$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: 0bDgAMnUjC67Et915jp1T0LqzLgMDeYbRoGhyV675vM= Subject key identifier: 7E:6F:5A:CA:EA:C9:FB:CB:D3:CD:50:46:90:94:15:1D:2F:95:1E:7B Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 02C8 Signing time: Sun 19 Oct 2025 03:32:17 +0000 Manifest this update: Sun 19 Oct 2025 03:32:16 +0000 Manifest next update: Sun 26 Oct 2025 03:32:16 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: TPFTDXZQlxVLsmKoilmw/JxU21q8fRwN7Ws5YgbFycA=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: nnR9EPSyG4Kq21NgPkJ1y+q1NVNPyw5fBJX9VgzqqTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Oct 19 03:32:16 2025 GMT Not After : Oct 26 03:32:16 2025 GMT Subject: CN=68f45bc0-83f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:b4:86:7c:9c:92:6c:86:73:0d:14:5e:d9: b4:ec:74:5f:f6:0d:89:47:15:5d:8e:28:ff:ae:46: 04:36:25:97:b9:dd:8e:42:21:d1:1b:a9:76:17:5e: 84:80:00:90:93:12:1d:5f:bf:2b:3e:6b:29:88:86: 11:a6:3d:0e:4a:54:5e:81:a0:bd:10:a2:f7:c8:80: 5d:60:56:f6:97:4e:88:96:c7:b6:e7:92:37:3d:76: 63:44:e9:19:32:f6:66:b8:99:e0:62:4b:b5:d5:c0: 72:2a:5d:36:0b:c4:aa:51:24:53:ef:2d:bc:fc:c3: 83:68:65:5d:92:41:8c:2b:a4:87:23:59:28:bb:45: 34:db:9e:6c:a8:cb:33:4c:53:fa:fc:5c:80:54:97: b8:e4:4d:24:1f:59:0e:3d:40:d1:1b:2b:d0:2b:e7: f0:f8:a0:47:c4:71:19:53:21:77:73:16:f5:44:8b: 78:d9:2e:12:38:02:af:54:79:b4:e4:f3:10:55:4b: 10:3e:b4:15:74:68:ae:54:42:a5:03:78:12:d1:8b: 26:62:14:19:3c:3e:fb:66:e8:6b:55:8c:ac:fd:e5: e1:fe:35:3b:5b:ed:21:08:6d:5b:18:e8:97:c5:5c: f7:52:e9:ed:87:4a:c8:25:29:a7:10:e5:d6:c8:a1: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6F:5A:CA:EA:C9:FB:CB:D3:CD:50:46:90:94:15:1D:2F:95:1E:7B X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7e:d3:ab:53:34:62:5b:ac:9e:8c:6e:e2:1e:c1:27:f1:e4: 5c:8d:54:d3:a3:83:bb:a1:cd:eb:1f:07:19:3a:44:9e:16:e3: ba:ab:7c:7b:0e:0d:bb:c4:8b:49:b4:e9:0d:3b:ef:55:d5:f5: ad:30:ec:d5:55:a0:1e:73:1e:5f:e3:ab:62:f4:bd:02:55:9a: fe:dc:41:0c:af:5e:fb:ac:af:70:86:0a:88:91:5d:72:a0:0b: 43:b9:98:e2:b1:b1:4e:c7:a2:85:3f:44:45:51:6b:62:09:59: 81:85:00:8b:b8:59:86:69:21:3c:74:bb:6d:6c:66:a7:01:de: 85:8e:75:52:63:24:48:8f:e5:09:10:f3:8b:ec:8e:b1:fd:37: b4:b6:29:4f:b4:fa:f8:02:ba:27:74:9a:02:7d:d0:87:7e:1d: 38:fc:db:de:35:41:f8:8e:17:cf:f7:ea:c1:78:5b:4c:01:29: e5:db:e8:6b:7b:4e:53:2d:ac:20:2e:01:5f:14:0f:25:9f:25: 57:02:47:aa:c0:67:b9:f1:c6:d2:48:2d:de:d7:e7:fe:42:e9: ca:3b:26:db:eb:6d:f3:79:1c:2e:7f:44:0b:07:e9:e4:af:6e: 9b:64:ef:af:64:36:71:3d:c6:91:df:84:8a:e4:e2:d0:5d:6d: e6:0b:e0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUxMDE5MDMzMjE2WhcNMjUxMDI2MDMzMjE2WjAYMRYwFAYD VQQDEw02OGY0NWJjMC04M2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwv+0hnyckmyGcw0UXtm07HRf9g2JRxVdjij/rkYENiWXud2OQiHRG6l2F16E gACQkxIdX78rPmspiIYRpj0OSlRegaC9EKL3yIBdYFb2l06Ilse255I3PXZjROkZ MvZmuJngYku11cByKl02C8SqUSRT7y28/MODaGVdkkGMK6SHI1kou0U0255sqMsz TFP6/FyAVJe45E0kH1kOPUDRGyvQK+fw+KBHxHEZUyF3cxb1RIt42S4SOAKvVHm0 5PMQVUsQPrQVdGiuVEKlA3gS0YsmYhQZPD77ZuhrVYys/eXh/jU7W+0hCG1bGOiX xVz3Uunth0rIJSmnEOXWyKExvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5vWsrq yfvL081QRpCUFR0vlR57MB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCftOrUzRiW6yejG7iHsEn8eRcjVTTo4O7oc3rHwcZOkSeFuO6q3x7 Dg27xItJtOkNO+9V1fWtMOzVVaAecx5f46ti9L0CVZr+3EEMr177rK9whgqIkV1y oAtDuZjisbFOx6KFP0RFUWtiCVmBhQCLuFmGaSE8dLttbGanAd6FjnVSYyRIj+UJ EPOL7I6x/Te0tilPtPr4ArondJoCfdCHfh04/NveNUH4jhfP9+rBeFtMASnl2+hr e05TLawgLgFfFA8lnyVXAkeqwGe58cbSSC3e1+f+QunKOybb623zeRwuf0QLB+nk r26bZO+vZDZxPcaR34SK5OLQXW3mC+Dc -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:23 2025 by rpki-client