$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: 1fFRbs0EApGSa05JfAIuWeWhjBbML5sfshnimMwNO40= Subject key identifier: 73:B0:A5:F9:9E:14:7F:12:70:1E:21:7A:12:1F:2A:D4:1E:88:35:D3 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 73 Signing time: Sun 19 Oct 2025 10:13:09 +0000 Manifest this update: Sun 19 Oct 2025 10:13:08 +0000 Manifest next update: Sun 26 Oct 2025 10:13:08 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: uT5i/9xt6j0LXWFkPBi32Da+CqWw0ZOAllcze2jVdbY=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Oct 19 10:13:08 2025 GMT Not After : Oct 26 10:13:08 2025 GMT Subject: CN=68f4b9b5-5ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:55:c8:52:a1:03:34:71:e1:0b:ae:56:37: 75:ed:c7:89:f3:15:1b:3e:4d:a0:00:bd:ae:b0:f5: 11:ec:c6:05:61:cc:64:35:75:4e:50:92:cf:8c:4f: 2c:eb:8c:d0:92:5a:cd:64:5d:93:f9:4e:c2:53:f6: b2:33:33:03:53:09:11:ad:bb:f9:88:a0:de:79:27: 55:82:f4:2f:7c:76:81:b2:2e:fa:d2:24:06:67:93: 87:27:84:83:c5:85:1b:96:2b:ab:bd:dc:bd:d1:d5: 00:33:61:ba:31:58:47:06:5c:17:88:50:02:de:0c: 54:e6:3b:03:31:01:68:56:cb:2a:1e:cd:53:28:0c: a2:b5:2d:83:82:05:ad:75:40:6f:ea:f0:b3:46:ca: 91:4d:ad:7a:87:90:88:9c:40:a7:14:7b:f4:c6:c8: 84:b3:6c:59:4f:ef:1a:22:3d:64:94:3a:bc:fd:03: 84:28:a4:ee:a3:a2:c0:3d:46:a1:6d:50:3f:bc:a6: 3d:83:a6:81:f5:2d:75:74:e9:0b:60:2b:c5:67:12: 05:45:a9:f5:3d:fc:80:5c:b1:2f:05:4c:ac:c8:28: b7:3d:07:ca:53:66:93:76:9a:16:57:e1:3f:98:4d: 18:a0:85:75:90:ee:28:b8:56:cd:d8:6f:fa:c4:d5: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B0:A5:F9:9E:14:7F:12:70:1E:21:7A:12:1F:2A:D4:1E:88:35:D3 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:77:36:77:b7:8f:cf:b6:da:bd:af:c5:d8:2d:0a:3b:c3:70: b9:6f:63:11:69:ab:ae:81:23:fa:1d:53:ce:dd:68:4e:5b:58: d2:77:4a:4d:6e:81:81:33:f3:2f:38:0d:0d:a4:60:93:47:64: 59:e8:48:f1:19:a5:c5:69:47:ee:40:55:7b:23:c0:fb:45:c5: 4e:49:07:d8:2e:ac:67:53:00:6b:9c:3b:1c:a4:18:54:41:82: 5a:83:23:9c:0d:3d:58:c3:55:6d:0b:ca:1e:5c:ac:18:7a:e5: c2:41:2d:7e:b2:a5:7d:d4:bd:23:39:48:21:da:2a:05:f5:c4: 92:96:5f:97:a3:d1:05:d0:73:e2:2a:bd:d6:98:36:32:07:f2: f7:76:a7:f9:41:8c:a3:7e:35:9c:68:b5:c6:b0:1d:7a:96:e1: 7b:4e:d3:8f:b1:e7:61:4f:34:ad:a9:5b:47:61:b3:ad:bc:d4: 1f:74:59:29:2e:e0:6f:0b:40:85:64:ca:b4:72:ac:1a:c0:39: a2:aa:99:9f:da:31:3e:d7:15:b3:d4:ab:72:68:54:f1:7d:4b: b3:b9:89:db:e0:11:e8:1c:08:be:45:07:10:20:c1:e2:48:8e: 1c:7f:c1:a9:5b:a4:4a:07:aa:d7:95:b5:62:7a:fa:e4:bf:7d: 65:a5:54:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTEwMTkxMDEzMDhaFw0yNTEwMjYxMDEzMDhaMBgxFjAUBgNV BAMTDTY4ZjRiOWI1LTVmZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnLFXIUqEDNHHhC65WN3Xtx4nzFRs+TaAAva6w9RHsxgVhzGQ1dU5Qks+MTyzr jNCSWs1kXZP5TsJT9rIzMwNTCRGtu/mIoN55J1WC9C98doGyLvrSJAZnk4cnhIPF hRuWK6u93L3R1QAzYboxWEcGXBeIUALeDFTmOwMxAWhWyyoezVMoDKK1LYOCBa11 QG/q8LNGypFNrXqHkIicQKcUe/TGyISzbFlP7xoiPWSUOrz9A4QopO6josA9RqFt UD+8pj2DpoH1LXV06QtgK8VnEgVFqfU9/IBcsS8FTKzIKLc9B8pTZpN2mhZX4T+Y TRighXWQ7ii4Vs3Yb/rE1X0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc7Cl+Z4U fxJwHiF6Eh8q1B6INdMwHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEN3Nne3j8+22r2vxdgtCjvDcLlvYxFpq66BI/odU87daE5bWNJ3Sk1u gYEz8y84DQ2kYJNHZFnoSPEZpcVpR+5AVXsjwPtFxU5JB9gurGdTAGucOxykGFRB glqDI5wNPVjDVW0Lyh5crBh65cJBLX6ypX3UvSM5SCHaKgX1xJKWX5ej0QXQc+Iq vdaYNjIH8vd2p/lBjKN+NZxotcawHXqW4XtO04+x52FPNK2pW0dhs6281B90WSku 4G8LQIVkyrRyrBrAOaKqmZ/aMT7XFbPUq3JoVPF9S7O5idvgEegcCL5FBxAgweJI jhx/walbpEoHqteVtWJ6+uS/fWWlVKw= -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:52 2025 by rpki-client