$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: d572yMxiRJ2IytLS3n1zHabze6P4VUX0/ar8MkHSM1M= Subject key identifier: 8A:F2:81:56:16:DD:E2:ED:58:BC:4A:79:1B:9A:7B:18:B1:DC:57:5B Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 63 Signing time: Sun 19 Oct 2025 10:24:24 +0000 Manifest this update: Sun 19 Oct 2025 10:24:23 +0000 Manifest next update: Sun 26 Oct 2025 10:24:23 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: b7hE/wjYR/7ZP29iOmkITRc/X0IZPw+MymNxb7xGgyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Oct 19 10:24:23 2025 GMT Not After : Oct 26 10:24:23 2025 GMT Subject: CN=68f4bc58-7f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:e1:91:ac:cd:e2:ed:ec:0f:ba:ef:5b:d4: 1d:ec:39:a3:62:5f:8e:2e:37:8e:03:bc:3c:29:c3: b3:ef:1a:19:e0:8f:33:18:33:f8:f4:8f:52:f3:e7: 50:f3:fc:2c:62:e4:8a:f1:8d:6e:98:aa:e5:58:61: a4:0a:97:7a:0a:4f:db:4f:15:50:f6:f2:cf:44:53: 37:9f:f2:06:59:d5:f4:b8:0a:87:23:46:53:fe:17: 6d:82:05:8c:f6:60:b8:d5:75:e5:81:1c:46:4f:c2: 6f:71:66:c9:bf:80:cf:0f:ab:55:74:75:d0:73:63: f6:b2:ed:18:ba:19:a8:ec:ce:4c:1d:35:38:1f:5e: 30:e8:5e:40:9a:75:7e:57:d5:c0:06:01:1f:9f:92: 22:18:f2:71:9b:8e:3d:17:ec:3b:ac:42:30:1d:c1: 09:9c:47:47:ea:fa:b1:0d:bd:f2:0f:68:1c:43:e3: 65:90:d4:86:1d:d7:96:8c:48:86:a1:ff:1a:33:bd: 63:01:10:18:60:2a:1f:54:d1:6c:c3:1e:d6:87:5f: 0e:71:2f:bf:f3:98:41:20:22:77:c4:c6:e0:13:4d: 1b:0a:79:51:7b:60:ca:5e:ba:1d:8b:4c:50:c2:d3: 17:c0:ce:48:7f:ad:28:09:b7:22:de:79:08:14:52: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:81:56:16:DD:E2:ED:58:BC:4A:79:1B:9A:7B:18:B1:DC:57:5B X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:64:fa:4d:77:ae:58:d9:9c:c0:9c:e5:a5:5b:1e:ec:38: 3c:53:5b:7f:1c:6a:92:56:6a:67:f3:b9:e7:20:be:93:b5:6e: 75:4d:39:d4:e0:bc:31:3a:16:87:01:a5:f5:f2:8c:a4:a3:4f: 48:b8:34:c2:59:fa:af:62:ab:e7:dd:99:a9:b0:19:7f:78:18: 1f:4d:92:c2:68:7d:b1:c7:78:47:7c:cb:4d:b6:c5:01:e7:df: 0d:fc:23:34:93:41:2f:e5:6a:7c:0f:e0:22:37:b6:46:35:b7: b3:40:2c:e4:47:f0:50:9a:a6:d8:3a:2f:10:e4:c2:13:4e:08: 16:d3:e0:95:99:13:68:1c:74:68:5d:f8:58:5c:b3:ac:e8:4a: 21:1f:80:cc:ec:54:fc:31:01:fa:f3:7f:38:5a:10:c7:35:e0: 71:c0:66:81:82:41:0a:4f:9f:b2:19:96:aa:1f:32:c4:bf:82: 55:b3:0f:09:1f:f9:2d:f1:e6:86:3e:76:3f:3b:07:96:be:a9: 03:1c:55:6a:67:31:32:68:9a:97:1c:19:d3:11:c2:53:1d:f1: 6f:eb:8b:4f:84:52:92:45:e9:d7:1e:47:29:cf:10:a8:e1:17: c4:8f:8e:7a:30:e9:77:c0:08:80:c1:fc:e3:89:f9:5a:23:e3: 3d:99:5c:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTEwMTkxMDI0MjNaFw0yNTEwMjYxMDI0MjNaMBgxFjAUBgNV BAMTDTY4ZjRiYzU4LTdmMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfNOGRrM3i7ewPuu9b1B3sOaNiX44uN44DvDwpw7PvGhngjzMYM/j0j1Lz51Dz /Cxi5IrxjW6YquVYYaQKl3oKT9tPFVD28s9EUzef8gZZ1fS4CocjRlP+F22CBYz2 YLjVdeWBHEZPwm9xZsm/gM8Pq1V0ddBzY/ay7Ri6GajszkwdNTgfXjDoXkCadX5X 1cAGAR+fkiIY8nGbjj0X7DusQjAdwQmcR0fq+rENvfIPaBxD42WQ1IYd15aMSIah /xozvWMBEBhgKh9U0WzDHtaHXw5xL7/zmEEgInfExuATTRsKeVF7YMpeuh2LTFDC 0xfAzkh/rSgJtyLeeQgUUq2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUivKBVhbd 4u1YvEp5G5p7GLHcV1swHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEynZPpNd65Y2ZzAnOWlWx7sODxTW38capJWamfzuecgvpO1bnVNOdTg vDE6FocBpfXyjKSjT0i4NMJZ+q9iq+fdmamwGX94GB9NksJofbHHeEd8y022xQHn 3w38IzSTQS/lanwP4CI3tkY1t7NALORH8FCaptg6LxDkwhNOCBbT4JWZE2gcdGhd +Fhcs6zoSiEfgMzsVPwxAfrzfzhaEMc14HHAZoGCQQpPn7IZlqofMsS/glWzDwkf +S3x5oY+dj87B5a+qQMcVWpnMTJompccGdMRwlMd8W/ri0+EUpJF6dceRynPEKjh F8SPjnow6XfACIDB/OOJ+Voj4z2ZXDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:45 2025 by rpki-client