$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: DR2n4ltIukqYP4FtluUfUy+/8ZQ7o5jiUey2pVjHQNw= Subject key identifier: 69:6A:E8:BC:66:9A:20:37:5A:E6:DA:7F:56:6B:E7:76:58:95:45:F6 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 15F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 15F3 Signing time: Tue 04 Nov 2025 16:50:33 +0000 Manifest this update: Tue 04 Nov 2025 16:50:32 +0000 Manifest next update: Tue 11 Nov 2025 16:50:32 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: qCAhfKu3gL/aegDdf5PYQ4ASUG3H/dVBVolq1zrIbUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5619 (0x15f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Nov 4 16:50:32 2025 GMT Not After : Nov 11 16:50:32 2025 GMT Subject: CN=690a2ed9-5a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:40:7b:77:23:1d:d9:0c:25:1a:e2:1f:bb: f4:29:06:82:6c:50:bb:09:fa:d0:b4:e9:6e:dc:8a: 7f:e3:c4:be:2d:e1:62:ca:8b:81:72:b4:8f:7b:be: 28:ea:47:be:93:1f:ac:e4:8e:54:03:96:08:56:52: 6e:c7:a9:8c:32:77:14:73:1e:ae:36:ea:ea:90:69: b3:2a:4f:1a:dc:a3:5e:03:98:94:3b:2e:59:11:2f: 28:65:85:92:cf:e3:14:7a:70:32:b6:27:11:16:7e: 22:e2:9a:f0:ca:a3:e2:b9:13:54:0d:f7:2e:d7:be: 95:7e:c7:c4:52:cb:8b:1f:fa:b6:09:f5:8f:bd:76: 8c:a8:af:9b:41:ef:cc:64:58:06:02:1a:a8:69:df: 14:99:1f:b0:7f:90:b3:0f:51:69:72:5f:4e:5c:c3: 2d:09:85:29:73:47:b7:e5:4e:82:34:07:88:6d:7a: 77:54:c3:0f:cd:1e:36:bb:5f:41:91:5d:08:43:36: b5:40:72:a5:fd:0f:3e:3b:ff:80:21:f4:cc:70:8d: 38:5c:0d:70:50:40:45:99:18:83:31:95:fe:e1:db: 32:db:b3:c5:b3:ef:9d:c3:46:9d:1d:88:e6:51:29: fc:ee:4e:c3:3d:18:1c:18:10:5b:8b:8c:19:25:97: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6A:E8:BC:66:9A:20:37:5A:E6:DA:7F:56:6B:E7:76:58:95:45:F6 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:19:4b:c4:67:6c:78:31:04:e4:66:81:21:86:f9:1c:50:97: 06:82:5d:3f:11:d2:f1:a3:48:c1:82:3e:03:89:0c:8b:16:1c: d7:eb:ba:a3:18:ba:94:d4:e6:b3:8b:f0:e0:a2:e2:38:d0:9a: 8d:60:24:cc:1a:5d:83:e2:91:e5:b9:46:31:a4:18:07:89:97: cf:75:b5:21:c4:0f:d6:f3:ed:1f:47:49:61:2f:f2:fd:a7:54: b0:a8:18:6a:a6:d8:9d:c8:7e:db:af:df:be:2b:aa:3d:ce:0d: 19:64:e7:d1:87:dd:8c:c0:e8:f4:a6:11:3c:11:be:0e:33:27: 9d:6b:ff:7e:4d:3d:de:b9:f9:71:44:48:ad:77:b5:d4:ad:17: ca:2a:f4:80:d7:0a:71:e1:8a:5e:a3:24:41:12:b4:10:5e:96: 8a:ac:70:82:c9:b0:6d:bc:a0:a6:d2:e0:3d:8b:47:5a:ff:03: d8:3d:25:42:a6:ba:a6:0b:d1:a3:16:27:73:59:f3:0b:54:c5: fb:8f:ca:f3:2f:4a:84:9c:43:82:ea:4a:6a:0b:33:46:f8:df: 5d:98:b3:8e:b0:be:3d:0e:48:2b:72:9b:54:77:aa:da:5e:6b: a7:1f:b6:3b:74:a2:1d:af:78:c6:67:77:e5:ef:98:a3:01:9c: c0:21:48:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUxMTA0MTY1MDMyWhcNMjUxMTExMTY1MDMyWjAYMRYwFAYD VQQDEw02OTBhMmVkOS01YTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GRAe3cjHdkMJRriH7v0KQaCbFC7CfrQtOlu3Ip/48S+LeFiyouBcrSPe74o 6ke+kx+s5I5UA5YIVlJux6mMMncUcx6uNurqkGmzKk8a3KNeA5iUOy5ZES8oZYWS z+MUenAyticRFn4i4prwyqPiuRNUDfcu176VfsfEUsuLH/q2CfWPvXaMqK+bQe/M ZFgGAhqoad8UmR+wf5CzD1Fpcl9OXMMtCYUpc0e35U6CNAeIbXp3VMMPzR42u19B kV0IQza1QHKl/Q8+O/+AIfTMcI04XA1wUEBFmRiDMZX+4dsy27PFs++dw0adHYjm USn87k7DPRgcGBBbi4wZJZd9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlq6Lxm miA3Wubaf1Zr53ZYlUX2MB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7GUvEZ2x4MQTkZoEhhvkcUJcGgl0/EdLxo0jBgj4DiQyLFhzX67qj GLqU1Oazi/DgouI40JqNYCTMGl2D4pHluUYxpBgHiZfPdbUhxA/W8+0fR0lhL/L9 p1SwqBhqptidyH7br9++K6o9zg0ZZOfRh92MwOj0phE8Eb4OMyeda/9+TT3euflx REitd7XUrRfKKvSA1wpx4YpeoyRBErQQXpaKrHCCybBtvKCm0uA9i0da/wPYPSVC prqmC9GjFidzWfMLVMX7j8rzL0qEnEOC6kpqCzNG+N9dmLOOsL49DkgrcptUd6ra XmunH7Y7dKIdr3jGZ3fl75ijAZzAIUje -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:10 2025 by rpki-client