$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: xYN+taUo4bucgDaptEmbH02xUmyzAzswAWrnhsoisvY= Subject key identifier: 33:A5:A5:1C:80:15:C4:66:B5:56:9C:45:12:1B:27:A5:18:16:60:98 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 059B Signing time: Sun 19 Oct 2025 00:50:17 +0000 Manifest this update: Sun 19 Oct 2025 00:50:16 +0000 Manifest next update: Sun 26 Oct 2025 00:50:16 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: X5ioFAxoAM6puDYtHceWfUsWvKcorR9NnRo5l1pf8AM=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Oct 19 00:50:16 2025 GMT Not After : Oct 26 00:50:16 2025 GMT Subject: CN=68f435c8-f568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:3b:f5:50:c8:c3:fe:0d:c7:1e:42:a6:ae: 15:d6:96:f3:33:5a:4c:e5:1c:08:6d:ba:70:d0:d3: 90:4c:d5:cc:41:56:38:4c:4d:91:5d:b0:73:a4:d5: 9a:88:1d:4f:95:94:36:04:90:c5:2d:54:11:1d:c4: d3:fd:bd:e5:09:55:37:58:2d:b5:04:52:d5:bd:50: 0d:d9:8f:2a:f9:50:de:63:2d:70:4a:42:0f:31:99: 66:0b:f2:4e:36:e9:3e:77:4c:e2:98:12:f7:a7:12: 1a:f0:67:8b:58:c7:ff:8c:47:f9:09:75:f1:e2:95: f7:ae:4f:56:82:ea:ef:e3:49:88:34:38:a4:0e:df: d6:9c:c4:cb:eb:6b:b6:d6:17:bf:69:20:ab:dc:5c: ec:fd:7a:df:4d:82:c4:17:24:f2:03:9d:62:93:87: 7a:3e:18:a3:89:07:c5:5d:91:da:80:ea:29:ce:9f: 84:fa:cf:86:ed:7a:50:16:8e:e8:cb:94:52:de:30: a3:76:78:16:a0:6a:b7:5c:f8:1c:25:ef:ab:98:fd: f9:09:76:73:74:60:5c:fd:68:fe:ca:18:05:99:73: 5e:a1:4e:e3:c6:e2:5c:5f:e8:5d:b9:4f:cd:6e:58: 5f:5d:6c:22:7e:8d:68:c1:23:dc:09:70:57:06:9a: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A5:A5:1C:80:15:C4:66:B5:56:9C:45:12:1B:27:A5:18:16:60:98 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:36:12:cc:20:7c:f2:12:46:77:97:f0:be:03:f2:b3:de:36: d3:1f:dd:83:15:df:1c:02:84:57:67:89:41:da:86:6e:d9:2c: de:ee:09:8e:fe:d7:57:9c:c2:a0:1e:01:20:61:00:2d:91:02: 97:ea:8e:af:68:e0:41:42:e2:eb:8a:86:00:18:85:b7:59:db: 84:c3:20:8f:af:e4:7a:00:1f:33:b3:8a:a2:a1:5a:64:32:0f: 6d:c1:1c:ff:15:fb:20:01:0e:c7:c7:48:ad:9e:41:0f:28:f9: 1d:df:03:6c:41:3a:08:91:ed:63:0e:63:bf:23:0b:21:96:2d: 15:e8:43:e2:31:82:ea:cb:14:c2:39:21:ee:bc:82:08:15:e6: 80:8f:10:f1:87:b5:ae:4d:35:f6:87:06:e7:b5:0b:5c:18:03: 9e:02:a5:6b:9a:b3:6c:6c:da:05:db:29:ae:e0:01:9d:8a:74: e4:7e:99:4d:90:31:1c:f5:9e:78:60:76:e8:c4:80:e2:07:07: 87:ea:da:62:fe:a9:d2:7c:05:fc:67:ad:cc:19:62:77:b3:bd: 26:5c:9c:be:68:90:18:a9:a6:6c:56:23:22:66:d9:72:23:ce: 5e:56:d5:03:bc:76:4d:b1:ec:60:18:02:9b:3d:cb:b5:1e:e9: ea:3f:58:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUxMDE5MDA1MDE2WhcNMjUxMDI2MDA1MDE2WjAYMRYwFAYD VQQDEw02OGY0MzVjOC1mNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2O479VDIw/4Nxx5Cpq4V1pbzM1pM5RwIbbpw0NOQTNXMQVY4TE2RXbBzpNWa iB1PlZQ2BJDFLVQRHcTT/b3lCVU3WC21BFLVvVAN2Y8q+VDeYy1wSkIPMZlmC/JO Nuk+d0zimBL3pxIa8GeLWMf/jEf5CXXx4pX3rk9Wgurv40mINDikDt/WnMTL62u2 1he/aSCr3Fzs/XrfTYLEFyTyA51ik4d6PhijiQfFXZHagOopzp+E+s+G7XpQFo7o y5RS3jCjdngWoGq3XPgcJe+rmP35CXZzdGBc/Wj+yhgFmXNeoU7jxuJcX+hduU/N blhfXWwifo1owSPcCXBXBposYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOlpRyA FcRmtVacRRIbJ6UYFmCYMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAONhLMIHzyEkZ3l/C+A/Kz3jbTH92DFd8cAoRXZ4lB2oZu2Sze7gmO /tdXnMKgHgEgYQAtkQKX6o6vaOBBQuLrioYAGIW3WduEwyCPr+R6AB8zs4qioVpk Mg9twRz/FfsgAQ7Hx0itnkEPKPkd3wNsQToIke1jDmO/Iwshli0V6EPiMYLqyxTC OSHuvIIIFeaAjxDxh7WuTTX2hwbntQtcGAOeAqVrmrNsbNoF2ymu4AGdinTkfplN kDEc9Z54YHboxIDiBweH6tpi/qnSfAX8Z63MGWJ3s70mXJy+aJAYqaZsViMiZtly I85eVtUDvHZNsexgGAKbPcu1HunqP1i6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:04 2025 by rpki-client