$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: /dqvNLLv91j211ErXYpGJM+Uoh0Hk+c30iehEfBs0Sc= Subject key identifier: 36:BB:AA:DC:61:0D:8A:B7:72:D3:32:68:A5:D5:68:87:CA:0B:D3:E1 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B5E Signing time: Tue 04 Nov 2025 16:22:29 +0000 Manifest this update: Tue 04 Nov 2025 16:22:28 +0000 Manifest next update: Tue 11 Nov 2025 16:22:28 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: EOYz9h/grGjr94kwpGda2qDhpL8JcRLQO/XAZ02NOfo=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7030 (0x1b76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Nov 4 16:22:28 2025 GMT Not After : Nov 11 16:22:28 2025 GMT Subject: CN=690a2845-d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:d3:7c:de:da:69:da:d7:c2:eb:11:78:f3: b6:83:16:3e:19:e0:eb:b5:a5:12:58:88:96:90:26: 11:d5:aa:28:6c:62:52:b4:4c:a8:9e:dc:46:9f:35: 28:d2:1e:94:4b:5e:84:59:c8:bf:f2:01:6f:4e:e3: 39:a7:d5:6a:02:5f:b3:e7:80:87:11:70:66:2e:2a: 90:4a:ab:22:59:40:25:19:8b:41:06:fe:8c:ba:e4: 78:ef:31:1d:f3:50:3b:5d:18:f6:3c:4d:c1:ef:89: 1d:a1:f5:7f:cf:a2:e8:9b:d3:63:b0:41:95:14:00: a2:a4:ca:14:4b:ae:86:ea:eb:74:0a:56:5f:8a:0e: 10:10:65:51:fb:4a:a1:99:57:a9:9f:94:c4:9c:9c: b9:71:d6:2c:94:b6:4d:a5:36:a2:d9:29:3b:02:4f: c8:02:72:b9:3a:f5:d4:a2:58:bb:53:5f:51:be:96: 2a:c3:6c:4b:9e:49:f9:93:1a:20:cd:39:1e:b0:44: 0c:2b:8e:92:f6:e9:9a:32:17:24:27:e8:97:8d:15: 12:0e:3d:07:38:1d:0f:c3:bd:3a:43:6f:0d:37:4e: 69:1d:42:f2:10:13:6f:54:17:f8:f1:fa:3f:f6:8b: 6f:23:b8:b5:d0:31:36:84:ca:80:64:32:c3:09:b5: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:AA:DC:61:0D:8A:B7:72:D3:32:68:A5:D5:68:87:CA:0B:D3:E1 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d4:49:61:f2:c4:ea:b3:93:a1:82:66:50:5f:74:84:03:e7: 45:2e:74:66:d3:1c:a0:0d:a4:48:86:3c:cd:6e:ce:f6:2a:8e: 59:83:1e:13:5b:eb:c5:46:6d:b4:36:6f:5c:d5:0a:e0:26:e3: bf:0f:3b:71:d9:ae:55:2f:56:78:9b:84:a9:9a:7b:a0:4a:c2: c4:2e:78:90:c8:ab:9b:a5:78:6f:37:f8:ce:d7:0b:e8:8c:b1: e3:11:b0:a8:4f:1b:d1:58:67:fc:f5:ed:f7:60:34:02:c8:1f: 4f:90:f8:90:a8:6b:39:23:47:53:61:5b:04:db:f3:a7:b7:b8: b0:85:d1:02:55:76:c6:04:06:c0:1d:2d:d1:51:7e:1b:17:ee: 54:79:b6:a0:62:0e:13:49:66:aa:25:c6:34:af:0d:4b:f5:0c: 9c:4e:3f:0b:77:72:91:75:65:2d:57:a3:52:a1:7a:80:de:8d: de:eb:3b:cd:b9:a4:3d:69:1a:a9:60:a7:e2:6c:73:19:de:0f: 60:23:a0:82:8e:66:65:df:ce:d1:dd:c9:a8:3e:2d:90:56:74: d0:24:1a:53:89:32:a7:fe:b6:06:fc:22:fc:2a:14:60:c5:03: 99:51:d4:62:73:ff:fb:cf:35:79:09:93:a4:e9:da:fa:d7:9e: db:3d:fd:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUxMTA0MTYyMjI4WhcNMjUxMTExMTYyMjI4WjAYMRYwFAYD VQQDEw02OTBhMjg0NS1kNDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj3TfN7aadrXwusRePO2gxY+GeDrtaUSWIiWkCYR1aoobGJStEyontxGnzUo 0h6US16EWci/8gFvTuM5p9VqAl+z54CHEXBmLiqQSqsiWUAlGYtBBv6MuuR47zEd 81A7XRj2PE3B74kdofV/z6Lom9NjsEGVFACipMoUS66G6ut0ClZfig4QEGVR+0qh mVepn5TEnJy5cdYslLZNpTai2Sk7Ak/IAnK5OvXUoli7U19RvpYqw2xLnkn5kxog zTkesEQMK46S9umaMhckJ+iXjRUSDj0HOB0Pw706Q28NN05pHULyEBNvVBf48fo/ 9otvI7i10DE2hMqAZDLDCbWAwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa7qtxh DYq3ctMyaKXVaIfKC9PhMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB1Elh8sTqs5OhgmZQX3SEA+dFLnRm0xygDaRIhjzNbs72Ko5Zgx4T W+vFRm20Nm9c1QrgJuO/Dztx2a5VL1Z4m4SpmnugSsLELniQyKubpXhvN/jO1wvo jLHjEbCoTxvRWGf89e33YDQCyB9PkPiQqGs5I0dTYVsE2/Ont7iwhdECVXbGBAbA HS3RUX4bF+5UebagYg4TSWaqJcY0rw1L9QycTj8Ld3KRdWUtV6NSoXqA3o3e6zvN uaQ9aRqpYKfibHMZ3g9gI6CCjmZl387R3cmoPi2QVnTQJBpTiTKn/rYG/CL8KhRg xQOZUdRic//7zzV5CZOk6dr6157bPf06 -----END CERTIFICATE-----Generated at Wed Nov 5 21:40:09 2025 by rpki-client