$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json) Hash identifier: zZGs61wZn4rvJ8GLCepg6sDG8msnZmpBwzXMnkTyF/c= Subject key identifier: 83:77:2A:AF:70:7E:EF:99:CD:5E:E4:BF:74:90:0D:BC:E2:4B:04:2B Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft Manifest number: 3F27 Signing time: Mon 20 Oct 2025 14:30:46 +0000 Manifest this update: Mon 20 Oct 2025 14:30:46 +0000 Manifest next update: Mon 27 Oct 2025 14:30:46 +0000 Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: DX/vx7eRgh+P25YVpzYHl703j2g5DwiPoewOIg282Zs=) 2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: V43Il4g6nzN/Oi9NZNkfIg3qfCZBm83zni76jTMor3c=) 3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys=) 4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: lWY3HuGd5fIJF8Oe8hPwzrYQ3DgR98qCqY9Pi+cBvM8=) 5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: 3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=) 6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s=) 7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=) 8: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: JZoWxsRbV7qWkDrZjMBEtqXRAY211vcz/IuFZQVqVOA=) 9: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts=) 10: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lXnIjaE79MbFJFMKpPmyaG2gWaI8IDWerJKv1saa/n0=) 11: 66891B80943011EA8988B883C4F9AE02.roa (hash: e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=) 12: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 3GbbC1+2jl0vL9FRkvPdOxEiS1lz+xyVoZFUlqkOUwg=) 13: 727C68508AB411EA89D83541C4F9AE02.roa (hash: 3/YHfMJFd4+/uHvYeznP2jrI3k3cNg88tQA8zxhGa9Q=) 14: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU=) 15: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: W9G6BLl6GrAu6NpuOira3w9ONwVWK7LaREYQeOaaW/o=) 16: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7461 (0x1d25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 20 14:30:46 2025 GMT Not After : Oct 27 14:30:46 2025 GMT Subject: CN=68f64796-fa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:b9:87:9a:43:fc:f1:be:b5:ee:2d:3c:8f: 1c:58:72:f9:25:d2:f0:d0:47:8e:a3:eb:b8:70:96: eb:1d:e5:fa:b6:9a:87:67:34:d9:2a:ee:12:4e:c1: fb:a0:bf:97:ea:45:7b:8c:b9:c9:ee:bf:ab:b8:d9: ae:e0:24:17:6f:c9:79:db:11:0d:41:21:f2:eb:97: 20:02:2b:e6:90:5b:da:09:60:06:d2:72:54:15:89: 8f:81:53:cb:18:7e:7c:98:ca:ea:00:2f:7c:10:1c: 20:05:21:a6:20:8a:13:01:9e:fb:cf:34:c8:65:1b: 1e:42:5e:4c:a2:29:72:0e:5c:1d:de:19:80:90:fd: 15:4d:91:5b:05:87:33:ba:96:8b:41:f0:d8:56:f6: 48:90:a1:dc:17:eb:79:c7:e5:3f:38:8a:6f:93:12: 19:e6:23:68:0b:fa:23:1e:67:6e:69:78:e8:1e:c5: 0f:22:e9:77:9c:2f:15:3f:4a:ab:34:29:38:1f:5e: b9:5b:9f:d7:72:b3:df:39:c4:18:6f:8a:ef:ec:a3: b9:b3:ea:0d:a7:55:c1:ef:bc:2e:99:a7:2a:77:56: f5:58:07:c6:f2:e4:bf:75:8c:00:83:37:62:90:33: f6:38:17:59:06:e8:3e:12:95:09:c0:06:ad:6c:6a: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:2A:AF:70:7E:EF:99:CD:5E:E4:BF:74:90:0D:BC:E2:4B:04:2B X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:90:72:e9:e4:ee:90:f3:fb:7d:f6:e0:5d:9b:11:d1:66: 03:54:44:1d:f1:b8:a9:ff:61:90:4f:a1:17:f3:a4:48:f6:7e: b2:d9:e7:0d:75:b0:6d:c1:51:1d:f7:6a:e9:df:75:7e:11:4b: c1:6f:96:ff:00:6a:40:77:97:ea:be:bf:5e:6b:f6:a4:b9:61: c5:cd:84:62:57:15:70:99:72:f7:4b:89:fd:79:c0:b8:27:9b: bf:52:9a:49:dc:aa:df:5f:10:e6:d9:3b:9e:36:6e:fd:88:2e: 19:d0:76:85:9f:fb:a0:40:1d:58:bd:7f:96:fa:15:42:ea:4f: 83:4c:62:72:14:80:d6:f5:0d:63:78:4e:f5:5a:21:14:f3:c9: 11:90:ff:66:d0:c8:c4:c9:59:d4:24:5c:c7:b4:82:41:7d:66: da:cc:ce:4b:e5:a9:16:85:f1:b5:48:6a:08:f2:c4:2d:8b:82: e3:8e:bf:62:e8:b2:9a:f4:f1:84:a7:1b:06:4e:55:27:61:82: 16:22:6e:89:41:1e:9f:1c:f1:76:b5:48:38:3b:bb:56:c8:b4: 50:e2:e3:a1:33:d7:e8:ab:63:4c:df:98:bb:62:c7:f2:19:9a: 75:f2:8a:b6:8b:c5:7b:e8:9e:0f:ca:33:52:a2:b4:87:08:ba: 04:84:dc:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUxMDIwMTQzMDQ2WhcNMjUxMDI3MTQzMDQ2WjAYMRYwFAYD VQQDEw02OGY2NDc5Ni1mYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMS5h5pD/PG+te4tPI8cWHL5JdLw0EeOo+u4cJbrHeX6tpqHZzTZKu4STsH7 oL+X6kV7jLnJ7r+ruNmu4CQXb8l52xENQSHy65cgAivmkFvaCWAG0nJUFYmPgVPL GH58mMrqAC98EBwgBSGmIIoTAZ77zzTIZRseQl5MoilyDlwd3hmAkP0VTZFbBYcz upaLQfDYVvZIkKHcF+t5x+U/OIpvkxIZ5iNoC/ojHmduaXjoHsUPIul3nC8VP0qr NCk4H165W5/XcrPfOcQYb4rv7KO5s+oNp1XB77wumacqd1b1WAfG8uS/dYwAgzdi kDP2OBdZBug+EpUJwAatbGp7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN3Kq9w fu+ZzV7kv3SQDbziSwQrMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0 dlRINkFXb3RXMXVHcWJQOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR+5By6eTukPP7ffbgXZsR0WYDVEQd8bip/2GQT6EX86RI9n6y2ecN dbBtwVEd92rp33V+EUvBb5b/AGpAd5fqvr9ea/akuWHFzYRiVxVwmXL3S4n9ecC4 J5u/UppJ3KrfXxDm2TueNm79iC4Z0HaFn/ugQB1YvX+W+hVC6k+DTGJyFIDW9Q1j eE71WiEU88kRkP9m0MjEyVnUJFzHtIJBfWbazM5L5akWhfG1SGoI8sQti4Ljjr9i 6LKa9PGEpxsGTlUnYYIWIm6JQR6fHPF2tUg4O7tWyLRQ4uOhM9foq2NM35i7Ysfy GZp18oq2i8V76J4PyjNSorSHCLoEhNyp -----END CERTIFICATE-----Generated at Tue Oct 21 05:11:20 2025 by rpki-client