$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: YuB8KdDtN5YiSWh63YE7FGW6p4ZCfY4/XwRmpWZLhiU= Subject key identifier: 86:5A:F7:80:2F:56:A6:E8:5D:15:18:ED:B4:9B:DC:27:90:0D:DE:03 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 0162 Signing time: Wed 05 Nov 2025 04:12:01 +0000 Manifest this update: Wed 05 Nov 2025 04:12:01 +0000 Manifest next update: Wed 12 Nov 2025 04:12:01 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: ao8KMInoYvLyyR/ni82ck0IBdkSrNM8XKMAGorloFy8=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Nov 5 04:12:01 2025 GMT Not After : Nov 12 04:12:01 2025 GMT Subject: CN=690ace91-d4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:b9:21:c2:28:99:7c:93:fe:de:67:a9:c3: 82:e1:41:e5:ce:82:60:8a:4a:df:1d:a0:25:64:66: 9b:5d:e9:e9:97:fd:24:16:02:7d:5a:95:7b:bb:8e: b4:2b:a3:b5:cc:c9:6f:18:de:32:3a:6e:e3:59:26: 1e:c1:ab:58:66:41:88:f5:5a:ce:9b:57:62:32:1a: a6:d3:5e:6d:50:a1:02:e2:55:fa:8e:2c:d9:05:ba: 4c:24:43:8d:83:cc:d0:7a:de:1d:51:7e:b1:b2:01: d6:b0:29:0a:4f:ad:92:e0:11:d5:00:83:0c:9d:43: ec:b9:fd:be:74:24:1f:b1:2c:04:4a:f6:da:f0:d4: 43:df:8b:b7:fa:f8:4f:74:7d:4f:28:c0:78:1f:7d: c6:16:46:20:f7:17:bc:b3:bc:ff:a1:36:26:2a:0e: 67:2e:f4:20:bf:9b:1a:2c:86:24:13:38:43:ae:97: 3d:22:a2:c8:28:13:a9:58:20:cf:ee:11:d4:0e:63: 4c:e0:1c:6f:a6:d5:48:1d:ab:18:d5:0b:a0:93:3c: c0:1a:77:91:c2:7c:77:5e:9d:41:0a:db:64:88:6e: 08:7f:e0:fb:a6:d9:1a:04:a9:aa:74:9b:94:82:00: be:e1:0b:51:ae:48:18:65:af:e4:0a:10:ca:2f:60: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5A:F7:80:2F:56:A6:E8:5D:15:18:ED:B4:9B:DC:27:90:0D:DE:03 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:c7:c2:14:0b:65:88:22:3d:ff:42:f5:84:d4:00:6f:e2: 8c:5a:63:92:90:d0:aa:ee:1d:d5:12:4c:1b:1b:a3:a0:5b:42: f6:e4:42:84:aa:ba:ff:c8:64:30:29:08:5c:d5:ef:4e:ae:b1: 50:55:2b:34:99:a1:d1:bb:28:ab:08:0d:e0:eb:21:ec:36:7f: b1:76:e5:78:64:64:df:70:bc:cb:7a:bc:35:f3:71:3c:a5:64: aa:df:c9:60:fb:b9:d7:e2:ef:6a:d6:2e:f4:5e:2c:73:3d:6c: 0b:bd:e2:13:79:4b:16:f8:cd:77:21:99:dd:a5:64:b3:1d:4d: c3:2d:ec:84:9c:47:69:5c:1f:d3:19:5a:6f:5e:5a:06:a9:2e: 5a:3e:fa:8c:5c:29:61:93:aa:81:5f:64:39:68:b9:47:9c:72: 68:5c:9a:ae:4a:c6:92:27:8f:c6:a3:7e:f9:9d:64:f2:d3:bf: ca:3c:af:5e:7f:84:a4:0b:bd:63:b1:98:39:fe:c9:13:23:c6: 10:aa:9c:04:2b:65:c3:77:07:a1:af:cd:06:69:bf:9e:ad:70: b4:5a:da:01:66:39:ed:08:3d:ca:87:5e:37:c5:79:77:71:00: e3:8d:c8:b9:96:cb:4c:1d:be:bc:c6:5a:63:e1:39:8d:08:9f: b1:f9:cf:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUxMTA1MDQxMjAxWhcNMjUxMTEyMDQxMjAxWjAYMRYwFAYD VQQDEw02OTBhY2U5MS1kNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBC5IcIomXyT/t5nqcOC4UHlzoJgikrfHaAlZGabXenpl/0kFgJ9WpV7u460 K6O1zMlvGN4yOm7jWSYewatYZkGI9VrOm1diMhqm015tUKEC4lX6jizZBbpMJEON g8zQet4dUX6xsgHWsCkKT62S4BHVAIMMnUPsuf2+dCQfsSwESvba8NRD34u3+vhP dH1PKMB4H33GFkYg9xe8s7z/oTYmKg5nLvQgv5saLIYkEzhDrpc9IqLIKBOpWCDP 7hHUDmNM4BxvptVIHasY1QugkzzAGneRwnx3Xp1BCttkiG4If+D7ptkaBKmqdJuU ggC+4QtRrkgYZa/kChDKL2CwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZa94Av VqboXRUY7bSb3CeQDd4DMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfIcfCFAtliCI9/0L1hNQAb+KMWmOSkNCq7h3VEkwbG6OgW0L25EKE qrr/yGQwKQhc1e9OrrFQVSs0maHRuyirCA3g6yHsNn+xduV4ZGTfcLzLerw183E8 pWSq38lg+7nX4u9q1i70XixzPWwLveITeUsW+M13IZndpWSzHU3DLeyEnEdpXB/T GVpvXloGqS5aPvqMXClhk6qBX2Q5aLlHnHJoXJquSsaSJ4/Go375nWTy07/KPK9e f4SkC71jsZg5/skTI8YQqpwEK2XDdwehr80Gab+erXC0WtoBZjntCD3Kh143xXl3 cQDjjci5lstMHb68xlpj4TmNCJ+x+c9j -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:55 2025 by rpki-client