$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: ZwK18px264H3sGTto1NXIiWxPeuSEzegTsWpcmMdT2Q= Subject key identifier: C3:C8:50:53:C7:3E:BD:E8:6C:35:4E:FD:1B:97:BB:51:E5:17:72:59 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 05A3 Signing time: Tue 04 Nov 2025 23:13:15 +0000 Manifest this update: Tue 04 Nov 2025 23:13:14 +0000 Manifest next update: Tue 11 Nov 2025 23:13:14 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: QNbiynayvn8Q7iOKK6F/iUgqy85d376bnHj5f0sSmaw=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Nov 4 23:13:14 2025 GMT Not After : Nov 11 23:13:14 2025 GMT Subject: CN=690a888b-6324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:8d:ae:c5:b3:f2:ed:dd:34:51:88:da:4a: c1:26:30:a8:88:66:8b:3e:0e:06:cf:9e:57:43:1d: 94:0d:87:59:a1:58:2c:56:92:fc:24:02:60:ca:73: 38:c5:e8:49:90:62:58:3f:11:98:14:c3:9d:20:e2: 51:34:2f:a1:47:52:b1:a8:72:84:aa:53:2e:a4:e1: 64:de:0a:12:49:b1:f5:e4:1d:9a:a6:f9:0d:75:51: 1d:ba:63:a4:c3:e8:69:c3:e2:38:91:f0:29:8c:dc: 66:6c:d8:d4:63:31:5d:5f:e5:9e:35:ac:6b:43:32: 43:d2:6d:55:24:c4:cd:82:49:bc:a2:39:3d:ac:e7: 0a:63:26:f1:8e:48:fd:17:0d:f1:31:77:84:0c:ab: 07:b5:ca:b7:90:03:77:53:a8:4f:1f:07:ed:87:99: 31:45:ef:8e:90:f3:29:a2:ac:b5:e7:9a:61:b5:4d: 59:89:fe:90:fc:95:94:5f:6d:c8:2d:0b:11:15:04: a6:5c:b4:61:b4:b2:7a:56:37:28:1b:6e:2d:a2:f3: 37:01:44:c2:cf:03:24:ff:2b:6a:dc:98:c6:6e:bb: f0:1d:f0:c2:fa:b6:78:5b:be:81:f0:3e:d5:bd:d3: da:47:47:62:a7:bd:d4:a5:72:1e:ee:28:3a:db:30: 6a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:50:53:C7:3E:BD:E8:6C:35:4E:FD:1B:97:BB:51:E5:17:72:59 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:46:a2:9d:48:3a:68:16:dc:d6:f6:19:32:9f:be:e8:bb:ad: 55:c4:1e:47:f2:5f:85:22:69:e0:51:85:c5:d2:b7:49:a2:07: 01:e2:92:78:37:da:b0:81:6b:5b:d5:e5:b9:8b:47:4b:b1:61: b2:af:2c:18:e6:09:c2:e7:7e:23:d9:72:80:73:cc:6a:ec:52: 49:58:6e:ca:37:ff:bb:cd:87:84:56:78:ad:35:4b:59:07:84: 13:5e:7d:a1:97:c2:13:82:ee:d9:90:96:77:42:3c:19:5c:cb: e6:85:98:8e:ba:5e:18:15:a9:d1:04:ad:41:91:78:38:64:19: 15:6a:36:e1:01:a4:fe:0d:51:ee:3f:7e:d7:0b:27:83:46:c8: c3:85:74:d8:33:73:42:5f:f1:68:92:ee:80:94:39:2e:d9:b7: 0f:66:94:89:92:83:4b:23:4a:38:03:a8:c4:8a:da:b8:23:c4: bb:e3:77:72:59:5e:f6:2b:34:3e:47:cb:a5:dc:88:78:55:cd: 70:4f:f7:b3:7d:f5:04:2a:df:e2:29:d7:a0:da:e6:25:b7:78: 88:8e:ba:84:32:5e:b9:6c:07:0f:65:a3:3d:f5:22:dd:8b:cf: fa:98:65:9e:e4:55:8a:4a:ea:ea:9a:62:8f:3a:84:43:23:be: 10:88:29:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUxMTA0MjMxMzE0WhcNMjUxMTExMjMxMzE0WjAYMRYwFAYD VQQDEw02OTBhODg4Yi02MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQyNrsWz8u3dNFGI2krBJjCoiGaLPg4Gz55XQx2UDYdZoVgsVpL8JAJgynM4 xehJkGJYPxGYFMOdIOJRNC+hR1KxqHKEqlMupOFk3goSSbH15B2apvkNdVEdumOk w+hpw+I4kfApjNxmbNjUYzFdX+WeNaxrQzJD0m1VJMTNgkm8ojk9rOcKYybxjkj9 Fw3xMXeEDKsHtcq3kAN3U6hPHwfth5kxRe+OkPMpoqy155phtU1Zif6Q/JWUX23I LQsRFQSmXLRhtLJ6VjcoG24tovM3AUTCzwMk/ytq3JjGbrvwHfDC+rZ4W76B8D7V vdPaR0dip73UpXIe7ig62zBqDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPIUFPH Pr3obDVO/RuXu1HlF3JZMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtRqKdSDpoFtzW9hkyn77ou61VxB5H8l+FImngUYXF0rdJogcB4pJ4 N9qwgWtb1eW5i0dLsWGyrywY5gnC534j2XKAc8xq7FJJWG7KN/+7zYeEVnitNUtZ B4QTXn2hl8ITgu7ZkJZ3QjwZXMvmhZiOul4YFanRBK1BkXg4ZBkVajbhAaT+DVHu P37XCyeDRsjDhXTYM3NCX/Foku6AlDku2bcPZpSJkoNLI0o4A6jEitq4I8S743dy WV72KzQ+R8ul3Ih4Vc1wT/ezffUEKt/iKdeg2uYlt3iIjrqEMl65bAcPZaM99SLd i8/6mGWe5FWKSurqmmKPOoRDI74QiCmP -----END CERTIFICATE-----Generated at Thu Nov 6 00:52:00 2025 by rpki-client