$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: DKyEbZZJD37tSOVqMFwJRbuM5w725vErKQX1pk/cnzc= Subject key identifier: 30:23:CE:21:F4:00:1E:2F:EF:7B:96:33:AB:53:D4:11:67:E8:26:D9 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 2497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 2477 Signing time: Tue 04 Nov 2025 15:52:15 +0000 Manifest this update: Tue 04 Nov 2025 15:52:15 +0000 Manifest next update: Tue 11 Nov 2025 15:52:15 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: 2xvIZ9IXhTeCY2er4XI4kzZ9GgZn71dPnVYzbhyGq2A=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: Jn0BrvewJ0VHEBEPQp+4AkXwLJvrQBlbc50TDzwhQxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9367 (0x2497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Nov 4 15:52:15 2025 GMT Not After : Nov 11 15:52:15 2025 GMT Subject: CN=690a212f-2f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:37:3b:36:9e:de:3a:fa:48:5e:40:58:54: 17:68:52:b2:73:37:36:98:d3:0e:dd:87:b4:49:56: f9:3f:d5:ba:fa:9b:a4:aa:3f:4b:67:16:be:6c:f9: 29:23:64:8a:f8:6a:53:7d:de:15:67:c2:6c:41:66: 67:61:e0:ab:8b:33:22:36:a4:a9:8d:c0:13:c0:00: c9:20:34:ab:d5:fa:42:04:b5:a5:bc:48:69:2f:d8: 81:01:71:92:9b:cc:1e:6c:90:67:d3:32:b2:7c:a5: b4:c5:a6:c2:89:9d:3e:ce:fc:d7:d6:3c:17:d3:5e: 2d:6a:42:d8:df:44:57:90:b0:de:76:a1:e3:92:55: 6c:27:78:a5:a1:b3:97:7e:c5:ba:3b:b7:27:66:52: 27:98:82:9e:0e:f2:20:79:d4:c1:e9:90:ba:e2:f7: 54:d2:63:aa:75:bf:61:91:ff:b6:52:aa:d6:ea:d1: fb:6f:32:db:7d:be:4a:9f:21:43:9b:e3:e6:b6:41: 3f:c7:1a:be:61:cc:24:d4:a9:ae:1b:10:0c:ed:b1: 22:e5:a8:40:b8:10:37:d1:18:13:b1:19:b9:24:29: b5:74:f7:79:60:77:87:5f:19:b3:82:82:b6:75:70: 37:48:39:b4:5b:5f:f5:a1:aa:96:2a:fd:fc:6a:fe: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:CE:21:F4:00:1E:2F:EF:7B:96:33:AB:53:D4:11:67:E8:26:D9 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d8:75:8f:85:89:29:48:d1:df:f6:0c:4c:93:9b:6b:3b:a3: 12:2c:f7:df:ec:98:09:f3:a5:ae:ad:2d:97:95:f2:31:5f:be: 42:29:84:a5:fb:b7:6f:da:b0:08:b6:ad:31:60:c7:43:71:7c: d1:3b:c2:24:c9:65:a0:ee:bc:d5:6b:73:3d:c9:37:43:78:a4: 6e:75:57:fd:ab:48:df:75:da:eb:46:3a:4a:55:20:35:df:9d: 12:1b:3a:4c:83:03:31:ad:98:c4:8b:dd:67:66:30:b3:33:6c: 64:7a:2c:b1:11:83:57:fe:b1:d0:dc:d2:22:a9:76:b9:08:03: d6:c0:40:89:5a:ca:32:e9:31:0c:a9:e3:32:0a:70:91:4e:28: eb:ec:b3:77:35:fd:86:54:12:91:54:9d:c9:ae:19:03:17:64: 0a:cf:ea:39:77:7d:e3:66:b0:96:85:5c:b8:ac:ce:85:cc:f9: dc:dc:88:f4:c0:0a:a9:7d:85:a6:aa:ae:e5:1d:ad:b0:85:78: 3e:9c:cb:fe:b1:96:27:0e:00:81:25:41:08:60:80:55:cf:fa: fa:40:fe:73:80:b9:0d:35:d5:dd:0f:e5:4d:76:09:dc:70:7b: ba:d3:a7:84:59:44:b0:e5:6e:4d:27:1b:37:3b:e6:a5:c3:84: 0c:19:f9:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUxMTA0MTU1MjE1WhcNMjUxMTExMTU1MjE1WjAYMRYwFAYD VQQDEw02OTBhMjEyZi0yZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5c3Ozae3jr6SF5AWFQXaFKyczc2mNMO3Ye0SVb5P9W6+pukqj9LZxa+bPkp I2SK+GpTfd4VZ8JsQWZnYeCrizMiNqSpjcATwADJIDSr1fpCBLWlvEhpL9iBAXGS m8webJBn0zKyfKW0xabCiZ0+zvzX1jwX014takLY30RXkLDedqHjklVsJ3ilobOX fsW6O7cnZlInmIKeDvIgedTB6ZC64vdU0mOqdb9hkf+2UqrW6tH7bzLbfb5KnyFD m+PmtkE/xxq+Ycwk1KmuGxAM7bEi5ahAuBA30RgTsRm5JCm1dPd5YHeHXxmzgoK2 dXA3SDm0W1/1oaqWKv38av784wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAjziH0 AB4v73uWM6tT1BFn6CbZMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW2HWPhYkpSNHf9gxMk5trO6MSLPff7JgJ86WurS2XlfIxX75CKYSl +7dv2rAItq0xYMdDcXzRO8IkyWWg7rzVa3M9yTdDeKRudVf9q0jfddrrRjpKVSA1 350SGzpMgwMxrZjEi91nZjCzM2xkeiyxEYNX/rHQ3NIiqXa5CAPWwECJWsoy6TEM qeMyCnCRTijr7LN3Nf2GVBKRVJ3JrhkDF2QKz+o5d33jZrCWhVy4rM6FzPnc3Ij0 wAqpfYWmqq7lHa2whXg+nMv+sZYnDgCBJUEIYIBVz/r6QP5zgLkNNdXdD+VNdgnc cHu606eEWUSw5W5NJxs3O+alw4QMGfmC -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:17 2025 by rpki-client