$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: ZhC8L5UQiLjpao2PO6o7j8EjWot9oat92G1Hp6fNK40= Subject key identifier: C0:83:1B:F4:BF:D0:DB:CD:F6:D3:1D:0A:E1:CE:86:E4:F4:E5:9B:FA Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2DC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DA1 Signing time: Sat 18 Oct 2025 15:42:17 +0000 Manifest this update: Sat 18 Oct 2025 15:42:16 +0000 Manifest next update: Sat 25 Oct 2025 15:42:16 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: vBYIBRz5IdJ8Q6E0jixWFUsqiWskE55tFGn1ju991Vs=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11715 (0x2dc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Oct 18 15:42:16 2025 GMT Not After : Oct 25 15:42:16 2025 GMT Subject: CN=68f3b558-a2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:06:c5:0b:16:5d:9a:68:55:7c:32:88:63:91: f2:10:2b:77:9c:0d:00:a6:6c:b0:67:7c:7e:dc:c5: 04:4d:69:da:7c:0c:94:0e:d3:b9:29:29:bd:bc:75: da:35:08:eb:9d:d1:9d:fa:7a:79:96:68:f2:1b:88: 29:21:da:7a:2d:68:83:7e:7f:65:0c:33:5f:17:b9: 19:c7:86:d2:12:fa:24:6b:df:8b:5a:eb:e8:49:99: f6:73:8b:9f:5b:ab:61:dc:3b:89:1c:05:f0:f7:dc: 40:6b:8e:41:d5:31:36:1f:42:63:0a:79:93:2e:0e: 68:ca:42:f7:51:1d:40:7f:58:df:62:75:8b:45:a4: 36:87:e6:f0:a2:b7:f5:88:47:16:61:a5:26:4a:95: 1b:b4:d8:87:65:c7:04:37:33:69:54:7a:a2:f2:90: 05:ff:8d:4b:c0:59:4e:f8:a7:a4:ce:05:e5:92:28: 2d:2e:e1:1e:30:cc:45:4b:78:d5:e1:89:a2:2b:2d: 18:70:cb:83:a6:13:69:e4:c2:04:97:19:05:9d:df: a6:22:2a:b5:da:50:c3:5e:24:df:23:bc:2c:56:10: c5:7e:2e:23:47:37:07:1e:ce:16:95:93:c2:fe:91: 4e:ac:1d:63:25:ad:7a:fb:41:62:e1:92:d8:7c:b3: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:1B:F4:BF:D0:DB:CD:F6:D3:1D:0A:E1:CE:86:E4:F4:E5:9B:FA X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:48:74:36:ef:42:fb:8b:24:22:f0:af:9a:76:f0:23:79:c4: 51:d5:c5:8d:35:1c:87:2a:05:65:38:b4:a1:97:20:a3:43:d1: 08:90:f4:73:6b:a8:3c:09:02:f5:e9:68:60:d8:3f:6a:87:c8: e8:a0:2b:fc:44:67:9c:8f:4b:df:2f:81:a5:1e:e0:0f:96:2f: 3a:49:a2:88:f1:f2:8e:0a:89:07:02:1d:ae:76:2a:9b:3e:c7: 1a:3e:9d:17:9d:1d:4a:bd:8d:f5:85:d4:0b:9d:38:81:67:6f: 2b:e0:83:2b:c3:fb:7d:3c:9e:36:52:b7:79:9d:26:f0:c7:49: c0:a5:6e:c2:43:c6:9f:e0:dd:5e:f3:5e:58:c6:a0:6f:f0:bc: 03:f8:c4:f0:ae:4e:28:c5:3d:25:10:db:a5:0f:e1:e7:d5:1c: 95:1c:2c:7c:99:06:85:13:a8:4d:9d:eb:f8:8c:d0:83:41:6a: 01:03:43:ee:ee:5a:ce:79:ec:7f:82:a0:86:a5:d8:bf:a5:5a: c7:60:97:26:35:56:7b:94:3f:08:7d:e8:95:f4:d3:0e:ba:12: 69:f5:1b:65:cb:a8:66:80:ae:ed:2d:13:39:a3:66:b4:bc:59: 21:90:07:a7:a0:b3:dc:b9:17:31:70:f5:ab:bc:c5:8b:2a:0b: a1:32:86:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUxMDE4MTU0MjE2WhcNMjUxMDI1MTU0MjE2WjAYMRYwFAYD VQQDEw02OGYzYjU1OC1hMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wbFCxZdmmhVfDKIY5HyECt3nA0ApmywZ3x+3MUETWnafAyUDtO5KSm9vHXa NQjrndGd+np5lmjyG4gpIdp6LWiDfn9lDDNfF7kZx4bSEvoka9+LWuvoSZn2c4uf W6th3DuJHAXw99xAa45B1TE2H0JjCnmTLg5oykL3UR1Af1jfYnWLRaQ2h+bworf1 iEcWYaUmSpUbtNiHZccENzNpVHqi8pAF/41LwFlO+KekzgXlkigtLuEeMMxFS3jV 4YmiKy0YcMuDphNp5MIElxkFnd+mIiq12lDDXiTfI7wsVhDFfi4jRzcHHs4WlZPC /pFOrB1jJa16+0Fi4ZLYfLOX5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCDG/S/ 0NvN9tMdCuHOhuT05Zv6MB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjSHQ270L7iyQi8K+advAjecRR1cWNNRyHKgVlOLShlyCjQ9EIkPRz a6g8CQL16Whg2D9qh8jooCv8RGecj0vfL4GlHuAPli86SaKI8fKOCokHAh2udiqb PscaPp0XnR1KvY31hdQLnTiBZ28r4IMrw/t9PJ42Urd5nSbwx0nApW7CQ8af4N1e 815YxqBv8LwD+MTwrk4oxT0lENulD+Hn1RyVHCx8mQaFE6hNnev4jNCDQWoBA0Pu 7lrOeex/gqCGpdi/pVrHYJcmNVZ7lD8IfeiV9NMOuhJp9Rtly6hmgK7tLRM5o2a0 vFkhkAenoLPcuRcxcPWrvMWLKguhMobw -----END CERTIFICATE-----Generated at Mon Oct 20 05:53:14 2025 by rpki-client