$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: iLgdWYH0L9mQu6U3i1VUpQazfMNuvQ93MRo5DFNFPzc= Subject key identifier: 6E:E4:89:92:45:47:30:42:B2:39:61:9A:D7:07:34:88:FD:02:24:42 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 0743 Signing time: Tue 04 Nov 2025 21:49:02 +0000 Manifest this update: Tue 04 Nov 2025 21:49:01 +0000 Manifest next update: Tue 11 Nov 2025 21:49:01 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: XurT33sJukWyBmjVaxfiYrrooJiiTcDdJybzyvLFK8I=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Nov 4 21:49:01 2025 GMT Not After : Nov 11 21:49:01 2025 GMT Subject: CN=690a74ce-906f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:be:ee:f6:98:22:dc:56:71:d5:41:7d:05: 1c:b6:8a:94:46:a9:aa:61:fd:bd:f2:b9:c4:51:1b: af:06:4c:ab:df:8c:54:56:a4:10:70:c6:4d:1a:ea: 55:a1:ac:ec:e9:04:fa:e8:15:f6:c9:a9:19:a4:fb: 09:13:18:98:56:82:9c:46:5c:df:2e:05:2e:84:86: 51:b7:6d:30:d8:17:8b:9e:f3:53:08:32:1e:4c:e6: 8f:c7:d2:e4:5d:86:2a:8b:a4:29:d0:d1:6c:e3:27: ff:00:60:fc:6d:fe:88:1e:14:c8:1a:6b:3e:08:40: 2b:c2:75:68:9d:94:b7:8a:28:fa:53:be:cf:3b:80: cd:31:68:21:eb:52:00:72:5a:8d:1c:b0:6d:62:50: e8:5a:11:1a:12:3e:8e:4c:02:97:d1:41:ab:0d:91: f6:02:34:29:5b:01:50:28:73:2c:e1:b0:f9:a9:f9: bb:03:f6:28:b9:d7:e9:bc:b5:3c:2c:63:4c:d3:34: 81:e1:5d:84:48:98:94:d6:c5:f8:9a:2e:d7:83:53: ab:bc:ef:9c:f0:26:8f:b1:70:bb:85:7f:a8:ee:7c: 05:08:1a:ef:8d:6c:9c:83:77:8a:29:a5:2e:5f:1f: f1:14:da:56:55:68:8b:95:d1:dc:ae:de:a7:93:74: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E4:89:92:45:47:30:42:B2:39:61:9A:D7:07:34:88:FD:02:24:42 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2c:69:35:80:ad:64:d8:67:6b:57:01:4b:a3:d6:19:0e:68: d1:0d:51:a2:82:85:f5:ef:03:f1:a8:f6:0e:32:65:e5:54:81: d2:79:03:e4:23:59:e2:64:ee:25:99:80:84:9d:ea:df:2c:ba: c1:42:cb:f7:24:8f:f1:ca:37:b7:6b:8d:56:41:a2:9e:77:ab: 9a:6a:cf:95:ec:60:62:9e:a1:2f:a7:5a:6b:f3:77:51:5d:da: 1a:f3:81:05:21:78:82:6f:60:ca:d8:c7:e9:6b:64:f6:ad:18: 13:11:62:72:4b:33:4f:84:e3:0d:0a:db:4b:b3:ea:1f:06:4b: a5:17:a2:8f:ff:9a:7f:66:c0:b8:0f:cc:09:2f:59:a4:60:ec: a7:f0:45:a1:eb:f0:f3:63:08:78:61:8c:47:f7:b6:4f:ba:4d: ff:ab:df:93:07:21:00:78:ef:87:58:ba:a9:6c:a6:e1:77:80: ec:5e:15:90:c1:32:4c:fc:ec:a6:23:4d:99:a9:97:8b:47:29: d2:29:dc:93:00:c3:66:d5:b2:f0:e7:38:2e:b7:09:61:5e:27: 05:96:ef:f9:e7:94:2c:6a:a2:93:29:54:f3:30:2c:39:f5:5a: 22:33:0d:32:64:cf:2a:54:91:a5:a2:3d:28:72:9d:2b:3a:bb: 28:a3:8a:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUxMTA0MjE0OTAxWhcNMjUxMTExMjE0OTAxWjAYMRYwFAYD VQQDEw02OTBhNzRjZS05MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtu+7vaYItxWcdVBfQUctoqURqmqYf298rnEURuvBkyr34xUVqQQcMZNGupV oazs6QT66BX2yakZpPsJExiYVoKcRlzfLgUuhIZRt20w2BeLnvNTCDIeTOaPx9Lk XYYqi6Qp0NFs4yf/AGD8bf6IHhTIGms+CEArwnVonZS3iij6U77PO4DNMWgh61IA clqNHLBtYlDoWhEaEj6OTAKX0UGrDZH2AjQpWwFQKHMs4bD5qfm7A/YoudfpvLU8 LGNM0zSB4V2ESJiU1sX4mi7Xg1OrvO+c8CaPsXC7hX+o7nwFCBrvjWycg3eKKaUu Xx/xFNpWVWiLldHcrt6nk3QSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7kiZJF RzBCsjlhmtcHNIj9AiRCMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHLGk1gK1k2GdrVwFLo9YZDmjRDVGigoX17wPxqPYOMmXlVIHSeQPk I1niZO4lmYCEnerfLLrBQsv3JI/xyje3a41WQaKed6uaas+V7GBinqEvp1pr83dR Xdoa84EFIXiCb2DK2Mfpa2T2rRgTEWJySzNPhOMNCttLs+ofBkulF6KP/5p/ZsC4 D8wJL1mkYOyn8EWh6/DzYwh4YYxH97ZPuk3/q9+TByEAeO+HWLqpbKbhd4DsXhWQ wTJM/OymI02ZqZeLRynSKdyTAMNm1bLw5zgutwlhXicFlu/555QsaqKTKVTzMCw5 9VoiMw0yZM8qVJGloj0ocp0rOrsoo4om -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:39 2025 by rpki-client