$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: WNnfyoyPRx1Sjs6I4W0Q31XfMSI+NOjafvToIZXfaVc= Subject key identifier: B3:4A:1E:44:44:77:94:75:A7:A1:F3:67:23:A4:F0:41:38:17:74:27 Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 016D Signing time: Mon 20 Oct 2025 17:12:43 +0000 Manifest this update: Mon 20 Oct 2025 17:12:42 +0000 Manifest next update: Mon 27 Oct 2025 17:12:42 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: l+ov+o6LsBiaU2Lk5Q0wXO0z59EGoMNyqWEllNxariE=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: TReNRUcB9Slmh+4MFPwcv7z0b4ojdmnvbTh9IbkrL54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Oct 20 17:12:42 2025 GMT Not After : Oct 27 17:12:42 2025 GMT Subject: CN=68f66d8b-2a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:42:08:2f:03:d3:50:59:5f:ef:2d:76:64: 02:79:1c:d8:08:aa:97:72:93:f9:34:f1:f5:36:2c: fb:c8:87:ff:3b:f4:71:13:4a:89:65:29:4c:c5:25: c7:1a:74:fb:36:70:1d:78:0b:cb:63:cf:7e:33:1d: ea:62:37:db:33:1a:78:7a:6d:ce:db:12:d0:e4:66: f0:0a:f6:2e:89:74:08:5c:46:a2:54:80:f5:11:c4: 7a:dd:d0:c9:21:44:55:9d:45:58:0f:32:82:92:77: 6b:8f:45:cb:d9:fd:85:38:48:35:ca:13:a5:94:5d: b0:49:9b:e0:ba:d7:38:d6:bb:ff:f3:96:6c:81:39: c5:44:5e:4c:94:e2:91:55:76:19:00:08:73:e9:2f: 27:83:d6:89:99:af:4a:ec:32:7d:cd:f1:20:af:b5: f7:74:f3:fe:e3:90:20:ab:dd:2b:e4:ed:66:b3:13: 3b:9a:36:14:b7:1c:10:86:98:7b:2c:e7:f4:d2:be: 21:fe:65:cc:af:3b:5a:56:7a:1b:ce:9a:17:93:18: 87:39:df:9b:a3:c9:38:82:ed:fe:9e:34:71:be:bc: 3d:3d:8e:86:71:b6:30:45:97:cd:6e:87:fb:dc:c6: 17:25:aa:bd:62:8f:72:2d:1e:44:46:00:c5:52:30: e2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4A:1E:44:44:77:94:75:A7:A1:F3:67:23:A4:F0:41:38:17:74:27 X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:48:92:99:e4:ad:55:24:4a:d8:4a:a4:9b:87:40:fa:ca:25: 0a:c9:c2:2f:b0:9d:08:e3:fb:6d:25:ae:3c:b7:26:61:9a:22: b2:9a:f5:14:52:b3:c2:60:17:86:dc:c5:fb:42:06:60:29:78: 3a:64:db:13:f6:8b:db:64:c4:83:b0:35:27:bc:f1:c8:e6:0c: a7:0b:8e:72:00:50:90:be:36:69:3c:be:a0:81:20:42:e8:cb: fe:8b:d2:54:a2:3f:0a:0d:9e:7e:69:e9:98:b2:b7:c0:0f:75: 45:31:2a:cb:3a:14:1e:17:57:dc:35:63:cd:fa:1f:ba:40:ce: e7:68:29:c8:71:23:2e:97:64:1f:35:b4:9b:ba:bb:7b:a2:2d: 45:ef:06:99:17:50:0d:4f:8c:57:23:31:3c:fc:80:86:b1:01: 23:36:5a:84:a9:95:59:83:0b:a5:43:5f:d9:28:b2:10:2c:ec: 3d:7d:53:03:cd:48:c4:db:10:e7:31:a9:de:f7:36:65:9d:29: aa:51:67:ae:6f:e9:7d:73:46:0c:cc:af:af:a4:ca:aa:e6:97: 86:1a:fd:e0:47:78:b7:13:86:09:9a:9e:67:d0:c8:0f:4d:40: a6:16:7c:50:2d:8c:8e:6e:0b:3e:59:07:a1:01:4f:26:c5:77: 16:e3:34:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjUxMDIwMTcxMjQyWhcNMjUxMDI3MTcxMjQyWjAYMRYwFAYD VQQDEw02OGY2NmQ4Yi0yYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1N1CCC8D01BZX+8tdmQCeRzYCKqXcpP5NPH1Niz7yIf/O/RxE0qJZSlMxSXH GnT7NnAdeAvLY89+Mx3qYjfbMxp4em3O2xLQ5GbwCvYuiXQIXEaiVID1EcR63dDJ IURVnUVYDzKCkndrj0XL2f2FOEg1yhOllF2wSZvgutc41rv/85ZsgTnFRF5MlOKR VXYZAAhz6S8ng9aJma9K7DJ9zfEgr7X3dPP+45Agq90r5O1msxM7mjYUtxwQhph7 LOf00r4h/mXMrztaVnobzpoXkxiHOd+bo8k4gu3+njRxvrw9PY6GcbYwRZfNbof7 3MYXJaq9Yo9yLR5ERgDFUjDiZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNKHkRE d5R1p6HzZyOk8EE4F3QnMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbSJKZ5K1VJErYSqSbh0D6yiUKycIvsJ0I4/ttJa48tyZhmiKymvUU UrPCYBeG3MX7QgZgKXg6ZNsT9ovbZMSDsDUnvPHI5gynC45yAFCQvjZpPL6ggSBC 6Mv+i9JUoj8KDZ5+aemYsrfAD3VFMSrLOhQeF1fcNWPN+h+6QM7naCnIcSMul2Qf NbSburt7oi1F7waZF1ANT4xXIzE8/ICGsQEjNlqEqZVZgwulQ1/ZKLIQLOw9fVMD zUjE2xDnMane9zZlnSmqUWeub+l9c0YMzK+vpMqq5peGGv3gR3i3E4YJmp5n0MgP TUCmFnxQLYyObgs+WQehAU8mxXcW4zQx -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:40 2025 by rpki-client