$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: xmD3mtYYuMMXhXokPFAHB+VIw5FSFWE/n5Vw6XYQF1w= Subject key identifier: 03:7E:F7:5D:4D:F2:07:F8:18:2C:2B:4E:35:60:84:C8:1B:94:DB:08 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: F5 Signing time: Sun 19 Oct 2025 08:11:15 +0000 Manifest this update: Sun 19 Oct 2025 08:11:14 +0000 Manifest next update: Sun 26 Oct 2025 08:11:14 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: RpoQE4gRM18qCzU4QrrWRssUMkoXJy0ux1uTzyQeAVE=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Oct 19 08:11:14 2025 GMT Not After : Oct 26 08:11:14 2025 GMT Subject: CN=68f49d23-3298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:62:bb:a4:8a:f9:7f:c5:39:0b:ca:26:bb: b3:80:a8:5f:40:98:22:4f:f6:2c:cd:e0:68:61:c6: 02:e4:da:dd:72:cf:33:ec:d4:13:b7:95:0c:ec:5a: 64:63:64:84:b1:7f:e5:36:89:63:09:58:a7:a7:47: cc:e0:05:8d:e4:2a:ee:0f:6d:c7:a4:97:e7:dd:d6: d7:3e:d4:a1:ba:df:7f:54:89:02:64:df:0a:8d:50: fd:c3:b4:d9:a0:00:bb:49:c8:8c:f4:cb:0f:ff:c2: 9a:53:e9:ff:58:c1:b0:1e:d1:f9:f0:7d:14:27:80: fd:bb:91:b6:67:44:cd:39:a7:92:1a:e5:25:2b:9e: ab:99:3c:91:42:32:59:f8:58:64:fc:c7:8b:91:77: 2e:69:6f:4c:5f:29:6e:b8:a3:51:d3:9a:8c:12:4b: 5d:ab:63:23:04:62:6a:db:df:0c:1a:96:3c:cf:10: 0e:b0:ef:f2:cc:3d:c3:51:cf:8f:23:0d:3d:78:32: 0b:ad:35:0c:92:5e:e2:8a:57:e1:99:fb:d1:35:22: f0:64:32:95:f0:b7:45:51:91:61:b8:a6:3e:e2:97: 6e:f6:76:97:2f:22:63:6b:fe:87:5a:18:3f:62:c5: 61:bd:25:c2:e4:a6:00:5f:b8:69:3b:53:9c:2b:2f: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:F7:5D:4D:F2:07:F8:18:2C:2B:4E:35:60:84:C8:1B:94:DB:08 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:b2:56:85:da:e5:2e:8e:ca:a5:c1:72:62:ad:51:33:9d: 3e:e1:c4:6d:16:bf:0c:37:51:18:20:bd:cf:65:2e:92:bd:54: 51:2f:2b:a7:ea:ab:74:00:ec:d0:16:e4:7c:2b:b8:64:a8:20: bd:8d:cc:64:59:b0:dc:66:c8:73:29:eb:9b:17:b3:9d:3b:9b: db:0e:81:a2:a1:e1:f0:11:97:ca:64:29:0c:25:2b:2b:e5:c7: bf:9c:fa:fa:d3:1b:88:11:cb:72:1b:41:1b:cf:48:f7:df:92: dc:85:9c:15:13:76:13:f9:c6:e1:0a:09:e0:94:86:08:40:d2: 82:04:8e:72:56:79:ec:46:08:23:34:51:c1:49:cc:2e:9a:97: 31:2b:f4:79:49:7e:91:27:44:dc:fe:b0:df:c5:bc:f8:93:32: 19:bd:77:c3:98:16:16:3c:36:45:a3:29:88:9e:f5:72:18:65: 65:6f:83:c9:dc:0e:57:64:86:fc:76:3d:cc:e1:98:b7:e8:0c: 83:30:c2:f2:78:56:e5:1f:3e:7d:eb:b4:86:14:66:77:c9:33: 97:ba:b0:b5:d6:94:39:c9:0c:7f:61:fc:44:4b:eb:76:95:2e: fb:75:3c:05:f1:30:86:87:c8:68:76:e7:ba:cf:f1:20:cd:cc: 79:3b:fb:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUxMDE5MDgxMTE0WhcNMjUxMDI2MDgxMTE0WjAYMRYwFAYD VQQDEw02OGY0OWQyMy0zMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA351iu6SK+X/FOQvKJruzgKhfQJgiT/YszeBoYcYC5Nrdcs8z7NQTt5UM7Fpk Y2SEsX/lNoljCVinp0fM4AWN5CruD23HpJfn3dbXPtShut9/VIkCZN8KjVD9w7TZ oAC7SciM9MsP/8KaU+n/WMGwHtH58H0UJ4D9u5G2Z0TNOaeSGuUlK56rmTyRQjJZ +Fhk/MeLkXcuaW9MXyluuKNR05qMEktdq2MjBGJq298MGpY8zxAOsO/yzD3DUc+P Iw09eDILrTUMkl7iilfhmfvRNSLwZDKV8LdFUZFhuKY+4pdu9naXLyJja/6HWhg/ YsVhvSXC5KYAX7hpO1OcKy+YdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN+911N 8gf4GCwrTjVghMgblNsIMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDVbJWhdrlLo7KpcFyYq1RM50+4cRtFr8MN1EYIL3PZS6SvVRRLyun 6qt0AOzQFuR8K7hkqCC9jcxkWbDcZshzKeubF7OdO5vbDoGioeHwEZfKZCkMJSsr 5ce/nPr60xuIEctyG0Ebz0j335LchZwVE3YT+cbhCgnglIYIQNKCBI5yVnnsRggj NFHBScwumpcxK/R5SX6RJ0Tc/rDfxbz4kzIZvXfDmBYWPDZFoymInvVyGGVlb4PJ 3A5XZIb8dj3M4Zi36AyDMMLyeFblHz5967SGFGZ3yTOXurC11pQ5yQx/YfxES+t2 lS77dTwF8TCGh8hodue6z/Egzcx5O/uR -----END CERTIFICATE-----Generated at Mon Oct 20 01:42:47 2025 by rpki-client