$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: vtNjaBtk/RQEmgItnvoLJr7hFh5T6smrTxMM12zWCSw= Subject key identifier: C5:88:3F:11:F6:0D:C2:DF:02:58:DB:4E:63:38:BD:61:22:99:8E:90 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1AF7 Signing time: Sat 18 Oct 2025 16:39:10 +0000 Manifest this update: Sat 18 Oct 2025 16:39:10 +0000 Manifest next update: Sat 25 Oct 2025 16:39:10 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: fdS2kI+kbx9euBrgCPkW2Rz4TX8UgXtRyACLzqdjM30=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: KiWJOvCe66mFAiJ0qYL+AaD4VB+ASk4GdSBTzbRbNlw=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6952 (0x1b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Oct 18 16:39:10 2025 GMT Not After : Oct 25 16:39:10 2025 GMT Subject: CN=68f3c2ae-ae05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:80:51:70:24:27:e1:ff:f8:2e:d4:d2:59: 2e:df:ac:8e:68:14:b5:31:74:48:3e:9c:9e:90:24: c4:d4:8e:66:cf:1c:b8:b7:a7:24:b0:fc:3e:67:e4: 3c:01:f1:68:06:d2:2f:29:93:37:47:58:6f:b8:88: c0:89:e9:74:29:61:7d:76:cc:90:ac:e0:e4:18:06: 6f:59:b6:5b:70:33:c3:71:24:39:4d:53:6f:03:f6: ba:0b:43:57:c7:e5:c9:72:41:0b:1a:d1:91:ef:df: a4:c7:fb:9c:9c:e6:43:1a:3a:2b:7b:2a:13:ec:49: 11:5c:df:16:8f:7f:9d:80:43:e3:17:e0:9f:88:ac: ea:3e:35:08:2e:94:37:3b:b0:e4:9e:e5:5d:57:c2: 4c:1d:93:09:70:8d:47:ae:e1:96:9d:50:2d:c2:61: 4c:f7:a3:1f:9b:23:76:86:0a:56:48:e7:f5:31:04: 6a:fb:63:a8:2d:1a:ce:69:46:70:8f:68:4c:9f:2e: f7:00:59:6b:58:6c:f4:eb:dd:65:ee:4e:22:d2:86: c2:08:87:85:04:a0:40:11:d5:3f:40:e4:16:a1:0b: 5e:72:df:dd:23:f3:b5:f9:a1:14:01:b1:2d:d4:6d: 4b:dc:f2:ee:12:b2:8d:54:c1:d8:1c:38:9c:fb:73: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:3F:11:F6:0D:C2:DF:02:58:DB:4E:63:38:BD:61:22:99:8E:90 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fe:2c:5f:52:af:47:25:1d:4b:59:20:00:22:14:1e:48:19: 1e:d9:e3:f9:06:29:38:f7:7d:05:c1:d3:f7:d9:77:5d:e4:ab: 28:b2:51:e8:7e:f1:c6:09:17:e0:9e:e8:b8:44:71:96:b8:78: ce:7e:bc:40:ea:72:74:13:9d:1b:8e:7f:71:64:ee:79:c0:b9: 02:a1:5b:d9:97:50:9b:fd:55:36:10:49:cd:11:10:7b:82:7d: 52:c4:16:18:95:55:79:71:88:a5:ca:07:31:ef:05:e9:05:11: 9e:a5:fe:4a:ca:37:66:b7:b4:67:9b:d2:53:1e:80:0a:0c:7b: de:24:c4:6a:2b:5c:4f:a5:02:eb:5d:7f:56:a8:87:89:18:7c: 4c:15:52:f3:7f:de:a3:72:e5:d4:15:54:5f:77:7c:d3:e1:04: 9d:9f:ec:25:6c:7c:1a:37:62:58:b6:20:6b:60:9c:f3:ea:cf: e2:ad:d5:44:e3:2d:1d:f6:fe:50:02:e6:53:dd:f5:b3:f1:24: c4:cd:18:1f:b7:2f:e8:87:04:1b:0d:af:42:ec:25:db:07:9c: 47:94:44:ad:ec:61:ef:0f:98:78:52:ff:72:17:dd:78:88:aa: 52:da:98:94:5b:81:39:02:9d:b3:21:2a:3b:c4:9c:ed:f3:0c: 55:3a:dd:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUxMDE4MTYzOTEwWhcNMjUxMDI1MTYzOTEwWjAYMRYwFAYD VQQDEw02OGYzYzJhZS1hZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6mAUXAkJ+H/+C7U0lku36yOaBS1MXRIPpyekCTE1I5mzxy4t6cksPw+Z+Q8 AfFoBtIvKZM3R1hvuIjAiel0KWF9dsyQrODkGAZvWbZbcDPDcSQ5TVNvA/a6C0NX x+XJckELGtGR79+kx/ucnOZDGjoreyoT7EkRXN8Wj3+dgEPjF+CfiKzqPjUILpQ3 O7DknuVdV8JMHZMJcI1HruGWnVAtwmFM96MfmyN2hgpWSOf1MQRq+2OoLRrOaUZw j2hMny73AFlrWGz0691l7k4i0obCCIeFBKBAEdU/QOQWoQtect/dI/O1+aEUAbEt 1G1L3PLuErKNVMHYHDic+3OJ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWIPxH2 DcLfAljbTmM4vWEimY6QMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA/ixfUq9HJR1LWSAAIhQeSBke2eP5Bik4930FwdP32Xdd5KsoslHo fvHGCRfgnui4RHGWuHjOfrxA6nJ0E50bjn9xZO55wLkCoVvZl1Cb/VU2EEnNERB7 gn1SxBYYlVV5cYilygcx7wXpBRGepf5Kyjdmt7Rnm9JTHoAKDHveJMRqK1xPpQLr XX9WqIeJGHxMFVLzf96jcuXUFVRfd3zT4QSdn+wlbHwaN2JYtiBrYJzz6s/irdVE 4y0d9v5QAuZT3fWz8STEzRgfty/ohwQbDa9C7CXbB5xHlESt7GHvD5h4Uv9yF914 iKpS2piUW4E5Ap2zISo7xJzt8wxVOt1Z -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:00 2025 by rpki-client