$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: xG/KMyT5e3z03gS2vDCU1E1PgldpLodkcaD/q6TTeeg= Subject key identifier: D0:1B:6E:2F:33:C2:02:04:F9:8A:C1:6D:54:25:82:37:F2:96:BD:26 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 1002 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FED Signing time: Mon 20 Oct 2025 17:58:29 +0000 Manifest this update: Mon 20 Oct 2025 17:58:28 +0000 Manifest next update: Mon 27 Oct 2025 17:58:28 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: VHZXvioshyitbhgQlXuKi5ZIv/D02xiH1UnWrAypCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4098 (0x1002) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Oct 20 17:58:28 2025 GMT Not After : Oct 27 17:58:28 2025 GMT Subject: CN=68f67844-c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:99:8d:18:d7:df:3e:a5:f8:c3:38:0f:8f: d3:43:97:38:55:2c:d7:04:ac:4c:cc:6d:f7:1c:75: 83:36:f4:02:f1:8c:0e:f2:90:a8:40:a3:cc:d0:ff: 87:62:9e:d7:18:62:2b:f2:bd:d2:97:c9:87:f1:e0: c9:68:22:46:3f:f9:bb:65:4c:22:0e:a4:c2:80:a5: 67:75:bb:df:46:94:86:aa:e9:e3:01:f2:1a:5a:c2: 66:11:4a:cb:d5:82:b7:e6:0e:f9:6b:48:e1:88:31: 63:2c:ea:92:6d:4a:f0:81:24:5c:7a:e7:3d:6b:5d: ef:a7:79:2c:83:04:56:de:3f:01:36:ef:d8:17:d2: 02:4e:00:3a:8e:7c:3a:7f:ed:ca:b5:39:2f:23:58: af:4c:db:5d:4a:47:2a:35:12:12:6b:f0:ac:5e:66: e3:1f:a9:3a:e8:7f:9c:b6:a5:a3:9d:b0:7c:54:d6: 43:18:98:ed:46:f9:80:f1:c6:66:71:5a:71:46:f9: f0:26:91:0c:56:f4:c6:0b:da:93:f3:19:68:07:31: 65:59:c4:56:fe:28:c0:3e:48:97:30:0c:e6:0d:0a: a2:97:e6:f5:93:c3:3e:5c:49:93:43:d9:f9:63:6e: 50:b5:b3:9d:86:31:2e:92:bd:53:11:b0:76:6b:27: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1B:6E:2F:33:C2:02:04:F9:8A:C1:6D:54:25:82:37:F2:96:BD:26 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d3:31:bd:ed:e5:d2:7b:1a:a7:bf:1c:4f:ef:31:7b:1f:d0: 01:0c:30:52:b7:64:06:a6:fb:1b:e4:f9:18:9b:f8:99:bd:56: d7:13:5d:5b:43:44:86:1c:bc:e7:ed:54:96:55:2b:a2:2b:4c: df:f9:24:23:38:98:79:58:f6:ba:ee:d2:11:1b:f2:29:8a:1c: 98:85:dc:86:dd:d3:af:d7:43:17:f9:31:53:8c:06:53:cb:36: 2d:28:e4:93:94:1a:2a:1d:9f:2e:50:59:b7:97:15:d7:38:f7: ff:3a:5e:77:ad:20:23:84:36:1c:fa:74:3a:fb:8b:47:5b:b5: 46:d6:ac:cd:a1:88:5d:a8:bb:8d:fd:37:1e:20:9f:de:bf:a2: 65:82:c4:a3:92:e6:99:9b:e5:93:97:dd:aa:02:d4:fd:c7:44: 30:53:cd:54:c8:e4:ee:37:33:7b:17:8e:ca:25:0c:5e:1a:8d: 26:70:82:20:61:7b:04:5b:4d:72:cd:31:fc:ea:69:d8:6f:23: db:f0:d6:8a:f3:8b:6f:84:54:2b:dd:66:09:56:52:c7:71:52: 9f:d6:45:df:93:14:19:99:43:28:a9:b8:51:7e:eb:19:d1:27: 04:eb:c3:28:9e:9d:db:90:75:c1:32:e4:af:95:46:3e:32:d0: 8e:dc:bf:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUxMDIwMTc1ODI4WhcNMjUxMDI3MTc1ODI4WjAYMRYwFAYD VQQDEw02OGY2Nzg0NC1jM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUiZjRjX3z6l+MM4D4/TQ5c4VSzXBKxMzG33HHWDNvQC8YwO8pCoQKPM0P+H Yp7XGGIr8r3Sl8mH8eDJaCJGP/m7ZUwiDqTCgKVndbvfRpSGqunjAfIaWsJmEUrL 1YK35g75a0jhiDFjLOqSbUrwgSRceuc9a13vp3ksgwRW3j8BNu/YF9ICTgA6jnw6 f+3KtTkvI1ivTNtdSkcqNRISa/CsXmbjH6k66H+ctqWjnbB8VNZDGJjtRvmA8cZm cVpxRvnwJpEMVvTGC9qT8xloBzFlWcRW/ijAPkiXMAzmDQqil+b1k8M+XEmTQ9n5 Y25QtbOdhjEukr1TEbB2ayeHoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAbbi8z wgIE+YrBbVQlgjfylr0mMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO0zG97eXSexqnvxxP7zF7H9ABDDBSt2QGpvsb5PkYm/iZvVbXE11b Q0SGHLzn7VSWVSuiK0zf+SQjOJh5WPa67tIRG/IpihyYhdyG3dOv10MX+TFTjAZT yzYtKOSTlBoqHZ8uUFm3lxXXOPf/Ol53rSAjhDYc+nQ6+4tHW7VG1qzNoYhdqLuN /TceIJ/ev6JlgsSjkuaZm+WTl92qAtT9x0QwU81UyOTuNzN7F47KJQxeGo0mcIIg YXsEW01yzTH86mnYbyPb8NaK84tvhFQr3WYJVlLHcVKf1kXfkxQZmUMoqbhRfusZ 0ScE68Monp3bkHXBMuSvlUY+MtCO3L/b -----END CERTIFICATE-----Generated at Mon Oct 20 21:22:07 2025 by rpki-client