$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: 32VfH3KNi1DXA9mR57hbrUwBLH7Yr1ntVvX2ZboGYIc= Subject key identifier: E5:52:73:C6:4D:52:D7:DC:DD:E0:F5:49:32:33:A3:2D:A3:A4:7B:C8 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0C23 Signing time: Mon 20 Oct 2025 19:20:45 +0000 Manifest this update: Mon 20 Oct 2025 19:20:44 +0000 Manifest next update: Mon 27 Oct 2025 19:20:44 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: 3plYvLDsuXsk/nw/FNg8yYxOHoQ4NSePyFbrZQtKc9U=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Oct 20 19:20:44 2025 GMT Not After : Oct 27 19:20:44 2025 GMT Subject: CN=68f68b8d-f342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:ae:59:20:a6:0e:04:d0:2c:05:57:3e:d9: 32:05:5e:33:39:5a:e2:f8:ac:42:5e:49:23:85:3e: c1:2a:a6:4e:3a:0e:4d:36:c8:8b:fe:a9:c0:4a:d6: f1:0d:c0:70:de:9e:79:42:bc:a4:f4:10:10:bb:6e: db:a9:37:14:c7:72:ca:c9:0f:e6:2a:bb:b7:e6:ff: db:58:b3:83:83:fc:bc:55:76:0a:2e:32:78:2e:3a: 90:18:6d:82:29:3c:16:be:d2:ec:69:35:93:e5:9e: b0:d4:a7:01:cd:de:fa:0b:e2:45:02:a3:2e:65:2d: 93:bc:6f:09:80:36:8e:a6:b5:33:df:89:3d:e3:22: 0f:1d:00:af:84:5e:3f:cc:01:71:54:70:4d:e7:9f: 7d:ca:58:ba:3e:14:94:99:90:fe:8e:16:97:59:bb: 99:aa:5c:07:08:bd:f8:89:94:fa:f4:a8:9d:c5:32: 53:d6:76:8d:93:62:af:ed:1a:f2:28:85:3f:f8:a9: d9:ca:86:b7:6f:23:28:32:72:7b:fc:09:4d:d8:de: 36:5b:ea:2b:0e:0a:e1:fe:ed:da:0c:93:7b:fb:d4: 74:72:83:5f:b5:65:d8:76:38:70:ac:8e:b1:cc:99: d1:27:d7:2c:e1:67:ca:e6:20:b9:de:a5:5f:df:18: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:52:73:C6:4D:52:D7:DC:DD:E0:F5:49:32:33:A3:2D:A3:A4:7B:C8 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:8d:9f:1c:b4:0f:5c:16:5c:c2:83:1b:66:d9:27:a9:51:26: b8:29:1e:07:93:a3:a8:75:6a:43:69:08:f5:1b:60:d5:8b:c5: 82:bd:84:d9:2a:25:71:d1:b0:b5:b8:46:1d:7d:99:94:a9:52: ce:9e:c3:3b:30:a1:58:31:ce:bc:28:ab:9e:cd:3e:06:e0:2f: 40:62:b1:98:67:55:0a:a4:e3:a2:f8:f6:a4:56:6f:85:73:b7: ad:b7:bd:17:e2:c3:71:b4:de:38:85:bb:c5:21:70:a6:ba:6a: bf:ca:ec:bb:e5:0a:04:f4:a2:bf:bc:e4:30:55:cd:54:8e:22: 1b:cd:3f:3a:df:2f:2f:d0:fa:fb:2a:cb:01:17:00:d8:fa:73: d2:cd:05:ba:c1:57:63:dd:70:86:27:4a:8f:83:9b:84:c9:93: ea:43:2e:63:90:0c:6f:6a:3b:ea:cc:52:1d:65:98:73:e1:04: 55:04:85:6f:c0:4a:b0:24:9d:69:f5:54:fa:09:69:de:7b:ed: 27:1e:b1:6e:20:91:55:68:a4:fa:42:b4:17:c2:c0:f2:3f:88: 7a:56:10:b7:f6:06:00:e2:30:72:ee:17:79:5b:85:eb:c7:b9: 37:3a:ed:a6:49:52:a6:eb:28:50:d7:41:4c:2d:37:db:13:1e: 57:f8:b1:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjUxMDIwMTkyMDQ0WhcNMjUxMDI3MTkyMDQ0WjAYMRYwFAYD VQQDEw02OGY2OGI4ZC1mMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVCuWSCmDgTQLAVXPtkyBV4zOVri+KxCXkkjhT7BKqZOOg5NNsiL/qnAStbx DcBw3p55Qryk9BAQu27bqTcUx3LKyQ/mKru35v/bWLODg/y8VXYKLjJ4LjqQGG2C KTwWvtLsaTWT5Z6w1KcBzd76C+JFAqMuZS2TvG8JgDaOprUz34k94yIPHQCvhF4/ zAFxVHBN5599yli6PhSUmZD+jhaXWbuZqlwHCL34iZT69KidxTJT1naNk2Kv7Rry KIU/+KnZyoa3byMoMnJ7/AlN2N42W+orDgrh/u3aDJN7+9R0coNftWXYdjhwrI6x zJnRJ9cs4WfK5iC53qVf3xh+FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVSc8ZN Utfc3eD1STIzoy2jpHvIMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAojZ8ctA9cFlzCgxtm2SepUSa4KR4Hk6OodWpDaQj1G2DVi8WCvYTZ KiVx0bC1uEYdfZmUqVLOnsM7MKFYMc68KKuezT4G4C9AYrGYZ1UKpOOi+PakVm+F c7ett70X4sNxtN44hbvFIXCmumq/yuy75QoE9KK/vOQwVc1UjiIbzT863y8v0Pr7 KssBFwDY+nPSzQW6wVdj3XCGJ0qPg5uEyZPqQy5jkAxvajvqzFIdZZhz4QRVBIVv wEqwJJ1p9VT6CWnee+0nHrFuIJFVaKT6QrQXwsDyP4h6VhC39gYA4jBy7hd5W4Xr x7k3Ou2mSVKm6yhQ10FMLTfbEx5X+LHM -----END CERTIFICATE-----Generated at Tue Oct 21 01:38:22 2025 by rpki-client