$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: X6zQ86EZ2tpdKQndKkh/pFI/N622pNXrWYRWfStd+Fc= Subject key identifier: F4:26:EE:E9:03:23:1E:96:03:06:C8:F8:0E:3E:19:E2:42:AA:22:03 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: AF Signing time: Sun 19 Oct 2025 09:17:14 +0000 Manifest this update: Sun 19 Oct 2025 09:17:13 +0000 Manifest next update: Sun 26 Oct 2025 09:17:13 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: Clodi7w8U1ZcuKxIgXBt4lK4dl0XaBBuEbBBpzagk3s=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Oct 19 09:17:13 2025 GMT Not After : Oct 26 09:17:13 2025 GMT Subject: CN=68f4ac9a-4eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:17:f1:2d:1d:68:fa:98:64:80:ee:58:03: 30:07:70:7b:28:1e:29:64:ab:26:75:69:3a:55:4b: ba:ea:3e:1a:9f:1d:11:ad:27:7c:ea:1f:08:cc:b4: 2e:19:7b:32:87:e0:fb:fb:82:7d:f4:a2:ec:d7:93: 82:0e:b2:0c:58:aa:24:1b:8c:ce:42:9b:5d:ce:e6: 4a:76:39:83:40:bc:5b:0c:70:14:97:f5:83:36:70: 9b:1a:b9:ca:bb:76:0c:b9:3b:49:e0:90:48:e9:6d: dd:89:12:43:74:ef:ad:70:cd:83:75:74:19:64:5b: ac:17:16:22:79:0d:1f:32:32:1c:40:12:1f:10:5d: 1b:8e:64:24:ff:20:03:7c:6f:06:df:1c:83:c1:96: 03:f1:79:47:e8:37:b1:54:58:9a:4f:73:0c:0e:c9: ef:63:b5:c5:c6:9a:f3:e3:8f:54:bc:83:00:ef:7b: 52:96:07:50:1e:26:40:e0:7c:69:ca:06:3e:8f:a3: 8f:67:84:35:c1:29:23:a9:ca:e9:fd:c4:10:28:d2: 75:a0:56:72:3a:90:e9:ac:a1:a2:c2:43:b2:1d:7b: 3f:9c:b8:b5:13:9d:61:bc:fb:ad:c7:0b:7c:a9:5a: ee:27:38:7f:55:6b:a2:96:04:2e:1b:fb:74:24:7b: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:26:EE:E9:03:23:1E:96:03:06:C8:F8:0E:3E:19:E2:42:AA:22:03 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0c:6d:6c:16:e5:bc:bd:75:6a:49:8e:b2:eb:18:74:bb:11: b9:8e:19:d5:72:42:ac:6a:5d:5c:40:07:a6:af:6a:0a:fe:b0: b3:25:a1:ba:4c:b8:b7:ee:51:e8:8b:81:e4:67:ea:f9:8c:03: 94:ea:7e:7d:7d:e3:5e:12:f3:32:2f:de:61:c1:f0:94:62:cc: 1f:2b:1d:88:8a:16:a5:f7:81:e5:34:c7:52:19:d7:6e:b3:6f: 88:64:ac:e3:67:e2:a9:00:cb:de:7e:c9:67:5a:7f:c1:03:df: 21:a3:41:1a:d3:05:c0:28:70:db:10:25:a7:93:df:28:ca:fe: ab:27:2c:51:27:0f:fb:5a:5e:20:88:f9:e5:5a:ef:2c:d2:4b: 9e:5a:a2:1c:7c:c2:e0:c8:62:a0:e7:a3:65:e5:65:16:a3:e2: 89:ec:ff:97:40:91:77:9e:8e:10:2a:c8:72:b7:b2:93:fb:e4: 19:a0:66:30:79:8a:54:23:40:46:c3:4e:25:01:ac:04:2e:a6: f1:a0:af:65:cc:93:33:20:fa:e3:03:00:59:ad:df:b6:46:4f: cb:5e:b8:7b:a1:1f:b9:38:a6:c7:61:b5:45:62:a0:2c:5c:a5: 7f:0a:fb:c8:f2:28:4a:c6:6a:f1:2f:5c:76:bb:00:b0:1d:dc: 3f:73:82:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUxMDE5MDkxNzEzWhcNMjUxMDI2MDkxNzEzWjAYMRYwFAYD VQQDEw02OGY0YWM5YS00ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNcX8S0daPqYZIDuWAMwB3B7KB4pZKsmdWk6VUu66j4anx0RrSd86h8IzLQu GXsyh+D7+4J99KLs15OCDrIMWKokG4zOQptdzuZKdjmDQLxbDHAUl/WDNnCbGrnK u3YMuTtJ4JBI6W3diRJDdO+tcM2DdXQZZFusFxYieQ0fMjIcQBIfEF0bjmQk/yAD fG8G3xyDwZYD8XlH6DexVFiaT3MMDsnvY7XFxprz449UvIMA73tSlgdQHiZA4Hxp ygY+j6OPZ4Q1wSkjqcrp/cQQKNJ1oFZyOpDprKGiwkOyHXs/nLi1E51hvPutxwt8 qVruJzh/VWuilgQuG/t0JHtWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQm7ukD Ix6WAwbI+A4+GeJCqiIDMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoDG1sFuW8vXVqSY6y6xh0uxG5jhnVckKsal1cQAemr2oK/rCzJaG6 TLi37lHoi4HkZ+r5jAOU6n59feNeEvMyL95hwfCUYswfKx2Iihal94HlNMdSGddu s2+IZKzjZ+KpAMvefslnWn/BA98ho0Ea0wXAKHDbECWnk98oyv6rJyxRJw/7Wl4g iPnlWu8s0kueWqIcfMLgyGKg56Nl5WUWo+KJ7P+XQJF3no4QKshyt7KT++QZoGYw eYpUI0BGw04lAawELqbxoK9lzJMzIPrjAwBZrd+2Rk/LXrh7oR+5OKbHYbVFYqAs XKV/CvvI8ihKxmrxL1x2uwCwHdw/c4JR -----END CERTIFICATE-----Generated at Mon Oct 20 17:03:42 2025 by rpki-client