$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json) Hash identifier: ORKmj7SLKIxa4vTOmW0Q97PPA4BO8LCErYjWmB2/jso= Subject key identifier: DB:64:FB:CD:8F:E8:99:99:5F:BC:FC:10:68:88:45:ED:1E:2F:18:7A Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft Manifest number: 0468 Signing time: Sun 19 Oct 2025 02:04:49 +0000 Manifest this update: Sun 19 Oct 2025 02:04:48 +0000 Manifest next update: Sun 26 Oct 2025 02:04:48 +0000 Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: YdabiV/H0x8lPYIf3QayRyTj96Pv02789701bjKg+R8=) 2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Validity Not Before: Oct 19 02:04:48 2025 GMT Not After : Oct 26 02:04:48 2025 GMT Subject: CN=68f44740-8413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:b5:f9:08:e7:f2:8b:e7:9d:56:94:5a:a1: 41:2c:4a:fc:4b:6b:5e:d6:2e:51:5f:f4:70:44:88: 32:a6:f8:b8:ba:aa:92:1c:3a:e2:11:b2:07:64:34: 55:b5:75:37:39:22:10:ae:e2:7a:74:a2:81:e4:bc: a5:8e:93:3a:87:52:85:1e:d1:a5:d3:4b:af:3d:20: a0:f6:d1:71:f8:32:4a:42:8b:52:e5:c4:ce:93:c1: 80:23:a8:43:3e:64:71:3c:3a:c5:05:12:4a:9f:73: e8:34:ac:29:a7:e2:06:40:de:9c:e7:15:a5:91:b8: 12:b4:5d:40:2c:e5:3d:cb:13:fa:b1:35:79:b7:0b: 78:cb:51:51:02:08:bd:07:98:64:5c:4f:4d:0f:8c: e5:65:e1:6c:d7:1f:5c:e2:aa:b1:0a:e5:17:4e:26: 9c:5c:34:9f:a2:6c:5d:89:72:08:74:bd:93:db:af: 44:de:be:5b:ce:e4:95:87:ca:d2:ca:18:3e:aa:e0: 6a:2b:4e:03:06:ca:23:8c:e5:74:b9:6d:66:a1:ce: 4f:52:2f:36:9c:c2:4e:d2:9b:76:0c:45:05:7f:e2: b5:5b:e4:67:8d:af:67:5e:5c:f6:76:df:d6:97:dd: ac:99:7e:e0:3f:ef:1b:5d:2a:97:1e:f5:a8:ab:3b: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:FB:CD:8F:E8:99:99:5F:BC:FC:10:68:88:45:ED:1E:2F:18:7A X509v3 Authority Key Identifier: keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ec:f9:a0:73:59:6b:cf:03:c5:47:8d:22:2d:53:69:55:85: 96:9c:db:33:d2:f9:1b:29:3a:92:18:f5:d8:97:bf:ae:30:cd: b1:75:f3:96:b5:a3:5b:5d:46:bd:b9:e6:17:10:0e:1a:7c:b9: b9:4a:c6:17:e4:ae:52:44:b3:13:a0:28:c4:9d:0a:16:50:eb: bb:49:69:40:15:bb:de:99:04:5f:22:29:94:ba:75:ba:fe:63: a6:8b:ff:22:b0:8a:0f:d5:1f:be:9f:24:fd:a6:63:0d:8c:f4: c2:0f:2a:eb:7b:b6:2f:25:f3:f9:41:0c:4c:e6:6e:2e:ea:6a: f7:7f:82:26:e9:40:3a:70:d7:32:87:87:ed:0b:89:59:9f:91: 5e:af:77:b4:bd:29:2f:28:dd:44:57:f3:15:72:f0:6d:37:8a: aa:25:b2:9c:03:09:f7:a6:6f:a0:b7:97:66:f3:a5:39:aa:37: 1e:2d:e1:57:1d:53:dd:26:69:59:35:17:5c:18:12:86:d2:32: 76:4e:28:1f:8f:05:0d:21:6c:c3:0e:33:8b:60:b7:f6:f3:76: de:66:e1:fc:c3:25:b0:16:f1:0e:6f:88:82:99:5f:4b:b5:03: e9:80:03:f9:fd:8e:ed:69:5f:69:47:6e:44:ca:ec:38:16:26: 32:5d:dc:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx MkE1NTFDMzgwHhcNMjUxMDE5MDIwNDQ4WhcNMjUxMDI2MDIwNDQ4WjAYMRYwFAYD VQQDEw02OGY0NDc0MC04NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynq1+Qjn8ovnnVaUWqFBLEr8S2te1i5RX/RwRIgypvi4uqqSHDriEbIHZDRV tXU3OSIQruJ6dKKB5LyljpM6h1KFHtGl00uvPSCg9tFx+DJKQotS5cTOk8GAI6hD PmRxPDrFBRJKn3PoNKwpp+IGQN6c5xWlkbgStF1ALOU9yxP6sTV5twt4y1FRAgi9 B5hkXE9ND4zlZeFs1x9c4qqxCuUXTiacXDSfomxdiXIIdL2T269E3r5bzuSVh8rS yhg+quBqK04DBsojjOV0uW1moc5PUi82nMJO0pt2DEUFf+K1W+Rnja9nXlz2dt/W l92smX7gP+8bXSqXHvWoqztVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtk+82P 6JmZX7z8EGiIRe0eLxh6MB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy bnFzd05HOWlTMk1TcFZIRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF7Pmgc1lrzwPFR40iLVNpVYWWnNsz0vkbKTqSGPXYl7+uMM2xdfOW taNbXUa9ueYXEA4afLm5SsYX5K5SRLMToCjEnQoWUOu7SWlAFbvemQRfIimUunW6 /mOmi/8isIoP1R++nyT9pmMNjPTCDyrre7YvJfP5QQxM5m4u6mr3f4Im6UA6cNcy h4ftC4lZn5Fer3e0vSkvKN1EV/MVcvBtN4qqJbKcAwn3pm+gt5dm86U5qjceLeFX HVPdJmlZNRdcGBKG0jJ2TigfjwUNIWzDDjOLYLf283beZuH8wyWwFvEOb4iCmV9L tQPpgAP5/Y7taV9pR25Eyuw4FiYyXdza -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:45 2025 by rpki-client