$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: DPQwND+66k+r7osd80Ts1rte5rZp7I0UHM1iRieKL+s= Subject key identifier: 45:3A:47:D5:8C:CD:9C:C6:B6:A9:6F:CB:60:E8:D8:D5:21:A6:5D:17 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0CFC Signing time: Tue 04 Nov 2025 18:09:19 +0000 Manifest this update: Tue 04 Nov 2025 18:09:18 +0000 Manifest next update: Tue 11 Nov 2025 18:09:18 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: H5MkxPf4FlDbDcDbIkTF4qWIxkzIMHrOju/MOWxSkpg=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Nov 4 18:09:18 2025 GMT Not After : Nov 11 18:09:18 2025 GMT Subject: CN=690a414e-2af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:ac:1d:04:80:c4:02:5b:f1:c8:bc:a8:75: 47:8f:9c:c6:a4:ac:98:2b:63:d2:c7:64:24:f7:e4: ec:09:8d:c8:c8:07:06:6f:30:b6:45:b2:5e:a6:2f: d0:38:52:f7:8c:bf:d0:6f:22:56:08:48:09:ca:58: a2:a7:e6:6e:52:c6:6d:be:dc:41:40:49:73:4b:7a: f6:5a:85:c3:e8:99:28:b8:d5:04:29:aa:00:69:7b: 14:40:22:31:1b:3f:90:fe:8e:44:6c:fe:33:fb:69: 27:b4:0d:94:4f:55:60:81:79:b3:6d:99:6a:8b:19: c4:bc:b6:c4:5d:68:f3:da:61:4f:df:e1:9d:3e:95: 3d:01:c9:ff:0d:32:ce:6a:67:27:2f:0f:77:f1:2f: 79:0e:52:84:93:a5:1d:e3:d6:c7:aa:04:ad:14:b9: 38:32:92:e3:aa:49:b8:ea:c4:0b:43:3c:2c:17:da: 1b:d8:5a:e1:41:b2:78:71:4c:61:fb:fc:b0:46:f7: 00:1e:03:50:47:ec:8c:e4:a0:38:55:ca:34:5f:81: d6:9d:da:6b:08:f3:00:74:7a:72:4f:f0:14:2c:28: 9f:b5:81:a5:d5:d4:f5:bb:38:27:13:de:60:2a:19: 2f:7a:dc:c5:57:95:ec:fa:85:12:f6:61:b2:72:57: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3A:47:D5:8C:CD:9C:C6:B6:A9:6F:CB:60:E8:D8:D5:21:A6:5D:17 X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:eb:a3:14:f5:35:03:d1:21:e7:6b:ed:78:09:0e:cd:e1:78: b7:f8:94:07:bb:29:6c:01:4c:47:16:ae:0a:7d:1d:02:c0:48: 7e:57:a2:6a:da:77:ae:56:29:94:8a:90:60:ea:23:d2:0e:b2: 63:37:d5:e6:14:9c:69:25:ad:8b:f1:52:f6:4f:56:79:38:e1: 43:ea:78:1d:7c:bd:6c:e1:0a:9b:66:35:b9:af:97:c7:3b:9e: b3:6d:0f:cc:e5:9d:cb:e3:78:16:6d:a9:c5:e5:29:1b:f0:10: a9:d2:f7:54:d5:fc:4b:38:ec:70:c6:bd:06:0b:56:ec:f0:1b: 62:60:76:38:9b:ab:dd:65:88:f9:19:cf:60:80:19:c0:d5:82: 3f:01:20:df:9b:78:5f:9f:e0:73:09:e5:e2:9c:52:5d:c4:7d: 04:31:8a:38:7b:7a:12:9f:48:af:2f:8a:20:0b:01:63:14:6d: 52:6d:40:0a:f1:d5:9c:cb:ca:9c:be:45:dd:09:e2:6b:45:0a: 19:7d:27:dd:d9:bb:f9:21:5f:e1:a6:9c:2f:d6:d3:a7:9a:82: ac:54:c1:d4:97:39:35:3f:4e:54:a2:99:83:a3:3f:6d:c4:16: 07:2c:ce:6c:10:a8:6c:3c:50:d6:4a:77:ce:e4:65:df:2c:a5: cb:6e:86:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUxMTA0MTgwOTE4WhcNMjUxMTExMTgwOTE4WjAYMRYwFAYD VQQDEw02OTBhNDE0ZS0yYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgysHQSAxAJb8ci8qHVHj5zGpKyYK2PSx2Qk9+TsCY3IyAcGbzC2RbJepi/Q OFL3jL/QbyJWCEgJyliip+ZuUsZtvtxBQElzS3r2WoXD6JkouNUEKaoAaXsUQCIx Gz+Q/o5EbP4z+2kntA2UT1VggXmzbZlqixnEvLbEXWjz2mFP3+GdPpU9Acn/DTLO amcnLw938S95DlKEk6Ud49bHqgStFLk4MpLjqkm46sQLQzwsF9ob2FrhQbJ4cUxh +/ywRvcAHgNQR+yM5KA4Vco0X4HWndprCPMAdHpyT/AULCiftYGl1dT1uzgnE95g KhkvetzFV5Xs+oUS9mGyclfoDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU6R9WM zZzGtqlvy2Do2NUhpl0XMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF66MU9TUD0SHna+14CQ7N4Xi3+JQHuylsAUxHFq4KfR0CwEh+V6Jq 2neuVimUipBg6iPSDrJjN9XmFJxpJa2L8VL2T1Z5OOFD6ngdfL1s4QqbZjW5r5fH O56zbQ/M5Z3L43gWbanF5Skb8BCp0vdU1fxLOOxwxr0GC1bs8BtiYHY4m6vdZYj5 Gc9ggBnA1YI/ASDfm3hfn+BzCeXinFJdxH0EMYo4e3oSn0ivL4ogCwFjFG1SbUAK 8dWcy8qcvkXdCeJrRQoZfSfd2bv5IV/hppwv1tOnmoKsVMHUlzk1P05UopmDoz9t xBYHLM5sEKhsPFDWSnfO5GXfLKXLboZ0 -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:06 2025 by rpki-client