$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: jqXSuO7hlINRsF5nqWzIUXqNtxpixn6I95lpiux5pvw= Subject key identifier: F8:DD:BE:36:7F:17:A0:22:C7:16:36:52:35:A0:E4:4C:CD:7A:E4:68 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 0159 Signing time: Sun 19 Oct 2025 06:51:03 +0000 Manifest this update: Sun 19 Oct 2025 06:51:03 +0000 Manifest next update: Sun 26 Oct 2025 06:51:02 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: NjFNAES+58MvosSKL0UMzdC9dBK4izPZrfze2T1jdDs=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Oct 19 06:51:03 2025 GMT Not After : Oct 26 06:51:02 2025 GMT Subject: CN=68f48a57-c1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:b5:c0:33:6d:e9:12:0f:29:11:8c:e9:c6: 18:36:8d:02:b8:89:19:e6:d4:f7:7c:38:b3:e3:be: e3:a6:88:68:73:12:09:fa:cb:15:ab:9d:f2:4e:b4: 0d:cc:00:8d:1e:88:39:16:5e:74:f6:7a:9b:f0:6f: 6b:b1:ab:33:fa:bd:f2:76:fe:96:eb:a8:77:9d:0a: 62:7f:8c:fb:d4:ea:6f:b1:16:78:0a:c4:e8:6c:c0: d2:bb:ff:57:78:0e:5f:b0:eb:ef:de:89:71:29:b8: 9a:1d:46:bf:5b:b4:40:b4:70:d7:88:d7:11:d1:70: be:1a:bd:f8:3e:1a:bc:53:69:25:90:72:15:09:e9: b6:fb:4b:4a:d7:d0:bf:6a:23:ed:6d:e9:2e:16:c3: df:83:9d:60:1f:8e:c1:cd:b2:9e:5e:53:d0:d6:1f: 3e:d7:e6:9b:6b:71:05:c9:eb:d8:51:5f:30:ed:75: 43:61:f2:47:85:59:1d:fb:8f:f4:62:0b:2a:fa:76: 08:e0:b8:9a:04:19:e1:70:7b:f5:08:5f:32:ae:f8: f3:fc:92:71:70:2c:a3:b8:63:98:b2:40:1e:74:38: 21:36:6f:70:1b:42:0f:bc:01:ba:da:26:b8:cc:7e: 5b:a2:e7:c9:ca:c9:26:a1:39:05:3c:71:1e:3d:3a: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DD:BE:36:7F:17:A0:22:C7:16:36:52:35:A0:E4:4C:CD:7A:E4:68 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6c:8c:58:a6:c1:15:9a:b1:30:04:6a:fc:cd:77:dd:56:b3: 94:ba:6a:1c:b9:a3:07:a9:04:ec:c8:2d:9b:4f:8a:94:a0:3c: a5:eb:ad:68:9e:57:97:b1:3e:e9:5c:3c:2b:eb:2a:04:c2:46: 95:9c:16:a2:d6:81:6a:d7:29:d4:d5:83:87:55:8d:f4:91:d3: a5:ee:98:f9:05:86:01:43:24:fa:92:4c:bf:0b:b9:1c:74:62: a9:65:c7:32:bc:ce:dd:0e:64:be:e1:d6:0c:87:7a:f2:c6:47: 41:5f:c5:f0:2a:bf:aa:9c:7a:f6:68:43:f8:35:21:8a:29:79: 56:1f:a8:8a:fa:03:0b:fd:c5:2b:40:a2:27:cc:80:31:db:95: bb:97:3c:d0:0a:c5:36:57:44:3f:96:52:7d:4e:dc:9d:c0:e5: 34:20:c5:9c:e0:e4:42:00:ea:fc:5a:19:47:d5:af:a5:24:54: 85:61:d0:8b:c6:55:f4:7f:79:38:11:7c:d4:43:c9:53:de:5c: 37:b5:d5:f8:1f:3c:a5:f9:fd:b8:51:e9:35:39:f0:17:94:0b: ae:4a:01:f6:b5:24:e5:03:0b:aa:ae:e5:48:ce:9c:3c:65:dc: 7c:f8:2d:dd:88:6e:16:91:e0:cd:5f:63:da:94:59:12:48:08: 92:3d:6b:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUxMDE5MDY1MTAzWhcNMjUxMDI2MDY1MTAyWjAYMRYwFAYD VQQDEw02OGY0OGE1Ny1jMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5e1wDNt6RIPKRGM6cYYNo0CuIkZ5tT3fDiz477jpohocxIJ+ssVq53yTrQN zACNHog5Fl509nqb8G9rsasz+r3ydv6W66h3nQpif4z71OpvsRZ4CsTobMDSu/9X eA5fsOvv3olxKbiaHUa/W7RAtHDXiNcR0XC+Gr34Phq8U2klkHIVCem2+0tK19C/ aiPtbekuFsPfg51gH47BzbKeXlPQ1h8+1+aba3EFyevYUV8w7XVDYfJHhVkd+4/0 Ygsq+nYI4LiaBBnhcHv1CF8yrvjz/JJxcCyjuGOYskAedDghNm9wG0IPvAG62ia4 zH5boufJyskmoTkFPHEePToz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjdvjZ/ F6AixxY2UjWg5EzNeuRoMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASbIxYpsEVmrEwBGr8zXfdVrOUumocuaMHqQTsyC2bT4qUoDyl661o nleXsT7pXDwr6yoEwkaVnBai1oFq1ynU1YOHVY30kdOl7pj5BYYBQyT6kky/C7kc dGKpZccyvM7dDmS+4dYMh3ryxkdBX8XwKr+qnHr2aEP4NSGKKXlWH6iK+gML/cUr QKInzIAx25W7lzzQCsU2V0Q/llJ9TtydwOU0IMWc4ORCAOr8WhlH1a+lJFSFYdCL xlX0f3k4EXzUQ8lT3lw3tdX4Hzyl+f24Uek1OfAXlAuuSgH2tSTlAwuqruVIzpw8 Zdx8+C3diG4WkeDNX2PalFkSSAiSPWuF -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:39 2025 by rpki-client