$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: voRj4xWRnVvWAw5HCbyOJlvjAe9HS17Mj+Locw3Jves= Subject key identifier: 74:06:CC:4F:BB:94:AC:97:E4:D0:F9:1C:E6:89:B2:6C:CB:D6:CB:63 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A00 Signing time: Sat 18 Oct 2025 20:52:01 +0000 Manifest this update: Sat 18 Oct 2025 20:52:00 +0000 Manifest next update: Sat 25 Oct 2025 20:52:00 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: 0V/ZlzbJK7Rfm97RbH58ufpqTwoJujGSKLMoI5aKMsM=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Oct 18 20:52:00 2025 GMT Not After : Oct 25 20:52:00 2025 GMT Subject: CN=68f3fdf1-eacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:d1:d8:16:8c:88:17:dc:e4:74:96:24:63: bf:b5:8b:f2:b9:6b:ea:e8:83:a3:99:b4:5c:ff:a8: f6:2b:46:0a:d1:33:a7:00:14:1f:f2:75:06:92:26: cb:27:ff:a5:c7:0e:1c:12:fc:b6:5f:44:c4:1c:95: ec:ff:18:ef:8b:7c:6e:91:3d:8e:82:44:a4:68:b6: 71:2b:5a:65:d6:ba:3d:f2:1e:9b:fe:41:f6:ee:4c: 38:2c:42:89:3d:58:80:cb:bf:ab:96:18:50:b2:e2: a7:07:af:31:f7:66:b8:d6:0b:37:cc:52:94:bc:c1: 9a:3a:3f:09:c8:52:93:0b:08:1d:6d:83:38:b6:f0: a5:ce:e5:91:43:04:c6:47:af:40:d9:a6:67:94:96: 01:ce:3f:06:8e:88:d7:db:7e:fb:6d:f4:e2:10:a1: de:12:6c:d2:fd:a0:79:cd:0e:34:b0:86:1f:57:f4: 6e:4e:3c:c3:83:70:d6:52:dd:d9:12:0a:05:6e:16: 26:1f:0c:ad:3a:ae:12:d7:10:c1:90:39:4c:da:04: f6:bc:7d:6f:00:ba:17:b2:26:14:af:ad:9a:da:d3: 58:8a:d8:00:86:88:f3:cb:ef:af:09:48:e6:14:4e: 56:0a:bc:9d:60:26:5a:6e:4a:0c:40:7a:7b:e0:d7: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:CC:4F:BB:94:AC:97:E4:D0:F9:1C:E6:89:B2:6C:CB:D6:CB:63 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a8:bb:8f:98:71:fb:d6:fb:c1:84:0b:4f:8f:62:e3:20:28: cd:b2:0e:1b:1a:a5:ed:bf:8d:98:d5:08:22:3f:f8:ad:e7:58: da:f4:06:8b:1c:bc:0f:2a:ea:91:ee:ee:00:c8:0c:28:07:79: d4:4d:61:d0:dc:5f:ff:39:0b:58:10:96:d7:d1:2a:59:07:f1: aa:61:9c:1d:63:d6:a2:c2:b6:b9:5b:ff:b9:10:67:d1:05:8a: 0f:3b:ab:69:a0:8f:9d:7d:50:ae:6b:5f:80:d4:21:20:84:60: c9:fc:90:89:a8:3a:ee:c2:c9:76:3d:d7:4c:af:ba:c7:95:62: c8:88:96:0d:3f:e7:5f:c2:b2:98:f2:f9:7a:85:33:ee:f7:7e: 92:86:1f:38:c0:1a:0b:c5:31:82:40:a3:91:7e:72:64:41:fc: db:84:91:fe:a2:f8:5f:c6:f1:4f:c4:12:8e:6f:98:57:15:2e: 5f:3f:59:74:2d:96:2c:95:6a:8d:ce:5a:03:c5:a3:5a:f1:76: 49:d5:e5:c4:16:db:15:a9:85:14:95:4d:b8:6e:be:e8:3f:c0: e8:ca:ea:50:e4:7d:89:9b:10:63:92:1f:17:ec:1e:7f:51:13: e0:9a:1a:cc:aa:8c:0b:f5:69:05:c8:eb:b5:e7:01:b8:2e:53: 37:9b:61:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUxMDE4MjA1MjAwWhcNMjUxMDI1MjA1MjAwWjAYMRYwFAYD VQQDEw02OGYzZmRmMS1lYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd7R2BaMiBfc5HSWJGO/tYvyuWvq6IOjmbRc/6j2K0YK0TOnABQf8nUGkibL J/+lxw4cEvy2X0TEHJXs/xjvi3xukT2OgkSkaLZxK1pl1ro98h6b/kH27kw4LEKJ PViAy7+rlhhQsuKnB68x92a41gs3zFKUvMGaOj8JyFKTCwgdbYM4tvClzuWRQwTG R69A2aZnlJYBzj8GjojX2377bfTiEKHeEmzS/aB5zQ40sIYfV/RuTjzDg3DWUt3Z EgoFbhYmHwytOq4S1xDBkDlM2gT2vH1vALoXsiYUr62a2tNYitgAhojzy++vCUjm FE5WCrydYCZabkoMQHp74NefmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQGzE+7 lKyX5ND5HOaJsmzL1stjMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuqLuPmHH71vvBhAtPj2LjICjNsg4bGqXtv42Y1QgiP/it51ja9AaL HLwPKuqR7u4AyAwoB3nUTWHQ3F//OQtYEJbX0SpZB/GqYZwdY9aiwra5W/+5EGfR BYoPO6tpoI+dfVCua1+A1CEghGDJ/JCJqDruwsl2PddMr7rHlWLIiJYNP+dfwrKY 8vl6hTPu936Shh84wBoLxTGCQKORfnJkQfzbhJH+ovhfxvFPxBKOb5hXFS5fP1l0 LZYslWqNzloDxaNa8XZJ1eXEFtsVqYUUlU24br7oP8DoyupQ5H2JmxBjkh8X7B5/ URPgmhrMqowL9WkFyOu15wG4LlM3m2Fm -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:05 2025 by rpki-client