$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: wT+VpvvSsMiulFbbUr1XbE/vo8MQC/me7aWg64Ifg2E= Subject key identifier: 52:77:13:88:75:AF:56:A1:98:FB:EA:C9:4C:10:6B:F2:59:E7:FE:4B Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 085F Signing time: Tue 04 Nov 2025 20:44:23 +0000 Manifest this update: Tue 04 Nov 2025 20:44:23 +0000 Manifest next update: Tue 11 Nov 2025 20:44:23 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: kNO/JpHplSzU2BHWlHNoIjXK++DcU7ESSN8bfORM08w=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: 3IT/DHgHOTxt9Nlos2eMFej/wQukcdeUZ7Fwjd2moXo=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: kspmrSQhYNZyQkjYuTLZdSrauXWbtL77w7yiIdCBODs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Nov 4 20:44:23 2025 GMT Not After : Nov 11 20:44:23 2025 GMT Subject: CN=690a65a7-c753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:06:b9:1b:17:23:2d:30:7c:70:c6:d7:2c: 6e:68:6d:b3:8d:30:af:c3:0c:06:19:16:40:50:fe: 1e:b1:63:6b:fb:74:dd:36:af:9f:45:43:4a:23:67: b7:fd:3c:29:ee:c1:fc:c1:e6:78:ec:93:42:cc:02: 3f:80:dc:c2:0d:0e:87:aa:9d:ea:8d:d0:56:ef:09: 2c:5c:3c:e5:8e:18:97:00:00:c8:79:da:77:c3:f6: 7d:41:54:f6:c3:33:d3:39:02:01:ff:4f:88:ee:99: 80:f2:e9:7c:a9:73:fd:39:aa:df:fc:72:48:3e:2d: a0:cc:2e:5b:65:a6:e3:99:5e:44:39:93:81:39:19: 6b:09:be:ae:48:01:7d:2f:29:4e:4c:de:d2:e8:af: 4a:d2:99:25:91:39:53:11:c6:52:64:92:96:4b:1b: d6:67:c7:5f:ef:c4:cd:24:42:1a:7b:a4:b3:0e:a4: 50:04:ab:b0:55:32:a3:e7:27:58:e1:bd:14:a7:25: 5f:33:52:e9:65:5b:1c:8a:88:ae:bd:bf:2c:05:c2: ad:07:94:35:53:56:ad:78:9f:2b:7d:19:c5:af:c3: ac:06:35:a8:95:29:03:8f:5a:d3:96:4a:1f:d4:11: a4:11:f8:fd:fa:d9:cf:d9:47:8f:c9:1f:23:15:2c: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:13:88:75:AF:56:A1:98:FB:EA:C9:4C:10:6B:F2:59:E7:FE:4B X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:da:9b:14:f2:1b:6b:b6:ab:e0:e7:89:10:79:ca:24:34:01: 4d:3f:dd:68:ce:e1:13:61:41:07:fc:f4:66:b4:bc:bc:5b:45: b9:8c:68:f3:6b:17:17:cf:5c:c3:0c:97:11:d8:bc:e5:11:a5: 90:48:6d:78:7c:db:e3:bd:75:c2:c8:78:93:78:97:fb:18:b8: da:e4:d6:1a:2b:ef:a1:e1:20:c9:8b:78:63:f1:6b:b1:35:cf: 80:f5:c6:7c:5b:a3:8c:b8:07:3b:26:3b:07:71:09:a1:b7:35: fa:83:53:02:85:12:84:73:53:0b:b3:f8:d5:69:91:46:6e:1c: 77:e4:1d:a5:6d:85:d5:fb:ca:92:3a:af:57:0e:1b:5e:41:c3: 2b:cf:58:df:c8:ab:c6:d8:43:62:58:ed:6f:d3:7d:49:51:9c: b2:31:ed:d6:29:66:d0:dd:25:2b:a2:8d:a9:4f:2b:9a:01:1b: 6e:71:7f:4e:70:76:96:de:f2:fe:75:e7:c0:da:03:65:65:94: 79:ba:67:68:4d:27:1d:a8:89:7f:d6:78:b8:50:bf:30:b5:bf: ce:e8:50:3e:86:49:ac:0a:89:d9:67:f8:52:b4:5b:fd:6d:38: 75:c0:f2:27:66:e2:1d:e9:a5:67:12:12:c7:e5:f8:39:be:24: 62:6f:89:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUxMTA0MjA0NDIzWhcNMjUxMTExMjA0NDIzWjAYMRYwFAYD VQQDEw02OTBhNjVhNy1jNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpQGuRsXIy0wfHDG1yxuaG2zjTCvwwwGGRZAUP4esWNr+3TdNq+fRUNKI2e3 /Twp7sH8weZ47JNCzAI/gNzCDQ6Hqp3qjdBW7wksXDzljhiXAADIedp3w/Z9QVT2 wzPTOQIB/0+I7pmA8ul8qXP9Oarf/HJIPi2gzC5bZabjmV5EOZOBORlrCb6uSAF9 LylOTN7S6K9K0pklkTlTEcZSZJKWSxvWZ8df78TNJEIae6SzDqRQBKuwVTKj5ydY 4b0UpyVfM1LpZVscioiuvb8sBcKtB5Q1U1ateJ8rfRnFr8OsBjWolSkDj1rTlkof 1BGkEfj9+tnP2UePyR8jFSxeEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ3E4h1 r1ahmPvqyUwQa/JZ5/5LMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK2psU8htrtqvg54kQecokNAFNP91ozuETYUEH/PRmtLy8W0W5jGjz axcXz1zDDJcR2LzlEaWQSG14fNvjvXXCyHiTeJf7GLja5NYaK++h4SDJi3hj8Wux Nc+A9cZ8W6OMuAc7JjsHcQmhtzX6g1MChRKEc1MLs/jVaZFGbhx35B2lbYXV+8qS Oq9XDhteQcMrz1jfyKvG2ENiWO1v031JUZyyMe3WKWbQ3SUroo2pTyuaARtucX9O cHaW3vL+defA2gNlZZR5umdoTScdqIl/1ni4UL8wtb/O6FA+hkmsConZZ/hStFv9 bTh1wPInZuId6aVnEhLH5fg5viRib4mU -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:25 2025 by rpki-client