$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json) Hash identifier: 29pktVluG0kWAOqpe6bijNxprsFB6qfdqU17nGdMzQo= Subject key identifier: 11:9D:A4:75:3D:2A:AA:77:DF:6D:72:3A:0D:17:EE:D4:F3:69:6C:03 Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft Manifest number: 11 Signing time: Sun 19 Oct 2025 11:30:44 +0000 Manifest this update: Sun 19 Oct 2025 11:30:43 +0000 Manifest next update: Sun 26 Oct 2025 11:30:43 +0000 Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: qPIknmlopV4XvPZCMrAd9V7j7UkUSkqW6CO8nEDr808=) 2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ae013xkxRm4STP9eAV3GvXY0KERGUolzleZ5rTQwKpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Validity Not Before: Oct 19 11:30:43 2025 GMT Not After : Oct 26 11:30:43 2025 GMT Subject: CN=68f4cbe4-cd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:db:70:93:e0:13:de:9d:a8:47:93:05:85: 7f:1d:0e:d7:3e:34:b7:b1:1b:74:b8:fc:6e:a2:46: 8b:00:26:23:23:0a:51:36:30:3e:26:75:bd:96:92: c0:80:df:b7:86:5b:d8:8e:43:85:f7:c7:f1:c3:62: d5:44:c9:a5:86:8e:79:de:a2:ce:60:8b:5e:ae:cb: 99:9b:bf:db:db:71:3a:10:0a:72:d7:7d:a3:5c:7a: c4:2c:81:ff:4f:c5:29:40:9f:e7:4c:2c:d1:b3:9a: 57:1a:bd:6f:32:1f:a0:63:3e:0f:73:81:15:33:a8: 86:0c:ee:af:72:79:f8:b6:23:5e:3a:61:f0:d7:07: a7:30:9a:5e:fb:86:34:cd:36:f0:cb:8d:db:98:d5: a6:f8:ac:66:55:a4:af:4e:14:92:8f:9b:ae:92:bf: dc:3a:e0:7a:94:28:2b:a8:3e:3d:e2:4e:97:81:45: 90:15:5a:fb:66:5f:05:d7:c6:48:97:81:05:38:12: b6:ff:ed:18:93:9d:91:23:9c:4c:c9:e3:d1:38:e1: db:cd:48:29:24:27:8e:97:cd:56:71:48:5d:56:14: 35:8e:26:17:84:0b:28:3f:eb:af:4a:ce:fc:0e:e7: d7:ed:85:60:96:7a:31:96:74:b4:5e:2c:86:ef:0a: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:A4:75:3D:2A:AA:77:DF:6D:72:3A:0D:17:EE:D4:F3:69:6C:03 X509v3 Authority Key Identifier: keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:27:a1:d2:57:85:99:cc:e7:cc:71:62:b1:af:7b:45:bc: d7:23:78:4a:55:98:91:a7:fa:60:c7:9a:7e:58:f6:7f:fd:46: 33:dd:13:da:c6:8f:d3:5d:fa:f9:87:9b:40:58:14:76:7c:c3: fb:8a:40:ab:ec:8a:bd:0d:81:08:26:76:2e:ab:db:ee:3d:f8: 8b:01:18:88:9e:29:8a:92:73:75:e2:a1:26:47:b7:db:0e:08: 15:01:9a:8a:8b:5e:0a:f2:2c:e7:2d:72:86:b3:15:34:0a:4c: b3:86:0c:e5:bf:ee:62:75:4e:a7:ea:d3:c0:f7:e6:27:31:92: 20:94:6f:cb:ae:e6:06:fa:81:9a:83:af:6f:a3:c5:27:3b:5f: 8e:6e:62:97:8e:8e:91:c2:e4:b1:96:91:46:9d:18:19:8c:ae: e8:ee:23:fb:e3:42:05:07:c2:7c:ca:d2:6a:99:f7:ff:cd:40: 69:c0:24:c3:d0:4a:3d:b8:82:a9:15:23:63:8b:62:c9:1d:d7: fb:84:0b:25:36:2b:39:14:f3:8f:11:db:95:99:fa:51:2f:8d: 85:27:bc:e8:2b:9c:d9:e2:b7:5e:8f:51:60:be:c5:e0:e9:34: 2e:88:ea:f7:26:44:a6:2b:89:de:2d:8a:f7:21:e9:ce:e5:a5: 31:5a:27:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2 QTMxRkZGRDAeFw0yNTEwMTkxMTMwNDNaFw0yNTEwMjYxMTMwNDNaMBgxFjAUBgNV BAMTDTY4ZjRjYmU0LWNkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoL9twk+AT3p2oR5MFhX8dDtc+NLexG3S4/G6iRosAJiMjClE2MD4mdb2WksCA 37eGW9iOQ4X3x/HDYtVEyaWGjnneos5gi16uy5mbv9vbcToQCnLXfaNcesQsgf9P xSlAn+dMLNGzmlcavW8yH6BjPg9zgRUzqIYM7q9yefi2I146YfDXB6cwml77hjTN NvDLjduY1ab4rGZVpK9OFJKPm66Sv9w64HqUKCuoPj3iTpeBRZAVWvtmXwXXxkiX gQU4Erb/7RiTnZEjnEzJ49E44dvNSCkkJ46XzVZxSF1WFDWOJheECyg/669KzvwO 59fthWCWejGWdLReLIbvCviPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEZ2kdT0q qnffbXI6DRfu1PNpbAMwHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5 QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MTRELzkzNTJDRDVFOTM5QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1Rk T3haNGpnN29RLW1veF9fMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB11J6HSV4WZzOfMcWKxr3tFvNcjeEpVmJGn+mDHmn5Y9n/9RjPdE9rG j9Nd+vmHm0BYFHZ8w/uKQKvsir0NgQgmdi6r2+49+IsBGIieKYqSc3XioSZHt9sO CBUBmoqLXgryLOctcoazFTQKTLOGDOW/7mJ1Tqfq08D35icxkiCUb8uu5gb6gZqD r2+jxSc7X45uYpeOjpHC5LGWkUadGBmMrujuI/vjQgUHwnzK0mqZ9//NQGnAJMPQ Sj24gqkVI2OLYskd1/uECyU2KzkU848R25WZ+lEvjYUnvOgrnNnit16PUWC+xeDp NC6I6vcmRKYrid4tivch6c7lpTFaJ+g= -----END CERTIFICATE-----Generated at Mon Oct 20 03:43:07 2025 by rpki-client