$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: /uW3cUgCMD9jHeVr0SvknGXKfTstZ23gfBLXL+nh38I= Subject key identifier: B4:4B:BE:00:36:E3:C3:AB:4B:C0:3E:60:4C:F6:72:AC:7C:DA:D7:71 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A09 Signing time: Tue 04 Nov 2025 19:55:34 +0000 Manifest this update: Tue 04 Nov 2025 19:55:34 +0000 Manifest next update: Tue 11 Nov 2025 19:55:34 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: AjSs0O113WDpZYHVjraF3ApqJEIr+AuP3ZtjW6tYzTU=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: W5ePsoGWgomEoWgiTPJkjSegEKVfUxA0uguQndmw+Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Nov 4 19:55:34 2025 GMT Not After : Nov 11 19:55:34 2025 GMT Subject: CN=690a5a36-9406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:72:cd:6c:a4:5f:18:92:94:c7:4d:7c:d8: e4:88:b6:d5:72:ed:d0:51:76:ae:e4:37:d9:e6:a0: 6a:0a:c2:3d:54:06:0d:3c:45:e4:61:1f:a9:9f:ee: 1f:98:8d:61:c5:d2:8f:55:d5:1f:c9:f0:1d:34:ee: ef:b6:1e:fd:0b:77:96:9f:ef:fa:5b:0a:1c:7a:7c: 9a:3b:08:9a:3f:92:ae:c3:ac:ed:9c:40:cb:74:9c: 10:8b:10:db:6b:e7:a6:36:d1:b5:f7:a3:e3:bb:37: 6f:03:c2:b1:88:ab:d2:42:16:6d:fb:d9:be:ab:77: c7:56:0f:8b:24:84:25:92:38:d6:44:bc:b1:35:a9: a7:b9:32:cd:06:a0:99:6a:c6:e6:aa:4b:1a:6b:5b: 0f:51:21:a6:fd:12:0f:58:f7:ce:a3:b8:77:4b:fb: 3a:7e:7c:39:8c:5e:ef:f9:1f:1c:ef:1a:ed:38:5d: 1a:a2:33:c1:a6:af:7d:f7:f1:aa:73:a3:b4:aa:c8: 2a:54:11:b1:c2:31:37:b4:5d:a6:60:b3:37:41:2b: e8:72:5d:9e:eb:e1:c2:1f:59:c1:b8:bf:f9:46:48: c2:2d:87:8e:31:6a:e9:09:90:25:25:9f:96:b9:7e: 3b:53:8f:dc:f8:b6:fb:b9:58:95:b4:e6:c6:4d:8e: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4B:BE:00:36:E3:C3:AB:4B:C0:3E:60:4C:F6:72:AC:7C:DA:D7:71 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:47:a2:51:97:83:c9:9f:a2:06:0d:b1:27:2d:f8:bb:ad:88: 52:73:98:b8:51:6b:7b:b5:e2:a6:a1:4b:ae:fd:24:08:93:f8: c2:5a:2c:c4:c4:e2:b3:96:6d:55:e0:a9:2d:29:b1:27:df:f6: 8e:41:e4:76:b2:85:31:ec:53:1e:58:74:a5:29:22:af:84:5e: 9d:32:47:9e:5b:32:4c:f0:b2:6d:9e:ca:2d:67:34:21:80:d6: 02:77:9f:4a:fd:e5:87:6c:c5:55:e2:7a:ff:07:11:c0:bf:b4: cf:e7:64:d0:10:52:97:3e:33:62:13:6b:34:6c:52:59:39:2b: 71:39:a9:ea:27:15:70:8b:e7:f4:01:38:dd:12:2c:6f:12:7e: c0:6a:7f:00:6b:77:b9:55:97:72:55:8f:17:68:e7:a4:d5:e6: de:07:79:69:80:16:47:9a:46:52:72:d2:96:de:91:1b:95:ab: af:f9:7d:b3:35:61:6e:be:7c:ed:cf:aa:56:0c:25:dd:c4:b4: 67:e7:64:2d:e5:d8:59:ca:52:56:dd:94:97:71:8f:eb:ff:8c: 70:92:6b:82:87:36:fa:e0:26:24:ad:4e:ca:45:66:1c:0d:e8: f1:2a:bc:69:ed:c7:a0:03:05:e4:36:22:ca:b9:2b:b0:89:cf: 4b:60:83:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUxMTA0MTk1NTM0WhcNMjUxMTExMTk1NTM0WjAYMRYwFAYD VQQDEw02OTBhNWEzNi05NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDxyzWykXxiSlMdNfNjkiLbVcu3QUXau5DfZ5qBqCsI9VAYNPEXkYR+pn+4f mI1hxdKPVdUfyfAdNO7vth79C3eWn+/6WwocenyaOwiaP5Kuw6ztnEDLdJwQixDb a+emNtG196PjuzdvA8KxiKvSQhZt+9m+q3fHVg+LJIQlkjjWRLyxNamnuTLNBqCZ asbmqksaa1sPUSGm/RIPWPfOo7h3S/s6fnw5jF7v+R8c7xrtOF0aojPBpq999/Gq c6O0qsgqVBGxwjE3tF2mYLM3QSvocl2e6+HCH1nBuL/5RkjCLYeOMWrpCZAlJZ+W uX47U4/c+Lb7uViVtObGTY4+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRLvgA2 48OrS8A+YEz2cqx82tdxMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKR6JRl4PJn6IGDbEnLfi7rYhSc5i4UWt7teKmoUuu/SQIk/jCWizE xOKzlm1V4KktKbEn3/aOQeR2soUx7FMeWHSlKSKvhF6dMkeeWzJM8LJtnsotZzQh gNYCd59K/eWHbMVV4nr/BxHAv7TP52TQEFKXPjNiE2s0bFJZOStxOanqJxVwi+f0 ATjdEixvEn7Aan8Aa3e5VZdyVY8XaOek1ebeB3lpgBZHmkZSctKW3pEblauv+X2z NWFuvnztz6pWDCXdxLRn52Qt5dhZylJW3ZSXcY/r/4xwkmuChzb64CYkrU7KRWYc DejxKrxp7cegAwXkNiLKuSuwic9LYINW -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:10 2025 by rpki-client