$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: Xxo0cpSCIQIOLyMq4QyW0vdwPAvSnh8fz8TnLCv+IMc= Subject key identifier: 5F:A6:54:46:48:BA:C9:F4:86:A7:AD:35:44:44:2F:2B:93:31:F3:38 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0288 Signing time: Sun 19 Oct 2025 03:49:16 +0000 Manifest this update: Sun 19 Oct 2025 03:49:15 +0000 Manifest next update: Sun 26 Oct 2025 03:49:15 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: YsD38KdIP+sJ9z4fdvFVnHBFvLW4IQJpdKdX1Ua7HvE=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Oct 19 03:49:15 2025 GMT Not After : Oct 26 03:49:15 2025 GMT Subject: CN=68f45fbb-5fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:c1:b5:30:2e:62:74:2d:49:ec:72:3d:45: 3a:74:ad:43:2f:33:78:11:a2:95:73:5f:61:7b:34: cf:80:e3:52:63:4b:6d:08:67:03:ba:88:19:72:12: c8:37:89:3e:c2:82:68:6c:76:c7:4f:a4:17:ed:7d: 13:3d:57:99:de:d6:41:3a:7a:83:40:0e:c1:59:b3: 1a:f4:9f:2c:7b:93:32:58:8a:57:48:d4:c0:46:aa: 09:9b:e5:74:4e:b4:69:23:41:86:a2:a6:74:ca:36: 29:6e:de:d5:f3:be:73:8d:cd:2b:db:1d:3c:38:f7: 74:de:f4:aa:79:53:82:3f:e9:08:72:aa:36:a9:80: 65:91:a9:04:4a:f6:5b:fb:1d:18:72:2d:16:08:0c: 61:f7:4e:32:ae:94:cc:85:5f:69:59:0e:9a:ac:2d: 2b:84:6c:cf:32:c8:b9:05:64:37:6f:c5:f9:09:37: 9e:f5:2f:5c:6e:be:14:f4:e1:e7:ed:36:b9:29:22: 94:8c:5d:31:4e:47:16:73:39:50:14:df:84:c6:58: 95:78:44:06:d0:e8:2b:01:0c:ac:59:0b:66:98:60: 05:f3:85:10:a8:eb:60:12:eb:e5:34:10:2f:9a:37: 80:45:78:4f:be:13:37:ba:ca:05:6b:1e:56:24:36: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:54:46:48:BA:C9:F4:86:A7:AD:35:44:44:2F:2B:93:31:F3:38 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f1:4e:c3:bb:21:9b:13:42:da:32:1e:d5:85:ac:e1:5b:9a: ba:f4:11:f4:79:e6:67:eb:50:14:b7:20:4a:7e:53:bd:cd:00: fd:2f:9a:9a:9d:67:66:e3:e6:ce:b7:f8:0a:62:f6:ea:e9:e5: 15:48:3d:af:85:2f:4e:29:75:9f:10:f0:62:b3:b0:78:3b:fa: 4c:99:42:72:74:61:16:9b:a2:7c:85:df:5f:94:18:ed:0a:db: 69:13:a8:0d:e0:93:22:64:92:ab:05:28:1b:3b:67:1b:c1:ef: 26:ca:d9:51:76:3b:2a:56:60:27:88:c7:c9:63:7a:75:98:6f: 73:55:23:18:f5:ec:5b:32:79:08:e7:91:0e:f2:55:5b:4f:53: 78:45:55:e3:ec:62:28:38:10:a2:0a:ab:65:d9:f1:bb:ee:c6: 86:7f:f0:e4:6a:57:0e:f4:ce:11:a6:13:21:51:ec:cd:62:9c: 76:d5:43:15:4a:f2:0a:d4:c4:e1:13:03:c8:04:c4:98:c9:4c: 52:08:4c:be:1b:0f:36:cc:0d:bd:64:17:4d:6c:3b:10:64:08: 4e:6f:7c:db:7b:da:5a:f3:c4:fe:4e:b3:3f:3f:e1:6b:9b:78: e7:98:2e:8c:5b:7a:77:2a:3b:7e:0d:84:6f:24:51:83:33:59: 21:7f:7b:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUxMDE5MDM0OTE1WhcNMjUxMDI2MDM0OTE1WjAYMRYwFAYD VQQDEw02OGY0NWZiYi01ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YTBtTAuYnQtSexyPUU6dK1DLzN4EaKVc19hezTPgONSY0ttCGcDuogZchLI N4k+woJobHbHT6QX7X0TPVeZ3tZBOnqDQA7BWbMa9J8se5MyWIpXSNTARqoJm+V0 TrRpI0GGoqZ0yjYpbt7V875zjc0r2x08OPd03vSqeVOCP+kIcqo2qYBlkakESvZb +x0Yci0WCAxh904yrpTMhV9pWQ6arC0rhGzPMsi5BWQ3b8X5CTee9S9cbr4U9OHn 7Ta5KSKUjF0xTkcWczlQFN+ExliVeEQG0OgrAQysWQtmmGAF84UQqOtgEuvlNBAv mjeARXhPvhM3usoFax5WJDaalQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+mVEZI usn0hqetNURELyuTMfM4MB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf8U7DuyGbE0LaMh7VhazhW5q69BH0eeZn61AUtyBKflO9zQD9L5qa nWdm4+bOt/gKYvbq6eUVSD2vhS9OKXWfEPBis7B4O/pMmUJydGEWm6J8hd9flBjt CttpE6gN4JMiZJKrBSgbO2cbwe8mytlRdjsqVmAniMfJY3p1mG9zVSMY9exbMnkI 55EO8lVbT1N4RVXj7GIoOBCiCqtl2fG77saGf/DkalcO9M4RphMhUezNYpx21UMV SvIK1MThEwPIBMSYyUxSCEy+Gw82zA29ZBdNbDsQZAhOb3zbe9pa88T+TrM/P+Fr m3jnmC6MW3p3Kjt+DYRvJFGDM1khf3vY -----END CERTIFICATE-----Generated at Mon Oct 20 05:44:48 2025 by rpki-client