$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: IltP5Opsfd91nOwpC5MWU5ibd1BcDnuTw57CeCBuytc= Subject key identifier: EA:3F:ED:D3:A1:F0:3F:55:9D:91:97:EE:34:32:2C:0F:8F:99:3A:28 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: D1 Signing time: Wed 05 Nov 2025 05:59:11 +0000 Manifest this update: Wed 05 Nov 2025 05:59:10 +0000 Manifest next update: Wed 12 Nov 2025 05:59:10 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: PtlncQDy/e2kD0AgsHbTILHXV2OGMiL7lhaGHyYVpuA=) 2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: Qazlfs79oNGaasbKODSLWu+fgrJyIj3LMIoA2bg+8Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Nov 5 05:59:10 2025 GMT Not After : Nov 12 05:59:10 2025 GMT Subject: CN=690ae7af-c6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:c7:56:58:97:aa:54:3b:e3:fb:3e:4e:a1: 8b:de:c0:d8:6a:bd:6f:78:9d:4a:f9:ed:76:16:bf: 7a:4f:f2:76:8d:b3:fd:6f:f1:15:f6:03:b8:ea:d0: 33:d6:b3:53:5c:2c:01:2b:73:f3:b5:07:64:4c:bb: 36:0d:a9:96:e4:86:ef:1c:eb:7f:85:2f:6f:53:06: 0d:50:a3:cc:26:b7:10:57:c1:a2:b4:ed:3d:6d:52: 8c:8d:4f:d6:72:9d:c9:7a:f4:b7:2d:39:b9:d5:2c: 79:77:4e:1e:dd:04:52:ad:8e:d6:b0:a2:cf:01:e5: e1:60:ae:5b:54:ae:ff:c5:f7:fa:10:ff:7d:22:da: ae:0c:09:ce:e8:b8:82:9c:b3:23:e7:4f:19:39:68: e0:dc:7c:5e:03:d2:16:4b:ff:6b:a6:bd:f4:6f:c3: e8:d7:8c:7a:9f:9c:56:75:96:ab:b7:1f:54:c1:7f: 6f:b9:d5:c3:c3:3e:a0:80:94:e7:7b:f6:05:fb:d5: 3d:34:bd:9d:cc:65:38:18:20:c1:a7:51:a6:e8:b7: 96:53:08:6e:22:cc:45:c5:61:8f:d0:ac:46:44:9b: f3:50:72:e3:d8:3e:b4:c0:6e:8c:00:8c:60:34:c0: c8:82:7a:0f:a1:3b:d6:ac:69:89:25:ee:d7:1d:e6: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3F:ED:D3:A1:F0:3F:55:9D:91:97:EE:34:32:2C:0F:8F:99:3A:28 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:df:76:fa:25:a0:66:f7:ce:a5:ee:62:5f:c3:84:25:fa:b9: 4b:f3:32:d3:d3:3c:80:dd:da:c9:52:88:12:fe:76:98:a5:d1: 98:97:c3:81:3c:97:e0:8a:c0:16:c5:c9:f6:a1:4a:ce:f2:a2: 27:3d:ab:a6:72:0e:ad:3c:9f:fc:be:46:fd:fe:3b:d1:e6:ca: 36:38:72:20:bf:f3:9c:e9:f2:67:03:16:f4:8f:08:dd:fb:86: 51:bd:5b:53:0c:09:1d:d9:9e:ad:25:fa:a3:75:91:f0:66:6a: 21:4a:10:03:0a:f8:01:35:46:9f:e9:67:02:98:fa:2d:c6:cd: d4:b5:13:c7:06:d4:e4:67:fa:d4:8e:bf:53:a2:ab:24:d4:fe: 6b:66:cb:ca:a3:d3:59:96:23:01:dc:8c:a0:09:1c:53:dc:f6: 50:8f:f2:ac:9f:f9:33:70:b6:bd:0a:17:6c:b7:02:e9:f0:c7: 1d:4c:58:d6:77:2b:ec:48:d3:d8:70:d0:8d:6f:2c:61:30:66: 32:4f:55:62:37:ff:11:df:53:7f:fa:e2:4f:bf:72:1f:2f:78: ad:bd:3d:06:c3:71:b8:1d:d0:e3:6f:ad:d9:cf:57:7a:e3:ca: 3e:dc:98:6c:6b:89:77:4c:c5:4d:2c:d2:1e:bd:cb:9f:fd:1f: 57:a3:0a:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUxMTA1MDU1OTEwWhcNMjUxMTEyMDU1OTEwWjAYMRYwFAYD VQQDEw02OTBhZTdhZi1jNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SvHVliXqlQ74/s+TqGL3sDYar1veJ1K+e12Fr96T/J2jbP9b/EV9gO46tAz 1rNTXCwBK3PztQdkTLs2DamW5IbvHOt/hS9vUwYNUKPMJrcQV8GitO09bVKMjU/W cp3JevS3LTm51Sx5d04e3QRSrY7WsKLPAeXhYK5bVK7/xff6EP99ItquDAnO6LiC nLMj508ZOWjg3HxeA9IWS/9rpr30b8Po14x6n5xWdZartx9UwX9vudXDwz6ggJTn e/YF+9U9NL2dzGU4GCDBp1Gm6LeWUwhuIsxFxWGP0KxGRJvzUHLj2D60wG6MAIxg NMDIgnoPoTvWrGmJJe7XHeaf6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOo/7dOh 8D9VnZGX7jQyLA+PmTooMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL33b6JaBm986l7mJfw4Ql+rlL8zLT0zyA3drJUogS/naYpdGYl8OB PJfgisAWxcn2oUrO8qInPaumcg6tPJ/8vkb9/jvR5so2OHIgv/Oc6fJnAxb0jwjd +4ZRvVtTDAkd2Z6tJfqjdZHwZmohShADCvgBNUaf6WcCmPotxs3UtRPHBtTkZ/rU jr9Toqsk1P5rZsvKo9NZliMB3IygCRxT3PZQj/Ksn/kzcLa9ChdstwLp8McdTFjW dyvsSNPYcNCNbyxhMGYyT1ViN/8R31N/+uJPv3IfL3itvT0Gw3G4HdDjb63Zz1d6 48o+3Jhsa4l3TMVNLNIevcuf/R9XowrU -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:31 2025 by rpki-client