$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: 5mqnQlboYrmkA9UWe631rp4Ctg1rFS56K6Zp9liSMuo= Subject key identifier: 57:96:83:75:D1:E3:75:B4:2D:C5:08:F9:C9:63:1D:39:BB:6C:1E:3F Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 08BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 08B6 Signing time: Sun 02 Nov 2025 20:26:23 +0000 Manifest this update: Sun 02 Nov 2025 20:26:22 +0000 Manifest next update: Sun 09 Nov 2025 20:26:22 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: ZucuNQNe5LIHI11VxyWK60QKFXvGjeMZUudA6qaO7gM=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2236 (0x8bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Nov 2 20:26:22 2025 GMT Not After : Nov 9 20:26:22 2025 GMT Subject: CN=6907be6f-e27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a6:fd:34:59:42:38:57:b2:26:1d:53:8b:e7: da:49:c8:4d:40:da:3f:16:d8:c4:52:eb:af:d7:07: 2e:fb:96:95:d1:b0:76:bd:1a:6f:08:45:b4:06:5a: 79:c1:25:08:18:7b:a7:69:83:54:26:0d:ab:e6:67: 04:9c:70:7a:f6:27:4f:bf:38:c1:1c:02:e4:f1:33: 92:59:d2:4e:1d:01:a4:fe:35:5b:01:b0:3d:1e:56: 35:ce:18:b4:9a:62:ba:8b:7a:6c:a8:b6:3f:d9:05: bd:2c:94:ba:4d:0a:dc:33:15:bc:10:1a:24:c7:ae: bc:e8:63:62:a1:e5:76:9d:6b:b2:f8:0b:08:bb:96: 73:8c:4b:f1:d0:33:e6:7f:12:43:f6:87:49:4b:be: 96:4d:51:b4:a6:ef:2c:9b:b3:e4:11:3a:c5:fd:96: f9:e9:b7:7f:f5:a4:93:d9:35:ec:ff:97:7b:a4:6b: 6f:f6:9b:14:e0:40:b7:e4:21:2a:af:ae:72:9c:a4: 4d:53:b6:0e:e5:79:31:b7:98:e6:98:ff:82:dc:e5: 1a:bc:d9:ed:2e:47:90:4c:d7:c4:9c:06:48:c7:8f: a1:35:eb:41:e0:da:ef:0c:b4:bc:da:67:ab:58:28: cb:1d:44:93:35:1c:91:ea:db:30:69:17:2e:7e:15: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:96:83:75:D1:E3:75:B4:2D:C5:08:F9:C9:63:1D:39:BB:6C:1E:3F X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:dd:9b:00:b3:17:5b:ed:56:38:be:f5:26:9e:82:b7:cd:9a: c6:23:76:49:f1:52:c6:11:95:03:fd:b5:a0:2e:9d:22:58:61: 72:c0:e8:37:4a:61:0f:d8:00:3b:8f:d3:41:58:be:f1:5d:41: 56:08:cc:0e:45:91:c7:e5:f0:cd:ad:15:4f:61:ba:dc:a4:68: a5:26:ec:0c:08:e3:cc:e2:d8:ba:d7:aa:40:b5:14:f0:f4:fb: c6:eb:6d:a3:a2:e1:a9:f7:d6:78:f9:c0:db:35:55:f1:4d:41: 35:48:6e:5c:69:21:7d:89:0d:74:e3:96:de:aa:19:73:e5:db: 83:83:77:52:8d:af:4f:7b:0f:ab:df:e8:48:ef:a9:1b:bf:f7: 07:c0:22:56:0d:45:9f:74:b9:eb:ba:5e:56:d4:1c:96:6d:7f: 0c:63:fd:cc:c3:93:f3:cd:66:3c:14:4b:5a:97:b1:af:36:f4: 4c:c9:86:b9:dd:69:bd:1e:eb:91:ab:7a:ad:f8:40:a7:02:9b: a9:3c:18:96:44:df:e8:6b:a3:cc:3d:df:90:be:63:30:c7:25: 59:b1:66:69:ae:e1:b2:e2:9d:2a:0e:1a:55:f4:01:56:18:e6: 07:01:a6:61:a4:00:c3:8a:03:97:6d:46:a2:7f:46:d8:6f:b5: 46:50:27:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUxMTAyMjAyNjIyWhcNMjUxMTA5MjAyNjIyWjAYMRYwFAYD VQQDEw02OTA3YmU2Zi1lMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Kb9NFlCOFeyJh1Ti+faSchNQNo/FtjEUuuv1wcu+5aV0bB2vRpvCEW0Blp5 wSUIGHunaYNUJg2r5mcEnHB69idPvzjBHALk8TOSWdJOHQGk/jVbAbA9HlY1zhi0 mmK6i3psqLY/2QW9LJS6TQrcMxW8EBokx6686GNioeV2nWuy+AsIu5ZzjEvx0DPm fxJD9odJS76WTVG0pu8sm7PkETrF/Zb56bd/9aST2TXs/5d7pGtv9psU4EC35CEq r65ynKRNU7YO5Xkxt5jmmP+C3OUavNntLkeQTNfEnAZIx4+hNetB4NrvDLS82mer WCjLHUSTNRyR6tswaRcufhVzCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeWg3XR 43W0LcUI+cljHTm7bB4/MB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg3ZsAsxdb7VY4vvUmnoK3zZrGI3ZJ8VLGEZUD/bWgLp0iWGFywOg3 SmEP2AA7j9NBWL7xXUFWCMwORZHH5fDNrRVPYbrcpGilJuwMCOPM4ti616pAtRTw 9PvG622jouGp99Z4+cDbNVXxTUE1SG5caSF9iQ1045beqhlz5duDg3dSja9Pew+r 3+hI76kbv/cHwCJWDUWfdLnrul5W1ByWbX8MY/3Mw5PzzWY8FEtal7GvNvRMyYa5 3Wm9HuuRq3qt+ECnApupPBiWRN/oa6PMPd+QvmMwxyVZsWZpruGy4p0qDhpV9AFW GOYHAaZhpADDigOXbUaif0bYb7VGUCc3 -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:58 2025 by rpki-client