$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: tdB+jarWEvzbXU1a5ivMmNaJHnbooL1FxuzCoQobtTM= Subject key identifier: 44:39:8A:11:98:72:E6:14:C0:E8:CE:ED:B2:39:D6:28:B8:D2:DA:E5 Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: 0146 Signing time: Sun 19 Oct 2025 07:06:00 +0000 Manifest this update: Sun 19 Oct 2025 07:05:59 +0000 Manifest next update: Sun 26 Oct 2025 07:05:59 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: Ag9JYFX8PmHoZ3YqFFJVlmYJ8QhkHmnhwjOU00HNouw=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Oct 19 07:05:59 2025 GMT Not After : Oct 26 07:05:59 2025 GMT Subject: CN=68f48dd7-a7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:35:69:c7:e6:38:c4:48:95:f0:cc:b1:33:47: 62:97:8f:84:69:26:a4:ba:e6:f1:b3:99:c9:6b:9e: 7a:c8:2f:b2:36:0c:91:d6:c1:73:da:aa:f5:1a:2a: 4e:c2:29:21:d8:8a:7e:e1:49:70:81:ef:7f:fa:66: 19:ec:ff:70:08:18:ec:ee:cc:81:3a:3f:1e:9c:4c: 09:0d:73:8d:2b:b3:61:35:c2:a6:0a:22:75:01:27: fb:5d:52:1e:26:6e:9a:8c:7d:12:bd:e5:38:90:01: b9:9d:f5:62:7b:8b:9d:38:11:c5:74:ec:35:d2:96: 31:ae:16:8d:fd:20:06:3e:6b:4a:cb:8d:37:32:e9: 0f:9f:80:c8:cb:3e:65:c3:7a:04:90:33:62:f2:b9: 8e:9d:e1:f3:63:be:da:5c:c3:f9:75:34:52:af:ba: ce:bd:48:b1:cf:d8:29:ff:23:15:ce:b7:2e:5c:15: 81:3a:0e:83:9e:7a:dd:ec:30:7f:3e:2d:14:87:46: e4:11:61:8f:8f:79:19:cd:71:e4:f0:c5:a2:97:63: e0:bc:e2:32:b9:bd:fc:5b:e0:0d:67:97:d2:1e:b9: 57:07:91:08:6a:18:27:c3:dd:ff:e2:1d:ce:14:6c: 62:de:d7:4e:6d:78:39:88:fc:8c:36:e0:31:c6:1b: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:39:8A:11:98:72:E6:14:C0:E8:CE:ED:B2:39:D6:28:B8:D2:DA:E5 X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:45:0f:af:89:fc:8c:64:5d:5e:75:c0:93:61:6b:b8:93:ec: 5c:10:f5:ef:1d:be:73:6b:46:1b:00:4f:1a:8d:1e:b1:89:3e: 46:44:14:4b:1d:8a:c0:60:1b:5c:aa:e1:52:2d:35:5c:8f:d4: 94:86:47:92:4c:7f:8f:93:01:08:00:48:a2:49:e8:44:da:a2: d9:c0:b4:f6:2e:3f:44:86:b2:f7:02:86:c9:d0:67:9a:f6:58: 7c:e0:92:e3:86:82:d0:bd:4f:72:e6:69:d1:8b:0e:af:b6:67: 6b:6f:3b:61:5c:2c:0e:b9:47:61:af:dc:4d:ad:c7:73:35:e2: 32:2d:80:d1:c3:97:da:8a:f0:62:fc:6e:a4:27:d4:11:43:cc: b1:6b:47:cd:17:83:83:b8:27:8f:80:7c:27:0b:a3:88:4b:cb: 02:5d:17:c9:9c:b0:8f:7a:b4:9d:11:81:6d:47:87:70:ce:c7: 77:1c:59:11:f1:3a:cb:aa:e4:d2:7d:77:02:bd:78:04:0e:72: 55:4e:61:47:54:7d:60:c2:93:23:e0:9a:68:06:b6:9d:4b:fe: 4f:4b:23:23:ff:46:a0:80:99:2e:46:8c:df:7c:eb:c1:85:92: ab:3b:8f:97:5c:a8:c3:ec:35:fe:01:94:d3:c0:cc:95:db:bb: 22:29:9f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjUxMDE5MDcwNTU5WhcNMjUxMDI2MDcwNTU5WjAYMRYwFAYD VQQDEw02OGY0OGRkNy1hN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zVpx+Y4xEiV8MyxM0dil4+EaSakuubxs5nJa556yC+yNgyR1sFz2qr1GipO wikh2Ip+4Ulwge9/+mYZ7P9wCBjs7syBOj8enEwJDXONK7NhNcKmCiJ1ASf7XVIe Jm6ajH0SveU4kAG5nfVie4udOBHFdOw10pYxrhaN/SAGPmtKy403MukPn4DIyz5l w3oEkDNi8rmOneHzY77aXMP5dTRSr7rOvUixz9gp/yMVzrcuXBWBOg6Dnnrd7DB/ Pi0Uh0bkEWGPj3kZzXHk8MWil2PgvOIyub38W+ANZ5fSHrlXB5EIahgnw93/4h3O FGxi3tdObXg5iPyMNuAxxhun1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ5ihGY cuYUwOjO7bI51ii40trlMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5 eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzRQ+vifyMZF1edcCTYWu4k+xcEPXvHb5za0YbAE8ajR6xiT5GRBRL HYrAYBtcquFSLTVcj9SUhkeSTH+PkwEIAEiiSehE2qLZwLT2Lj9EhrL3AobJ0Gea 9lh84JLjhoLQvU9y5mnRiw6vtmdrbzthXCwOuUdhr9xNrcdzNeIyLYDRw5faivBi /G6kJ9QRQ8yxa0fNF4ODuCePgHwnC6OIS8sCXRfJnLCPerSdEYFtR4dwzsd3HFkR 8TrLquTSfXcCvXgEDnJVTmFHVH1gwpMj4JpoBradS/5PSyMj/0aggJkuRozffOvB hZKrO4+XXKjD7DX+AZTTwMyV27siKZ91 -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:17 2025 by rpki-client