$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: 5K9DlLmCBXSbpuIYP8mVPyQgsWwVjMqrO0XGv1o9wEc= Subject key identifier: E8:BD:25:E9:D5:AC:48:45:7A:D8:B1:64:80:19:5F:0E:82:66:90:DF Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 150D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 14EC Signing time: Tue 04 Nov 2025 16:56:27 +0000 Manifest this update: Tue 04 Nov 2025 16:56:27 +0000 Manifest next update: Tue 11 Nov 2025 16:56:27 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: 6gUyhh+JBRrk4ge+Ec8YjdzucpiZF7NUfI3NrCSkLh8=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5389 (0x150d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Nov 4 16:56:27 2025 GMT Not After : Nov 11 16:56:27 2025 GMT Subject: CN=690a303b-26c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e5:6f:c3:a2:1d:1f:71:07:94:95:b0:96:49: 47:b6:23:5c:5b:13:fd:cf:f7:d8:89:89:1f:72:d8: 9e:a0:85:18:e1:1d:2a:d4:71:be:53:bf:50:fe:2d: bf:ea:5f:23:1e:86:7e:f6:08:aa:d3:ad:e5:72:3d: de:40:80:e4:5a:49:2a:1e:4b:5a:a0:cf:93:d9:cb: a2:4d:ed:17:97:f4:1e:51:56:36:32:92:cd:cd:c3: f0:d5:4a:b2:95:b2:bc:ae:4a:a5:74:d1:24:61:e3: 96:8e:9b:07:36:55:1d:89:24:1f:d5:3c:35:14:2f: 2b:6f:c2:0c:e8:8a:9a:eb:94:3e:56:eb:55:cf:c1: 67:04:fd:4d:a7:d1:f1:f8:07:81:08:b8:a8:c5:bb: 86:6c:2a:f8:5b:f9:cb:0a:4b:bd:2b:67:ff:b9:a5: 4a:f6:d6:29:44:c7:00:bc:57:81:34:69:e3:d9:ef: fa:6e:68:0b:e9:3e:4f:c5:31:3d:e8:6f:6e:6f:1e: c4:be:77:4d:a8:24:c4:b9:8d:02:a1:69:be:2a:a2: 13:c6:80:ad:15:8f:6d:30:fb:4d:cc:4f:01:ad:ad: 9a:80:09:d3:76:3f:30:8c:82:db:99:b3:ee:e8:28: 36:e4:fc:1c:99:68:a3:bf:ee:3a:5e:7f:64:2c:eb: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BD:25:E9:D5:AC:48:45:7A:D8:B1:64:80:19:5F:0E:82:66:90:DF X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7a:c4:fe:8d:60:53:fb:ac:de:eb:a3:52:5e:8b:16:a9:e7: a5:ae:dd:bf:53:81:f5:01:a0:b9:b6:06:f0:93:5c:dd:70:8b: c9:91:74:4d:28:72:54:01:bc:d2:8b:8b:62:e6:74:ae:03:27: 3e:69:ef:07:80:26:08:fb:c7:1d:bb:3a:b5:c7:4e:91:08:d5: 75:2a:86:72:7e:37:96:ab:b5:d8:ca:56:e5:52:1d:39:97:74: 84:b4:6c:32:e1:cd:9c:56:36:76:3f:84:b6:fc:1e:be:87:28: d3:b5:4e:25:33:bb:06:e3:02:5e:cf:e4:d4:98:94:f9:2d:72: 41:b2:9e:4f:a9:8a:88:5f:56:e5:f7:ee:4e:bd:fd:bb:ca:7c: 01:84:ee:34:ce:56:8a:ab:e2:0b:b5:9b:9d:e0:2a:a4:2d:3f: de:fc:da:0e:e7:5f:42:ad:23:af:2f:31:fc:24:21:84:c5:9b: 79:7b:74:3a:e3:e6:d4:b3:9c:72:4c:3a:31:b9:da:ca:e2:d1: d9:e9:6a:98:44:9e:2b:cd:5d:bd:8b:fb:4d:a8:4a:7f:8b:74: f5:80:08:d5:16:cc:ce:65:70:11:5d:52:a5:cc:bc:1f:a1:49: dc:dd:4d:3f:9b:db:b0:db:33:f5:f3:22:7c:40:74:ac:83:f3: 82:33:2b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUxMTA0MTY1NjI3WhcNMjUxMTExMTY1NjI3WjAYMRYwFAYD VQQDEw02OTBhMzAzYi0yNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eVvw6IdH3EHlJWwlklHtiNcWxP9z/fYiYkfctieoIUY4R0q1HG+U79Q/i2/ 6l8jHoZ+9giq063lcj3eQIDkWkkqHktaoM+T2cuiTe0Xl/QeUVY2MpLNzcPw1Uqy lbK8rkqldNEkYeOWjpsHNlUdiSQf1Tw1FC8rb8IM6Iqa65Q+VutVz8FnBP1Np9Hx +AeBCLioxbuGbCr4W/nLCku9K2f/uaVK9tYpRMcAvFeBNGnj2e/6bmgL6T5PxTE9 6G9ubx7EvndNqCTEuY0CoWm+KqITxoCtFY9tMPtNzE8Bra2agAnTdj8wjILbmbPu 6Cg25PwcmWijv+46Xn9kLOuSOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi9JenV rEhFetixZIAZXw6CZpDfMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyesT+jWBT+6ze66NSXosWqeelrt2/U4H1AaC5tgbwk1zdcIvJkXRN KHJUAbzSi4ti5nSuAyc+ae8HgCYI+8cduzq1x06RCNV1KoZyfjeWq7XYylblUh05 l3SEtGwy4c2cVjZ2P4S2/B6+hyjTtU4lM7sG4wJez+TUmJT5LXJBsp5PqYqIX1bl 9+5Ovf27ynwBhO40zlaKq+ILtZud4CqkLT/e/NoO519CrSOvLzH8JCGExZt5e3Q6 4+bUs5xyTDoxudrK4tHZ6WqYRJ4rzV29i/tNqEp/i3T1gAjVFszOZXARXVKlzLwf oUnc3U0/m9uw2zP18yJ8QHSsg/OCMytg -----END CERTIFICATE-----Generated at Thu Nov 6 02:57:01 2025 by rpki-client