$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: 1VnotL2gnUT+ijHixTmCYqj1VMshKA8iv4wGhV4eqFs= Subject key identifier: CA:60:A1:2F:80:CE:48:E1:C7:1B:99:C0:53:78:1E:43:2F:E1:E4:1F Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 0350 Signing time: Wed 05 Nov 2025 01:07:17 +0000 Manifest this update: Wed 05 Nov 2025 01:07:17 +0000 Manifest next update: Wed 12 Nov 2025 01:07:16 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: TGwQWb89+0blE+5uyN0Rj//u+08EZwoUJtHhISimOrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Nov 5 01:07:17 2025 GMT Not After : Nov 12 01:07:16 2025 GMT Subject: CN=690aa345-dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:ee:0c:fd:2a:0a:3b:99:37:95:a3:f7:68: 1a:fa:6a:b2:42:b5:13:d3:34:aa:04:08:19:32:70: f3:dc:7f:df:20:ab:a0:3f:a4:df:33:f9:4c:7b:af: 51:b4:42:a7:c2:1b:7d:77:34:68:d5:86:e5:05:96: 8d:52:31:2d:01:16:c6:f9:59:cb:15:5d:54:95:d8: 3f:e7:19:fb:d2:15:05:e8:b7:72:6d:3c:13:b1:97: 08:d2:4e:a2:a9:3f:e6:48:3a:4c:43:1d:a3:3d:f5: 77:9f:56:eb:a9:1e:86:a4:99:be:ce:0e:8b:8d:fc: 36:89:9f:38:77:73:40:73:a3:35:4d:a0:c0:dc:65: 48:8c:5f:e7:cb:6f:fc:6c:f8:fd:49:20:b5:d1:66: 68:49:90:53:f3:07:47:dc:90:c1:d0:55:dd:2c:3b: e1:0f:53:d7:10:30:62:20:19:e1:25:16:19:f8:28: a3:45:aa:95:24:69:64:2d:13:ab:4c:52:55:1c:79: 26:50:f7:1c:b6:c7:d0:77:1f:1f:0c:98:f9:41:52: 9c:92:c3:18:7d:77:e2:0c:89:4f:fa:3b:a9:d4:9f: 80:a7:f1:4c:69:c0:19:0b:0c:8e:c9:28:2a:30:73: 2d:a6:84:74:51:34:e6:0f:5e:92:12:43:23:8c:56: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:60:A1:2F:80:CE:48:E1:C7:1B:99:C0:53:78:1E:43:2F:E1:E4:1F X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:0e:70:51:29:ef:9a:ac:da:f3:25:d7:71:8e:91:34:7e: 2e:36:b9:9a:53:f1:38:bb:12:dd:6d:21:a7:48:a0:eb:e2:1f: ea:be:3e:9a:8e:b2:58:fc:70:b4:cb:0d:0c:49:ae:a4:72:ba: e5:0b:f3:39:53:79:5a:65:3e:7b:e1:80:51:f6:78:6d:3d:f9: a0:e5:bb:81:b2:50:8b:9e:45:f8:d8:bb:fe:30:f1:26:a1:8c: 2c:ee:ab:08:dd:cf:4f:9a:bb:17:5f:14:c6:97:53:04:89:51: fc:bc:54:d4:ab:d9:e8:87:e6:03:5f:b8:66:d4:99:23:dc:f3: c0:59:19:44:7b:02:4c:91:44:ef:8a:32:b8:7e:28:f9:c6:96: dc:cb:5e:48:2f:5e:4e:eb:06:23:f2:37:13:4b:8c:79:a7:1d: a3:20:eb:df:e9:4e:76:30:fd:d7:e5:56:8c:61:5d:91:93:75: 59:06:e3:f6:0c:df:58:1f:a9:53:d8:bf:89:a7:63:63:d1:54: 8b:99:c2:7a:ff:02:4e:65:cc:e8:0c:94:b6:55:e3:73:04:dc: 4c:f4:cc:35:f2:27:fb:06:91:18:bb:a3:ce:35:a1:e0:7b:ae: 53:91:53:4c:63:b8:ed:14:29:96:14:7f:8e:df:c7:7f:f5:3f: b5:ea:76:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjUxMTA1MDEwNzE3WhcNMjUxMTEyMDEwNzE2WjAYMRYwFAYD VQQDEw02OTBhYTM0NS1kY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPvuDP0qCjuZN5Wj92ga+mqyQrUT0zSqBAgZMnDz3H/fIKugP6TfM/lMe69R tEKnwht9dzRo1YblBZaNUjEtARbG+VnLFV1Uldg/5xn70hUF6LdybTwTsZcI0k6i qT/mSDpMQx2jPfV3n1brqR6GpJm+zg6Ljfw2iZ84d3NAc6M1TaDA3GVIjF/ny2/8 bPj9SSC10WZoSZBT8wdH3JDB0FXdLDvhD1PXEDBiIBnhJRYZ+CijRaqVJGlkLROr TFJVHHkmUPcctsfQdx8fDJj5QVKcksMYfXfiDIlP+jup1J+Ap/FMacAZCwyOySgq MHMtpoR0UTTmD16SEkMjjFa7EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpgoS+A zkjhxxuZwFN4HkMv4eQfMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWTA5wUSnvmqza8yXXcY6RNH4uNrmaU/E4uxLdbSGnSKDr4h/qvj6a jrJY/HC0yw0MSa6kcrrlC/M5U3laZT574YBR9nhtPfmg5buBslCLnkX42Lv+MPEm oYws7qsI3c9PmrsXXxTGl1MEiVH8vFTUq9noh+YDX7hm1Jkj3PPAWRlEewJMkUTv ijK4fij5xpbcy15IL15O6wYj8jcTS4x5px2jIOvf6U52MP3X5VaMYV2Rk3VZBuP2 DN9YH6lT2L+Jp2Nj0VSLmcJ6/wJOZczoDJS2VeNzBNxM9Mw18if7BpEYu6PONaHg e65TkVNMY7jtFCmWFH+O38d/9T+16nb7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:56 2025 by rpki-client