$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: 4msV4eLcOuOyqrOy10RHB2RiyV/3jiHjwUCRhKVAYhM= Subject key identifier: 79:E0:5D:EF:E9:42:D1:94:FC:E9:C8:32:80:8A:8B:B2:67:DC:8E:B3 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D52 Signing time: Sat 18 Oct 2025 16:26:36 +0000 Manifest this update: Sat 18 Oct 2025 16:26:36 +0000 Manifest next update: Sat 25 Oct 2025 16:26:36 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: WKRgWgPpGuEttPcieBxeOrkw5mxxwZu70qOMRNW4ZaY=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7519 (0x1d5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Oct 18 16:26:36 2025 GMT Not After : Oct 25 16:26:36 2025 GMT Subject: CN=68f3bfbc-b3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:a1:d0:60:b9:79:44:77:b0:89:a1:8b:5f: 3b:b8:72:35:72:26:12:87:42:e3:dc:fa:95:db:71: e7:27:23:b5:2a:cd:0d:36:70:5f:0d:61:db:2e:9e: d5:d6:e6:56:6e:62:5b:80:21:44:79:b9:ff:e5:83: 2f:29:8a:39:7f:fa:53:3e:16:06:91:26:b5:9c:bb: ee:b4:6a:2b:4c:fa:d8:91:d6:fe:20:65:f7:b9:e9: ed:2a:e5:97:d9:d0:85:af:2d:19:28:84:31:24:4c: 48:ef:8a:2c:2e:e4:bd:84:bc:01:c7:e4:2c:b7:f9: 52:ca:b7:8d:86:b2:b0:1c:b9:ea:09:8b:14:3f:da: f6:df:f5:74:73:26:4a:40:6f:f8:5b:08:88:2f:2b: 6b:9e:07:a4:74:2c:76:cb:f0:be:60:30:af:79:0a: 33:22:93:bb:f2:3b:d3:4f:80:fc:1b:a1:35:3a:96: 6c:5f:dc:1f:9b:95:5c:1b:d3:39:1f:c7:83:99:85: fb:26:8c:b4:7a:a8:2c:c1:29:15:41:a2:9b:24:61: e5:8c:68:6c:7a:89:5e:25:7d:81:ea:a2:e6:45:36: 21:1b:1a:c3:ff:e1:d2:df:01:3e:cd:8c:be:91:81: 8f:ab:c7:0f:ad:56:2f:1b:6a:a3:6f:63:32:d4:50: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E0:5D:EF:E9:42:D1:94:FC:E9:C8:32:80:8A:8B:B2:67:DC:8E:B3 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:2e:6d:da:c9:af:42:46:a2:10:14:cb:77:52:92:bc:81:88: f2:53:0d:09:cc:ba:41:9d:03:5f:fe:d5:f3:ca:45:68:41:7d: fa:93:f0:55:8f:72:b3:cc:03:10:8a:65:44:a2:98:c9:c4:8c: 3c:13:f9:df:ca:d8:1c:9c:11:ee:3c:62:4f:4e:b9:ac:40:ab: da:d8:a8:c4:ea:3a:d3:89:2c:32:64:99:94:63:71:18:d1:76: 15:77:33:f4:70:3b:c7:98:00:d7:33:1e:9d:2c:ad:af:9f:2a: 57:6d:9d:51:60:bb:6d:e5:ef:01:9c:cf:44:dd:6e:7e:19:77: 7a:09:d0:d0:07:c6:3a:42:87:16:13:94:82:33:1a:08:31:c7: b5:3f:a0:bc:87:76:a6:32:9d:b4:f6:61:50:96:66:6c:99:b1: 6f:6a:80:a5:ae:b2:bc:8c:ad:4c:e1:ae:3f:16:d4:3d:3e:97: b2:80:52:d6:ae:ea:c6:f8:78:7f:06:75:c6:1f:1e:25:89:0d: 26:10:04:07:92:82:c6:de:5e:87:fa:7a:db:ab:fa:fe:6b:7d: 16:1c:f0:38:d2:75:92:cf:06:1d:32:57:dd:7b:d1:65:06:83: 1d:4e:37:8f:39:d7:a1:29:1b:7d:89:ff:d6:e7:ea:79:cb:ac: 69:71:4d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUxMDE4MTYyNjM2WhcNMjUxMDI1MTYyNjM2WjAYMRYwFAYD VQQDEw02OGYzYmZiYy1iM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUGh0GC5eUR3sImhi187uHI1ciYSh0Lj3PqV23HnJyO1Ks0NNnBfDWHbLp7V 1uZWbmJbgCFEebn/5YMvKYo5f/pTPhYGkSa1nLvutGorTPrYkdb+IGX3uentKuWX 2dCFry0ZKIQxJExI74osLuS9hLwBx+Qst/lSyreNhrKwHLnqCYsUP9r23/V0cyZK QG/4WwiILytrngekdCx2y/C+YDCveQozIpO78jvTT4D8G6E1OpZsX9wfm5VcG9M5 H8eDmYX7Joy0eqgswSkVQaKbJGHljGhseoleJX2B6qLmRTYhGxrD/+HS3wE+zYy+ kYGPq8cPrVYvG2qjb2My1FCSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHngXe/p QtGU/OnIMoCKi7Jn3I6zMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmLm3aya9CRqIQFMt3UpK8gYjyUw0JzLpBnQNf/tXzykVoQX36k/BV j3KzzAMQimVEopjJxIw8E/nfytgcnBHuPGJPTrmsQKva2KjE6jrTiSwyZJmUY3EY 0XYVdzP0cDvHmADXMx6dLK2vnypXbZ1RYLtt5e8BnM9E3W5+GXd6CdDQB8Y6QocW E5SCMxoIMce1P6C8h3amMp209mFQlmZsmbFvaoClrrK8jK1M4a4/FtQ9PpeygFLW rurG+Hh/BnXGHx4liQ0mEAQHkoLG3l6H+nrbq/r+a30WHPA40nWSzwYdMlfde9Fl BoMdTjePOdehKRt9if/W5+p5y6xpcU0U -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:07 2025 by rpki-client