$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: cEONaAbh1Ft/mxnAU6KsFGsZop0Get8ffkdJ5rKPZZQ= Subject key identifier: B5:A1:18:E8:9E:F5:D5:FD:C9:B5:08:53:B4:1A:60:CF:39:34:72:82 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 2816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 2808 Signing time: Sat 18 Oct 2025 15:49:39 +0000 Manifest this update: Sat 18 Oct 2025 15:49:38 +0000 Manifest next update: Sat 25 Oct 2025 15:49:38 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: P8AY9xOSMVA6w1FHcxU3PYuD5/p+vGm9Yt+M3QDuxQ8=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10262 (0x2816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Oct 18 15:49:38 2025 GMT Not After : Oct 25 15:49:38 2025 GMT Subject: CN=68f3b713-be41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:2f:3f:4a:af:63:7c:9a:ec:36:b6:3c:a3: ca:0c:1d:9b:a1:e0:ea:00:89:ef:cf:f7:86:12:e3: 5c:71:4f:a6:db:cc:67:59:3d:3f:9d:bf:f0:51:ba: 3b:f8:c1:11:b5:a8:e7:7d:56:54:26:6f:e0:56:b7: e9:8e:5b:f1:14:81:00:c0:19:05:36:b2:51:fd:03: 98:a4:2d:6a:ab:17:41:21:36:e9:f5:55:c2:23:08: cf:5f:45:12:53:0a:4f:cc:e6:90:a7:02:d7:e9:62: b9:fa:4c:a1:71:c3:5c:0b:4c:10:3d:58:89:12:1c: 4a:1a:61:2f:b3:18:f9:14:20:bf:2e:29:12:cb:be: e9:e8:96:21:7d:07:71:b5:56:ed:47:e2:6f:8e:e4: 05:e0:67:22:a4:99:82:dd:cd:57:14:10:ed:3b:c1: 5f:63:a2:f5:d4:a3:65:cd:32:a2:bc:35:f8:79:2d: 53:3b:64:a4:34:c7:15:5f:5f:c6:99:33:fe:f5:8d: 95:fa:b1:7f:e0:f0:7f:f1:46:7e:20:33:69:4c:ea: cd:4a:c3:ba:aa:c6:b0:5d:91:3e:66:3f:0e:60:32: 54:ef:11:8d:ef:bc:c9:87:a4:3a:57:71:0b:11:82: d9:17:67:57:d6:25:19:73:a2:6b:e1:af:6e:ae:20: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:18:E8:9E:F5:D5:FD:C9:B5:08:53:B4:1A:60:CF:39:34:72:82 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ee:6e:ea:18:11:9a:92:87:89:c6:a9:d1:37:2d:1f:41:04: 4a:90:25:22:44:d2:70:9f:bd:e6:32:8d:dd:73:f5:c9:ce:98: ec:93:54:60:07:49:90:dc:c4:6e:3e:51:2e:b4:2a:70:6e:dc: 2d:79:ee:47:0c:9a:2b:35:82:73:27:b9:ad:c4:e7:1c:5d:f1: 03:d0:4e:89:9c:fc:d9:35:ac:cd:13:3e:ca:1d:78:c2:6c:e5: ee:03:17:51:14:4e:f1:7d:4b:ce:ee:31:f1:b7:d8:7f:d7:6c: 94:65:9f:2f:a9:70:ad:a4:52:aa:4e:d3:15:d2:f3:ef:92:cc: 6c:e3:df:bb:c9:74:ac:e0:8b:51:de:09:e2:8f:50:c4:74:b4: 4f:53:04:73:3e:60:61:b2:ad:ed:5f:9d:7f:3c:f5:2a:ff:e0: dc:f3:f9:d5:ba:07:1b:a0:f2:23:da:0b:f0:e2:2e:7f:68:f0: a8:8e:29:f8:e2:62:fa:7f:a5:a4:dc:bf:85:c6:15:08:d7:25: f6:01:dd:bd:78:10:ff:39:2c:d9:8c:3e:79:fc:5e:11:21:4e: 79:af:f9:3a:78:dc:6b:e5:d6:0d:49:e0:68:b0:51:93:41:97: e9:c9:8e:3b:15:75:b2:1b:69:a4:50:53:d0:af:15:e7:07:f4: 69:cd:9c:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUxMDE4MTU0OTM4WhcNMjUxMDI1MTU0OTM4WjAYMRYwFAYD VQQDEw02OGYzYjcxMy1iZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLIvP0qvY3ya7Da2PKPKDB2boeDqAInvz/eGEuNccU+m28xnWT0/nb/wUbo7 +MERtajnfVZUJm/gVrfpjlvxFIEAwBkFNrJR/QOYpC1qqxdBITbp9VXCIwjPX0US UwpPzOaQpwLX6WK5+kyhccNcC0wQPViJEhxKGmEvsxj5FCC/LikSy77p6JYhfQdx tVbtR+JvjuQF4GcipJmC3c1XFBDtO8FfY6L11KNlzTKivDX4eS1TO2SkNMcVX1/G mTP+9Y2V+rF/4PB/8UZ+IDNpTOrNSsO6qsawXZE+Zj8OYDJU7xGN77zJh6Q6V3EL EYLZF2dX1iUZc6Jr4a9uriDiOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWhGOie 9dX9ybUIU7QaYM85NHKCMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW7m7qGBGakoeJxqnRNy0fQQRKkCUiRNJwn73mMo3dc/XJzpjsk1Rg B0mQ3MRuPlEutCpwbtwtee5HDJorNYJzJ7mtxOccXfED0E6JnPzZNazNEz7KHXjC bOXuAxdRFE7xfUvO7jHxt9h/12yUZZ8vqXCtpFKqTtMV0vPvksxs49+7yXSs4ItR 3gnij1DEdLRPUwRzPmBhsq3tX51/PPUq/+Dc8/nVugcboPIj2gvw4i5/aPCojin4 4mL6f6Wk3L+FxhUI1yX2Ad29eBD/OSzZjD55/F4RIU55r/k6eNxr5dYNSeBosFGT QZfpyY47FXWyG2mkUFPQrxXnB/RpzZyv -----END CERTIFICATE-----Generated at Mon Oct 20 05:42:40 2025 by rpki-client