$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: oOAUoT1BBV1Qv7PzhathX30VUZQX5WMqQRsDgUf/i1g= Subject key identifier: D5:2C:E2:5C:68:21:9E:9D:52:BD:F2:2F:62:33:42:C0:B5:95:B9:6A Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 34D3 Signing time: Sun 02 Nov 2025 14:40:42 +0000 Manifest this update: Sun 02 Nov 2025 14:40:42 +0000 Manifest next update: Sun 09 Nov 2025 14:40:42 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: JON3kM3oqAo1dIXVmsKJBbEmir9zrbP6BdXpBOzwWG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Nov 2 14:40:42 2025 GMT Not After : Nov 9 14:40:42 2025 GMT Subject: CN=69076d6a-7bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:2a:f6:9d:54:81:c4:5c:72:b2:21:b9:75: 94:17:4c:29:fe:a6:ac:f0:bd:9f:73:24:52:70:2a: 9a:92:5d:93:5b:76:be:c2:98:4a:1e:f0:01:9a:d6: 6c:86:cd:ff:ef:50:50:ac:ca:f1:80:f2:32:a6:86: d7:96:bc:f2:e7:5e:ad:46:7d:bb:ed:cf:ac:97:42: 85:f5:4a:00:af:08:12:8f:83:62:19:ca:67:f7:af: e5:ca:72:a7:13:7b:62:ea:16:8c:fe:16:b2:0a:ab: 88:5e:f3:e0:ce:7b:9b:78:96:11:59:b5:eb:33:54: 7c:b5:52:ff:a3:7e:04:52:ec:c2:6d:fb:77:0c:30: 6b:fc:3e:50:39:2d:36:00:bb:e8:b1:9c:61:52:ec: fc:9f:a2:02:a5:3c:db:dd:13:bc:d3:f8:56:c5:59: bc:1b:18:11:23:a6:ca:e3:d8:e1:4b:4c:29:dd:fa: c4:94:9f:23:ff:dc:00:9f:5c:0e:31:dc:ec:b7:e9: 75:27:d1:18:df:bf:32:9c:da:7e:3c:0f:85:e2:6a: fb:ef:77:aa:59:8e:5f:6c:03:51:99:4b:20:65:e8: 77:e8:78:89:4e:c3:3a:55:27:fd:7d:42:44:88:e4: 39:fd:60:ef:d7:ef:36:ce:ec:81:33:5b:f0:50:02: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2C:E2:5C:68:21:9E:9D:52:BD:F2:2F:62:33:42:C0:B5:95:B9:6A X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fb:a2:c4:bd:f8:b7:d0:1b:25:1b:e4:16:7b:0f:8c:ff:92: ea:e9:72:01:a8:d1:23:cf:21:ac:e8:37:82:a0:c8:5e:f4:40: b5:f4:6e:59:ad:ba:f6:43:45:02:07:ce:fc:47:9b:f4:c3:99: ba:81:81:78:15:a2:d8:c5:41:b7:06:fc:c8:17:0c:9e:10:ca: 3d:78:83:29:50:89:67:e2:b5:46:0c:0d:fc:ce:fb:ae:ed:bc: ce:a7:7b:1a:e2:4b:12:15:2a:db:72:0b:51:ff:e1:d8:7c:10: 8e:a3:a2:a4:dd:ae:53:01:68:6d:72:27:93:61:3a:dc:54:96: 25:db:8d:29:ba:87:47:b2:89:07:6e:b0:f0:e4:4f:80:0e:f9: 54:3b:34:8c:f1:fc:23:f1:06:02:85:02:8a:2e:af:fd:68:be: e9:96:53:09:ba:19:1b:60:64:70:37:34:da:f4:ee:e4:35:f7: f8:54:f2:17:3f:89:0f:7e:90:f4:6b:01:d3:03:e6:7d:36:58: ac:2b:e0:4c:32:5e:00:63:9d:46:11:07:ef:e9:96:7a:45:04: b7:c9:64:70:27:0d:c3:63:c1:95:70:7a:6f:ec:97:ce:f1:ab: 08:36:44:cf:b5:1c:c4:bc:b2:e2:3d:07:22:27:44:e4:11:42: 36:c4:9a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUxMTAyMTQ0MDQyWhcNMjUxMTA5MTQ0MDQyWjAYMRYwFAYD VQQDEw02OTA3NmQ2YS03YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyMq9p1UgcRccrIhuXWUF0wp/qas8L2fcyRScCqakl2TW3a+wphKHvABmtZs hs3/71BQrMrxgPIypobXlrzy516tRn277c+sl0KF9UoArwgSj4NiGcpn96/lynKn E3ti6haM/hayCquIXvPgznubeJYRWbXrM1R8tVL/o34EUuzCbft3DDBr/D5QOS02 ALvosZxhUuz8n6ICpTzb3RO80/hWxVm8GxgRI6bK49jhS0wp3frElJ8j/9wAn1wO Mdzst+l1J9EY378ynNp+PA+F4mr773eqWY5fbANRmUsgZeh36HiJTsM6VSf9fUJE iOQ5/WDv1+82zuyBM1vwUALpLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUs4lxo IZ6dUr3yL2IzQsC1lblqMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO+6LEvfi30BslG+QWew+M/5Lq6XIBqNEjzyGs6DeCoMhe9EC19G5Z rbr2Q0UCB878R5v0w5m6gYF4FaLYxUG3BvzIFwyeEMo9eIMpUIln4rVGDA38zvuu 7bzOp3sa4ksSFSrbcgtR/+HYfBCOo6Kk3a5TAWhtcieTYTrcVJYl240puodHsokH brDw5E+ADvlUOzSM8fwj8QYChQKKLq/9aL7pllMJuhkbYGRwNzTa9O7kNff4VPIX P4kPfpD0awHTA+Z9NlisK+BMMl4AY51GEQfv6ZZ6RQS3yWRwJw3DY8GVcHpv7JfO 8asINkTPtRzEvLLiPQciJ0TkEUI2xJou -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:58 2025 by rpki-client