$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: 8ps+IWMDJWvXnVEKNjknZLCTNtiqr98ZEWjw6n7o8M8= Subject key identifier: 65:32:AB:24:91:C7:5D:3F:74:71:A9:88:F6:06:36:DA:41:59:54:82 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: E7 Signing time: Wed 05 Nov 2025 05:31:39 +0000 Manifest this update: Wed 05 Nov 2025 05:31:38 +0000 Manifest next update: Wed 12 Nov 2025 05:31:38 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: im9d7cDEHMFj4SqzWFbevE5K1BKBbqHoY4nUkIW4dMQ=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Nov 5 05:31:38 2025 GMT Not After : Nov 12 05:31:38 2025 GMT Subject: CN=690ae13a-c973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:a7:a1:96:f1:98:89:4d:30:39:95:9d:51: 7f:aa:39:51:5c:db:5b:93:ca:79:7a:2d:0c:c2:7a: f8:df:a6:90:3f:b0:86:3e:af:7b:0b:b9:36:46:6e: 66:da:db:a1:ca:5b:10:d9:7f:01:a0:0f:5d:03:50: b1:a1:96:cb:8c:bf:6d:29:47:11:53:fd:cf:3c:64: 2b:dd:45:20:b5:31:dd:a2:2e:ba:e8:6a:8c:5b:38: 70:9f:61:d2:36:82:00:cd:6c:b0:25:e7:e1:f8:c4: d3:66:91:a5:84:9d:28:56:dd:82:fd:3a:66:d4:da: 1f:01:d0:0a:ba:5f:06:5a:67:41:c1:05:a5:6d:65: cc:d7:1a:57:c8:78:a1:cc:a1:ab:35:02:74:43:ce: 03:c7:08:13:bf:5d:33:3b:50:a3:75:f6:7b:7c:e3: 54:c8:25:ab:9c:8e:76:66:9b:d2:c1:e4:e1:51:b3: 74:6a:cf:c6:7a:b6:c9:88:50:3e:b0:fe:91:ab:7d: 89:1c:64:83:9a:2d:19:e0:c0:c0:65:29:47:a0:6c: f1:1c:dc:7d:a7:a0:ab:d0:aa:32:22:e8:54:a0:e4: b2:31:31:26:8e:de:7b:ac:81:81:b5:02:e1:b3:51: 5d:5c:08:17:4e:dd:25:03:4d:da:c5:23:bc:09:fc: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:32:AB:24:91:C7:5D:3F:74:71:A9:88:F6:06:36:DA:41:59:54:82 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:95:db:7e:28:0c:df:ea:f9:f0:1c:29:19:d3:42:1d:b3:36: ab:c6:fb:ca:83:77:59:d7:e3:a5:3c:6e:17:7d:3b:20:de:ad: 15:30:de:5b:84:f0:18:18:a5:1f:74:ef:84:80:be:e4:90:5a: b9:db:95:86:0a:31:f4:8b:a0:9d:f9:8d:44:bc:e4:90:c2:a8: 7c:11:15:e8:c8:65:d4:6e:26:21:67:96:1e:90:82:09:96:84: 23:8e:49:24:53:97:01:dd:50:25:77:e1:c3:0d:92:84:8c:95: 87:a8:cd:fd:97:26:d9:6f:14:50:a6:11:3e:5e:9d:e9:4b:06: cb:26:dd:53:1d:fb:34:60:c4:c5:ca:bd:3b:f8:0b:b9:7f:47: b9:ff:0d:1c:d0:eb:28:f9:32:2d:c8:71:66:4f:23:e4:3b:b0: 31:c8:98:0f:e2:9a:9c:f0:49:8b:92:85:5e:02:53:b2:fd:1d: 9a:61:9b:54:4c:92:44:ee:75:66:4d:59:3c:fe:a5:3a:55:ac: 66:e7:60:ba:2b:ba:d7:7e:74:5f:16:32:3d:b6:77:c2:47:e8: a8:34:e1:64:db:e0:1e:ce:0b:f2:1b:6d:a2:eb:39:4d:5e:f6: 99:f3:d7:bd:95:a1:41:c1:0a:62:dc:79:af:f9:31:b8:35:3b: 39:6a:60:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUxMTA1MDUzMTM4WhcNMjUxMTEyMDUzMTM4WjAYMRYwFAYD VQQDEw02OTBhZTEzYS1jOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+OnoZbxmIlNMDmVnVF/qjlRXNtbk8p5ei0Mwnr436aQP7CGPq97C7k2Rm5m 2tuhylsQ2X8BoA9dA1CxoZbLjL9tKUcRU/3PPGQr3UUgtTHdoi666GqMWzhwn2HS NoIAzWywJefh+MTTZpGlhJ0oVt2C/Tpm1NofAdAKul8GWmdBwQWlbWXM1xpXyHih zKGrNQJ0Q84DxwgTv10zO1CjdfZ7fONUyCWrnI52ZpvSweThUbN0as/GerbJiFA+ sP6Rq32JHGSDmi0Z4MDAZSlHoGzxHNx9p6Cr0KoyIuhUoOSyMTEmjt57rIGBtQLh s1FdXAgXTt0lA03axSO8Cfxm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUyqySR x10/dHGpiPYGNtpBWVSCMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLldt+KAzf6vnwHCkZ00IdszarxvvKg3dZ1+OlPG4XfTsg3q0VMN5b hPAYGKUfdO+EgL7kkFq525WGCjH0i6Cd+Y1EvOSQwqh8ERXoyGXUbiYhZ5YekIIJ loQjjkkkU5cB3VAld+HDDZKEjJWHqM39lybZbxRQphE+Xp3pSwbLJt1THfs0YMTF yr07+Au5f0e5/w0c0Oso+TItyHFmTyPkO7AxyJgP4pqc8EmLkoVeAlOy/R2aYZtU TJJE7nVmTVk8/qU6Vaxm52C6K7rXfnRfFjI9tnfCR+ioNOFk2+AezgvyG22i6zlN XvaZ89e9laFBwQpi3Hmv+TG4NTs5amB1 -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:30 2025 by rpki-client