$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: i7TYEKUN0ct8OfNN3ySsu30zmmvVg25kORo7E6GuZCI= Subject key identifier: AF:2C:17:D5:D5:AF:4D:C0:89:A6:AA:94:06:D7:29:7E:A9:14:48:5D Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 0944 Signing time: Sun 02 Nov 2025 20:09:34 +0000 Manifest this update: Sun 02 Nov 2025 20:09:33 +0000 Manifest next update: Sun 09 Nov 2025 20:09:33 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: lkndtNiwrqU5WRRAe7mMiSdXSV7aDhFGcBfw7QDgDcc=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: WjFZEedMDw0JbPWqqHGuTrg3MKW0ZTVgSyL2yBJOKwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Nov 2 20:09:33 2025 GMT Not After : Nov 9 20:09:33 2025 GMT Subject: CN=6907ba7e-d3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:26:25:9b:dc:ce:3b:b2:14:42:92:00:7c: e5:77:b3:b0:71:95:8c:d1:6b:52:97:bd:85:d4:41: 20:3d:27:9e:9a:bf:6e:0c:7b:3d:2c:aa:44:62:9f: 49:5a:6f:36:3e:c7:65:c2:df:0b:27:73:7b:57:e9: f7:06:27:01:de:04:b6:58:dc:8a:fb:cc:a0:b1:09: b1:e6:8f:b5:12:57:c9:16:05:32:8a:ad:8b:8d:cb: 7c:c7:d3:81:ab:c7:95:ef:4e:af:b3:0d:02:72:d7: fa:df:9a:64:59:4a:8f:4e:b6:8e:ce:96:7e:25:13: 58:e4:15:e4:93:3f:00:74:3d:b2:32:91:4a:3a:99: 15:80:8b:c2:a9:fd:c2:40:a7:70:d4:aa:05:ec:cb: 7e:8b:d0:72:cf:3a:83:a8:88:e4:41:30:7a:3f:56: 42:94:91:d7:e8:62:e4:a0:68:e3:f9:ea:63:4a:ce: 6b:f0:5e:e8:08:88:fa:88:c1:45:45:d5:93:0f:10: 80:c5:80:59:85:51:96:ea:99:8b:fe:a4:53:d6:ff: 37:7e:7e:7e:e3:56:cf:1f:03:14:28:86:48:23:e0: 58:be:cf:7f:ce:6d:06:72:c1:b9:a5:b6:74:48:b9: c2:d4:56:11:61:bf:e7:88:a3:dc:6b:db:ac:62:5d: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:17:D5:D5:AF:4D:C0:89:A6:AA:94:06:D7:29:7E:A9:14:48:5D X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5d:ec:ec:ca:d9:14:b6:5f:ce:97:66:46:f8:32:aa:c3:d5: 37:d2:d9:49:f8:f2:98:c1:53:a2:c0:7b:bd:9a:39:3b:dd:a6: a4:ae:09:b0:23:21:61:60:b2:c6:f3:f0:62:63:75:7e:05:39: 9e:d3:1f:ef:c3:cd:1e:a6:c0:42:63:97:a9:96:78:f7:50:45: 7f:c4:53:61:ae:44:5e:0b:b1:bb:15:d1:04:02:69:56:23:49: a8:dc:1b:3b:b1:cd:93:fd:5c:98:a7:60:a9:e8:0e:1f:62:e7: 50:2c:26:86:4a:ff:0f:5a:2f:be:38:55:09:14:2e:da:20:f0: 2d:df:5e:c5:f2:7b:73:ab:49:c0:14:da:b9:c2:c0:66:df:46: 51:a4:b9:ed:8c:c9:2b:62:bf:a9:e9:3d:72:4a:dc:f4:c1:ba: 6c:ed:ba:5b:d2:e9:fc:13:b2:66:0f:7c:e9:05:ca:b8:14:48: 52:24:85:2a:93:c2:34:a9:08:bb:8f:44:97:74:a9:70:8c:5c: 4a:b6:51:ff:f4:03:ac:11:13:01:13:04:ce:60:a8:91:8f:4e: e9:bf:0d:d8:51:62:33:0c:97:cc:08:2e:82:29:d0:fd:af:12: 1f:85:37:3d:d7:03:fa:a6:a4:1b:26:cb:50:9e:11:51:b3:11: ab:99:c6:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUxMTAyMjAwOTMzWhcNMjUxMTA5MjAwOTMzWjAYMRYwFAYD VQQDEw02OTA3YmE3ZS1kM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfsmJZvczjuyFEKSAHzld7OwcZWM0WtSl72F1EEgPSeemr9uDHs9LKpEYp9J Wm82Psdlwt8LJ3N7V+n3BicB3gS2WNyK+8ygsQmx5o+1ElfJFgUyiq2Ljct8x9OB q8eV706vsw0Cctf635pkWUqPTraOzpZ+JRNY5BXkkz8AdD2yMpFKOpkVgIvCqf3C QKdw1KoF7Mt+i9ByzzqDqIjkQTB6P1ZClJHX6GLkoGjj+epjSs5r8F7oCIj6iMFF RdWTDxCAxYBZhVGW6pmL/qRT1v83fn5+41bPHwMUKIZII+BYvs9/zm0GcsG5pbZ0 SLnC1FYRYb/niKPca9usYl0j0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8sF9XV r03AiaaqlAbXKX6pFEhdMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtXezsytkUtl/Ol2ZG+DKqw9U30tlJ+PKYwVOiwHu9mjk73aakrgmw IyFhYLLG8/BiY3V+BTme0x/vw80epsBCY5eplnj3UEV/xFNhrkReC7G7FdEEAmlW I0mo3Bs7sc2T/VyYp2Cp6A4fYudQLCaGSv8PWi++OFUJFC7aIPAt317F8ntzq0nA FNq5wsBm30ZRpLntjMkrYr+p6T1yStz0wbps7bpb0un8E7JmD3zpBcq4FEhSJIUq k8I0qQi7j0SXdKlwjFxKtlH/9AOsERMBEwTOYKiRj07pvw3YUWIzDJfMCC6CKdD9 rxIfhTc91wP6pqQbJstQnhFRsxGrmcaX -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:05 2025 by rpki-client