$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: nFo6V/hjSL+ojqBpWWgcmUjWFBVU0b3wopaQ2GjS6MU= Subject key identifier: 24:E7:DA:60:BE:D0:8F:30:B1:72:18:C7:FE:35:E8:F2:2C:31:D0:FA Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: D9 Signing time: Sun 19 Oct 2025 09:10:54 +0000 Manifest this update: Sun 19 Oct 2025 09:10:54 +0000 Manifest next update: Sun 26 Oct 2025 09:10:54 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: tpkt7+766uPuUNx9hALHWITgTarFu94SewrUekTpkuU=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: B45FE878A9AD11F0961A9A16C4F9AE02.roa (hash: h1D43mkDjU8O4Towelr+Ypv4NL8HA4t7Ft8OdAyajp4=) 5: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 6: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 7: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Oct 19 09:10:54 2025 GMT Not After : Oct 26 09:10:54 2025 GMT Subject: CN=68f4ab1e-5a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:1e:44:9a:9b:56:87:44:d7:ae:51:85:c1: cb:6a:83:ee:c0:a6:c5:b2:e3:c0:fd:03:54:58:78: 33:da:f0:ec:5f:e8:d2:12:19:59:49:e7:c9:bd:36: 36:11:c6:58:46:09:1a:84:42:9d:c4:9c:81:af:c2: da:2d:c9:72:79:bd:85:14:de:07:d6:44:6f:27:77: b6:af:63:54:4a:97:d6:d3:33:03:37:1b:17:62:97: 19:4a:89:01:17:b9:d0:26:c4:b6:2e:3f:4c:7c:12: 23:68:ab:19:94:79:6a:f0:4c:c5:f1:b7:4c:d5:36: f0:e9:45:9c:8c:ec:ec:18:01:47:98:e5:05:0f:92: 9a:80:f9:c5:4b:a2:02:1f:a8:be:56:da:4c:92:53: 8c:46:36:20:a6:69:99:cd:89:ec:d0:a4:ed:f4:9f: 88:33:c0:cb:65:af:3d:14:07:77:6c:f9:2d:e5:eb: b7:28:10:aa:7a:f5:a3:b6:49:e2:97:22:75:cf:4c: aa:46:7d:62:0c:2d:b3:36:03:9e:e0:c8:ce:2c:ff: 94:bd:a3:1d:c7:e2:7d:61:ef:10:d2:c5:04:db:d2: 0d:06:57:f5:d8:95:c3:c8:58:cd:1d:79:42:d0:22: d2:4b:9f:cf:c1:c9:f3:a1:d6:b4:c0:5c:5f:39:37: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:DA:60:BE:D0:8F:30:B1:72:18:C7:FE:35:E8:F2:2C:31:D0:FA X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:84:0f:7a:c2:ef:1d:d3:e3:d2:5f:27:2d:5f:11:8b:80:31: b4:a7:dc:18:f9:18:53:f9:63:c3:68:31:a5:9b:4d:33:98:2d: 55:ad:9a:f8:68:1f:ab:3e:28:fd:71:1a:6f:28:a1:bf:db:fd: c7:38:d2:ca:16:e3:10:bd:10:d5:eb:2a:15:c0:1e:89:64:ee: e1:e7:d5:41:95:93:df:f8:37:5a:52:3d:bb:41:f5:32:28:e1: a0:3a:1f:c6:47:d5:eb:64:9f:ee:62:b1:d6:96:c8:fe:29:20: f7:cd:34:54:29:31:3d:a2:c6:09:49:4e:57:dd:d5:80:65:37: 08:51:8b:85:10:29:cf:e8:56:88:66:01:a2:00:02:6e:ba:6b: c8:d8:da:b0:1d:e7:19:bc:17:15:71:eb:43:57:89:41:5e:e8: a9:36:a1:6a:d9:f9:f0:83:84:6e:c5:63:8b:4b:11:72:bc:58: 33:14:a0:2d:eb:1f:43:7e:be:2f:22:ce:3d:47:7e:78:94:6c: eb:19:f3:7f:5c:0b:11:02:84:09:e0:9c:28:4c:7b:6e:4f:9a: cd:d1:68:e0:7e:54:26:1f:bd:c0:34:b4:3d:0d:80:72:4c:82: c0:ed:02:33:4a:2a:39:6e:12:4a:2d:6a:df:21:ab:d3:f6:cf: 5a:86:ec:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUxMDE5MDkxMDU0WhcNMjUxMDI2MDkxMDU0WjAYMRYwFAYD VQQDEw02OGY0YWIxZS01YThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy54eRJqbVodE165RhcHLaoPuwKbFsuPA/QNUWHgz2vDsX+jSEhlZSefJvTY2 EcZYRgkahEKdxJyBr8LaLclyeb2FFN4H1kRvJ3e2r2NUSpfW0zMDNxsXYpcZSokB F7nQJsS2Lj9MfBIjaKsZlHlq8EzF8bdM1Tbw6UWcjOzsGAFHmOUFD5KagPnFS6IC H6i+VtpMklOMRjYgpmmZzYns0KTt9J+IM8DLZa89FAd3bPkt5eu3KBCqevWjtkni lyJ1z0yqRn1iDC2zNgOe4MjOLP+UvaMdx+J9Ye8Q0sUE29INBlf12JXDyFjNHXlC 0CLSS5/Pwcnzoda0wFxfOTfC+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTn2mC+ 0I8wsXIYx/416PIsMdD6MB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5hA96wu8d0+PSXyctXxGLgDG0p9wY+RhT+WPDaDGlm00zmC1VrZr4 aB+rPij9cRpvKKG/2/3HONLKFuMQvRDV6yoVwB6JZO7h59VBlZPf+DdaUj27QfUy KOGgOh/GR9XrZJ/uYrHWlsj+KSD3zTRUKTE9osYJSU5X3dWAZTcIUYuFECnP6FaI ZgGiAAJuumvI2NqwHecZvBcVcetDV4lBXuipNqFq2fnwg4RuxWOLSxFyvFgzFKAt 6x9Dfr4vIs49R354lGzrGfN/XAsRAoQJ4JwoTHtuT5rN0WjgflQmH73ANLQ9DYBy TILA7QIzSio5bhJKLWrfIavT9s9ahuxv -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:45 2025 by rpki-client