$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: KWcXgFYSeV0vwX9QSorwMIViO+bv6t9QD1pBrz98t/0= Subject key identifier: 9B:8F:61:48:4F:33:C6:10:03:B1:01:55:BC:4A:9F:9A:03:A7:5C:DB Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0A33 Signing time: Sat 18 Oct 2025 20:44:51 +0000 Manifest this update: Sat 18 Oct 2025 20:44:50 +0000 Manifest next update: Sat 25 Oct 2025 20:44:50 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: r3d2wpyUpyn8cPkWyNtR6lZODH5Zm0G46Uat+9V+6eU=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: qNWD2C952dubOnEkDzfs2dYV+ifzVAe5Nh++PHh3QCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Oct 18 20:44:50 2025 GMT Not After : Oct 25 20:44:50 2025 GMT Subject: CN=68f3fc42-4f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:04:db:e8:14:43:f4:d9:94:b5:46:0a:ad: d5:23:1d:bb:70:03:bc:00:1c:b9:b2:6b:5b:96:b6: 56:66:9e:3a:c7:96:43:61:72:7e:bf:5e:af:33:2e: bc:43:bb:77:52:9d:d9:38:15:40:14:57:93:24:e1: dd:94:7f:83:2e:b0:fb:53:2c:95:fe:8b:66:40:68: de:ce:df:01:bf:29:97:6b:4c:92:ab:30:6c:39:b7: ff:05:c9:2f:ce:97:66:cf:d6:cb:63:f4:1d:8d:3f: 73:68:3a:ae:a1:40:11:da:fb:92:78:23:14:64:b3: f6:08:ed:71:bf:d8:cc:16:f6:66:17:84:00:05:06: 03:19:29:c2:04:1f:cf:e5:cc:c2:e2:2c:ad:a6:fe: e9:e0:6a:cc:e5:e7:1c:7a:3a:9e:a2:81:30:76:34: 1f:cf:ce:5f:d7:7e:71:43:a1:f4:15:48:06:62:cd: 53:06:b2:03:9f:fb:c9:67:32:95:aa:2b:1b:a1:b1: 3b:0a:2d:cc:6b:e7:98:32:15:b0:d3:51:42:c7:e4: 88:d8:1f:50:9c:15:87:4d:15:ea:f5:9f:1b:76:74: 97:18:11:33:f6:f4:71:fb:55:9b:e2:31:9a:19:1e: 8a:d8:61:64:d1:68:5f:98:11:76:f5:b6:d5:2b:6f: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8F:61:48:4F:33:C6:10:03:B1:01:55:BC:4A:9F:9A:03:A7:5C:DB X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:84:c7:17:54:53:58:a9:2e:75:c7:3d:91:f5:99:37:2c:d6: 12:60:86:da:b2:e1:42:f9:c2:cc:8b:22:4a:31:4f:dd:f3:93: 9e:fc:56:80:64:15:d3:44:6a:84:d4:81:65:a7:ab:b2:c2:4a: 0d:d5:c0:fc:25:7a:34:e9:5d:bb:3f:c1:88:a8:21:39:06:cf: 27:5a:2f:81:42:52:16:6d:e9:34:d8:44:94:9e:f6:c4:43:42: 6f:27:10:8c:a1:90:59:55:03:e0:7b:9a:0f:c6:06:d7:ad:32: b9:09:0c:1d:b8:6c:c9:52:0f:50:37:de:4d:90:0a:9a:9f:f8: bc:13:0c:59:fe:c3:3b:57:e8:28:97:59:e8:be:c8:ad:e8:da: 00:7e:1c:f5:5f:d5:7d:7a:1a:8d:e4:e4:9e:2c:b2:ad:49:81: 59:0b:71:a5:ec:cb:9b:ee:92:8b:d3:34:aa:37:8c:79:e3:7a: 18:0d:78:70:10:75:5e:d6:5e:5b:31:5d:c0:6b:b9:1b:f8:c1: cf:cf:2a:25:3c:e9:4e:96:b2:74:13:be:31:e5:68:e4:85:c8: 7f:69:ea:61:54:77:78:05:fd:45:13:8d:53:fb:28:8a:30:2a: f5:4c:c3:2b:99:d5:68:da:a3:5f:d7:df:26:3c:9a:4a:fc:ad: 75:34:57:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUxMDE4MjA0NDUwWhcNMjUxMDI1MjA0NDUwWjAYMRYwFAYD VQQDEw02OGYzZmM0Mi00ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkoE2+gUQ/TZlLVGCq3VIx27cAO8ABy5smtblrZWZp46x5ZDYXJ+v16vMy68 Q7t3Up3ZOBVAFFeTJOHdlH+DLrD7UyyV/otmQGjezt8BvymXa0ySqzBsObf/Bckv zpdmz9bLY/QdjT9zaDquoUAR2vuSeCMUZLP2CO1xv9jMFvZmF4QABQYDGSnCBB/P 5czC4iytpv7p4GrM5eccejqeooEwdjQfz85f135xQ6H0FUgGYs1TBrIDn/vJZzKV qisbobE7Ci3Ma+eYMhWw01FCx+SI2B9QnBWHTRXq9Z8bdnSXGBEz9vRx+1Wb4jGa GR6K2GFk0WhfmBF29bbVK2/rZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuPYUhP M8YQA7EBVbxKn5oDp1zbMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmhMcXVFNYqS51xz2R9Zk3LNYSYIbasuFC+cLMiyJKMU/d85Oe/FaA ZBXTRGqE1IFlp6uywkoN1cD8JXo06V27P8GIqCE5Bs8nWi+BQlIWbek02ESUnvbE Q0JvJxCMoZBZVQPge5oPxgbXrTK5CQwduGzJUg9QN95NkAqan/i8EwxZ/sM7V+go l1novsit6NoAfhz1X9V9ehqN5OSeLLKtSYFZC3Gl7Mub7pKL0zSqN4x543oYDXhw EHVe1l5bMV3Aa7kb+MHPzyolPOlOlrJ0E74x5Wjkhch/aephVHd4Bf1FE41T+yiK MCr1TMMrmdVo2qNf198mPJpK/K11NFfe -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:06 2025 by rpki-client