90IvTNoP5PqW2zRc0D XY7+ae7OxUo8a55A6ecMmS1EpeWJYG/N4OnT8J0IrPiAaoXkOrDfb9gvZYyZILVB dgtyU5x+v/Ye7jmGfK3EJuIrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1YgM+O/k u/UCGpjC0Yy4mjDZ+kcwHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZGLHJJjQj7Fre+qNvaFGvC3O9+fFvJgnmW6n/ShJ63skhaejCrsBqJ 76+4tIik6SRD0EsLXaWA2reW66KNbhXtXypLBW8hYaBdXlzvvXZCSs219dhvTUCZ vqTLJhQo1Xo+EmOzm4IDBosGTzve9p+YHpYP7FOuSoLFUHBK5sJsdhWmybQ93Faj bKyKAUx8W8NddFdF9j8OTJl4Cbssn7a9AT6M1TTvh3yZHiR/eUpNFwLV+1x8sYxa MlEk8o3FnLmP3b8hi7mEd6YWWKPUDur5zFTz2I9dtnEJa6B/DQYuliglru3Ze+2G Wg69vRLL+tw4yaXvlORZJgoXMOfqopM= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:30 2025 by rpki-client