$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: NuNYSbtTXOf1Qpqc8Q5qrdFA7rANK8ipqU2RnGsnxHs= Subject key identifier: 71:EA:D3:8A:1E:51:06:8B:1B:C6:67:FA:9B:0E:1A:0C:83:4F:57:4E Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: DF Signing time: Wed 05 Nov 2025 05:43:18 +0000 Manifest this update: Wed 05 Nov 2025 05:43:18 +0000 Manifest next update: Wed 12 Nov 2025 05:43:18 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: GnB1sJxwWCTTVIvIotoo63+wKJfqaDEIqftZMgZrjJ4=) 2: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: tLT0yEhePGIlO1CJGs9BSo7w/4wYDa+u843KrFx+LWM=) 3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Nov 5 05:43:18 2025 GMT Not After : Nov 12 05:43:18 2025 GMT Subject: CN=690ae3f6-4b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:c1:8b:15:d9:5b:cd:da:46:60:ed:43:c6: be:a9:32:2f:44:49:fe:b0:bc:08:cd:9b:96:ed:f1: c7:15:a4:0f:e1:a0:b4:f0:d7:ba:13:a2:b2:71:c0: 46:d5:f7:5d:f0:10:d2:c6:37:e2:f3:07:0a:fa:e6: c0:94:28:89:60:52:94:77:9b:71:82:49:44:8a:63: 10:e8:09:44:31:7e:33:6b:00:86:6a:36:cc:23:6c: 94:a2:7b:77:0c:11:20:3d:73:80:ee:f1:34:f9:a0: 80:76:22:9f:69:bf:8c:cf:4d:36:f8:b4:d0:59:91: 4d:df:1d:56:03:41:57:e2:8a:fa:f2:19:89:ba:3e: b2:1e:62:9b:37:6c:59:df:44:13:5f:e3:df:c6:63: fc:a9:11:30:18:e9:48:9b:16:d7:4f:86:b2:67:bf: fc:95:3a:1c:f3:fb:d1:c1:7d:3c:d6:aa:16:ed:5d: a5:00:13:22:a3:db:55:ea:c4:c7:fa:7e:3f:e3:a7: 45:30:94:72:3e:e5:fb:cc:4f:70:d1:c7:2a:94:8a: e4:f1:83:a4:05:85:0f:e3:bd:66:db:7d:6d:af:e4: cb:73:61:49:44:4c:60:26:b1:89:cf:a4:76:f3:6a: 55:fc:dc:08:fc:90:5f:bd:85:14:db:5e:9c:7d:b3: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:D3:8A:1E:51:06:8B:1B:C6:67:FA:9B:0E:1A:0C:83:4F:57:4E X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2e:93:6a:e5:66:b9:55:20:40:32:a0:d0:a1:b0:5a:d6:9b: aa:5d:c3:ea:97:7b:e7:ea:a5:4d:fa:06:db:0b:10:ff:85:8a: 01:49:de:0f:a9:6f:79:66:a4:d0:8a:72:aa:01:17:5e:15:bb: fb:78:d5:54:2d:b6:39:8f:65:4e:81:51:82:ed:a3:af:13:6a: e4:ea:52:bc:63:6f:69:da:36:dd:46:2e:9b:1c:08:0c:05:2c: 52:bb:c7:65:50:9a:5e:e1:4e:ab:3e:7c:4c:d2:98:32:13:aa: fc:5a:12:e5:47:af:09:e8:8c:97:8d:3b:c1:a8:d0:61:b3:7b: e5:44:1d:74:56:c4:fe:f1:1a:61:71:8c:ea:c6:14:ed:18:34: a2:2d:60:19:e0:b9:4c:c1:8c:26:23:ef:4f:a4:e7:0d:b8:dd: df:8c:2a:44:91:04:f8:9b:a1:f3:01:1f:3a:31:2a:5f:36:75: 3e:84:fc:09:87:80:2e:bd:72:df:1b:df:8b:60:a6:58:9a:95: cf:10:45:5b:9b:09:ae:6f:fd:95:95:c3:b7:2b:6b:52:87:6f: 16:81:fa:22:4e:d8:51:50:6b:ae:3a:3e:3c:11:c0:c2:98:c7: b9:7e:b2:93:a1:da:95:3e:89:b4:30:cc:21:22:e5:92:09:09: d2:ce:d7:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUxMTA1MDU0MzE4WhcNMjUxMTEyMDU0MzE4WjAYMRYwFAYD VQQDEw02OTBhZTNmNi00YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/rBixXZW83aRmDtQ8a+qTIvREn+sLwIzZuW7fHHFaQP4aC08Ne6E6KyccBG 1fdd8BDSxjfi8wcK+ubAlCiJYFKUd5txgklEimMQ6AlEMX4zawCGajbMI2yUont3 DBEgPXOA7vE0+aCAdiKfab+Mz002+LTQWZFN3x1WA0FX4or68hmJuj6yHmKbN2xZ 30QTX+PfxmP8qREwGOlImxbXT4ayZ7/8lToc8/vRwX081qoW7V2lABMio9tV6sTH +n4/46dFMJRyPuX7zE9w0ccqlIrk8YOkBYUP471m231tr+TLc2FJRExgJrGJz6R2 82pV/NwI/JBfvYUU216cfbPhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHq04oe UQaLG8Zn+psOGgyDT1dOMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcLpNq5Wa5VSBAMqDQobBa1puqXcPql3vn6qVN+gbbCxD/hYoBSd4P qW95ZqTQinKqARdeFbv7eNVULbY5j2VOgVGC7aOvE2rk6lK8Y29p2jbdRi6bHAgM BSxSu8dlUJpe4U6rPnxM0pgyE6r8WhLlR68J6IyXjTvBqNBhs3vlRB10VsT+8Rph cYzqxhTtGDSiLWAZ4LlMwYwmI+9PpOcNuN3fjCpEkQT4m6HzAR86MSpfNnU+hPwJ h4AuvXLfG9+LYKZYmpXPEEVbmwmub/2VlcO3K2tSh28WgfoiTthRUGuuOj48EcDC mMe5frKTodqVPom0MMwhIuWSCQnSztd2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:47:19 2025 by rpki-client