$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: 97gCPqW1jM2t7zR745e1vrg1bNl2frIwipnIjfvrW2o= Subject key identifier: 47:A1:BA:4A:1B:2E:8E:39:C6:20:76:BD:32:65:53:2D:96:EE:4C:38 Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 2341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 2332 Signing time: Sat 18 Oct 2025 16:05:18 +0000 Manifest this update: Sat 18 Oct 2025 16:05:17 +0000 Manifest next update: Sat 25 Oct 2025 16:05:17 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: ubeU9vNa7qTJ6P9u7WBGODuNLukluRtYMSFP/N64DZU=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9025 (0x2341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: Oct 18 16:05:17 2025 GMT Not After : Oct 25 16:05:17 2025 GMT Subject: CN=68f3babd-33ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:71:b8:f9:9d:90:54:45:a0:91:45:98:6e: 96:0f:10:8e:bb:af:b7:e9:0d:bf:e2:0b:f6:ac:f0: ec:a6:79:6e:28:79:14:bc:bb:0b:de:4f:ef:17:d2: 7d:41:62:52:73:a7:2f:59:3f:19:99:91:76:bc:a6: ce:6a:07:2c:6e:32:16:d1:25:5a:d7:20:b6:b2:3a: fd:0a:4d:33:32:34:6f:58:71:42:b6:79:02:38:43: 45:76:81:99:11:78:f3:60:e5:d3:b3:89:d0:d6:a7: 58:71:58:9c:54:50:c1:ce:f1:97:9e:13:cf:51:7b: 80:4d:d9:1e:a8:56:bd:21:8b:42:85:89:29:62:c7: 22:bf:48:c1:77:83:8b:fc:9e:43:85:da:03:bc:af: 01:3b:fe:dc:9f:c8:f5:32:98:39:c8:87:04:c7:2c: 37:70:f0:e7:ad:db:6d:b9:7a:43:10:7f:4f:a8:f3: ec:e9:f6:12:6e:4f:f0:01:5e:ec:7c:18:db:8c:14: 21:e5:90:18:56:26:d2:3a:24:55:3a:bb:74:b0:4e: d7:e0:f3:ff:f8:53:ad:5c:7e:51:61:3d:a3:24:0c: 32:ec:08:ed:eb:92:2a:62:5d:b0:5f:df:55:57:a4: c2:bf:b0:a8:94:a4:b3:6b:f2:32:ed:38:f6:a9:09: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:BA:4A:1B:2E:8E:39:C6:20:76:BD:32:65:53:2D:96:EE:4C:38 X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:65:d0:05:65:fb:15:45:2a:79:86:87:a7:44:ea:cf:c3:64: 31:29:b2:70:5b:6e:bc:25:88:0d:a8:7d:40:32:8a:c1:ef:22: a1:55:f5:65:c9:7f:bd:48:cc:4f:6f:af:f3:79:88:3a:ba:b2: d9:6f:d3:79:06:4f:2a:03:1d:8c:62:e2:e1:d4:00:2a:77:13: 22:76:00:26:3e:3e:58:83:0c:e5:26:6f:d6:06:d0:35:92:a0: 3a:21:cf:b6:2e:62:b5:00:6c:b6:99:c1:da:0a:59:69:06:31: d4:76:ba:e8:14:d3:74:8d:38:40:0c:11:86:ec:d3:f9:5f:4e: fa:f4:ae:85:8b:d7:7d:aa:68:fa:8d:f1:4b:19:d8:d6:d7:d0: 9d:e3:45:2a:55:e4:e4:4b:f6:12:e8:d1:b8:3c:a4:a2:3c:fa: aa:29:a2:16:6b:05:9b:57:d4:4f:be:da:60:8b:27:d8:3e:1f: 3d:46:05:c7:bb:a9:a8:a6:50:d4:bc:49:51:9c:02:d5:43:85: b4:08:5b:60:cf:f9:5a:72:83:70:3e:4c:ff:d9:63:d3:d4:6e: ea:cb:cf:c7:db:e1:27:63:90:13:8a:4b:30:03:ca:21:50:6c: f4:1f:3f:c8:8e:07:89:56:9d:7e:3f:32:87:89:db:53:74:fb: cc:7f:6e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjUxMDE4MTYwNTE3WhcNMjUxMDI1MTYwNTE3WjAYMRYwFAYD VQQDEw02OGYzYmFiZC0zM2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq1xuPmdkFRFoJFFmG6WDxCOu6+36Q2/4gv2rPDspnluKHkUvLsL3k/vF9J9 QWJSc6cvWT8ZmZF2vKbOagcsbjIW0SVa1yC2sjr9Ck0zMjRvWHFCtnkCOENFdoGZ EXjzYOXTs4nQ1qdYcVicVFDBzvGXnhPPUXuATdkeqFa9IYtChYkpYsciv0jBd4OL /J5DhdoDvK8BO/7cn8j1Mpg5yIcExyw3cPDnrdttuXpDEH9PqPPs6fYSbk/wAV7s fBjbjBQh5ZAYVibSOiRVOrt0sE7X4PP/+FOtXH5RYT2jJAwy7Ajt65IqYl2wX99V V6TCv7ColKSza/Iy7Tj2qQkERwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEehukob Lo45xiB2vTJlUy2W7kw4MB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLZdAFZfsVRSp5hoenROrPw2QxKbJwW268JYgNqH1AMorB7yKhVfVl yX+9SMxPb6/zeYg6urLZb9N5Bk8qAx2MYuLh1AAqdxMidgAmPj5YgwzlJm/WBtA1 kqA6Ic+2LmK1AGy2mcHaCllpBjHUdrroFNN0jThADBGG7NP5X0769K6Fi9d9qmj6 jfFLGdjW19Cd40UqVeTkS/YS6NG4PKSiPPqqKaIWawWbV9RPvtpgiyfYPh89RgXH u6moplDUvElRnALVQ4W0CFtgz/lacoNwPkz/2WPT1G7qy8/H2+EnY5ATikswA8oh UGz0Hz/IjgeJVp1+PzKHidtTdPvMf26r -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:40 2025 by rpki-client