$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: euzenyOHifu/EXt9gtiWr9rFaPptquVjM4s/krtruio= Subject key identifier: 6F:C5:CE:28:34:19:6F:D8:9E:CC:58:E2:73:D6:8E:E7:D0:CF:CB:53 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1D5B Signing time: Tue 04 Nov 2025 16:13:54 +0000 Manifest this update: Tue 04 Nov 2025 16:13:53 +0000 Manifest next update: Tue 11 Nov 2025 16:13:53 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: 4rtRM3jLAa5HL2wWNH3f1YJ7DWOu3BS+akHKLN7PI38=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7528 (0x1d68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Nov 4 16:13:53 2025 GMT Not After : Nov 11 16:13:53 2025 GMT Subject: CN=690a2641-08fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:07:dc:db:03:be:62:d7:f1:1b:c2:be:42: 86:61:81:8d:e3:dc:0b:6c:28:70:5e:57:21:c8:4b: b7:0b:49:45:b0:6a:8f:5b:47:9c:30:c7:7a:2f:3c: a0:e6:68:6d:aa:43:da:7f:7a:49:54:f8:ec:65:bc: 2c:83:1b:2f:8f:8f:2b:c9:37:c4:2b:82:94:88:c8: 5d:63:c1:76:a0:bf:fc:a2:86:a2:b5:bb:38:b9:88: 95:61:94:e8:91:8c:c3:ee:3a:b9:92:4b:1c:f2:b4: ed:21:fe:c9:bd:68:3c:3f:ee:aa:2a:7e:8e:8d:d6: 89:de:44:ce:49:06:1b:89:6e:1b:ae:7e:29:3a:67: 39:d0:ae:b4:67:c2:f3:89:05:a1:29:f1:34:76:16: df:1b:5d:3e:db:aa:12:e0:70:91:44:be:93:67:2b: e8:9a:ce:f2:7b:ee:17:0a:10:88:94:2d:a3:49:bd: 62:74:81:2f:45:93:d2:d4:db:87:7a:2c:b4:79:5e: 4d:3b:8e:a2:ad:fe:06:6e:ed:41:c9:55:8a:da:e8: 9b:cd:d6:58:b0:cf:96:3e:e0:09:0f:89:67:1e:64: 8f:4e:24:71:13:de:3a:2d:22:99:6a:0d:14:64:13: 3c:f8:64:59:af:7e:24:f3:6c:3d:6c:43:bf:21:d9: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:CE:28:34:19:6F:D8:9E:CC:58:E2:73:D6:8E:E7:D0:CF:CB:53 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:82:1a:9e:0d:f3:65:d4:33:3c:6c:3a:40:05:ca:ea:04:41: 9b:1c:ce:43:f4:77:fc:34:12:56:e6:65:a7:70:d5:14:9d:74: e8:f0:78:6c:92:81:fb:ba:92:5f:05:9c:ed:29:55:7a:c7:22: 16:bd:24:ec:d6:0a:2c:0c:c6:0f:e5:65:86:91:7d:f3:52:e2: 94:34:0f:fe:dc:e1:29:b4:33:bb:3f:61:83:91:f4:c8:82:59: b5:28:a3:cc:19:0f:d1:80:23:b2:f9:af:f5:92:fe:44:c6:b2: 01:8f:6a:e9:65:88:e8:65:92:c3:77:ac:80:4c:c9:39:a6:87: 7a:27:40:84:83:dc:ba:6a:bb:a7:0e:68:f7:fe:e3:3a:58:dd: 21:64:b5:44:77:78:de:bd:7c:61:ca:a2:2f:54:5e:b9:59:25: 95:17:81:57:0c:73:a1:5c:ef:a9:9c:86:39:11:ca:0a:a2:95: 21:36:3f:d0:2f:b0:57:f0:6e:b5:98:2f:76:e8:01:a8:c1:db: 89:f8:c5:53:05:b0:9e:3d:ea:16:aa:3f:e1:9a:04:8a:95:4d: 65:c9:d7:8f:73:13:79:f2:11:3c:1c:35:a5:db:e2:a4:bc:8a: 76:a9:aa:ee:72:e4:39:78:aa:09:35:a7:94:51:51:1d:86:70: d9:18:30:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUxMTA0MTYxMzUzWhcNMjUxMTExMTYxMzUzWjAYMRYwFAYD VQQDEw02OTBhMjY0MS0wOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUoH3NsDvmLX8RvCvkKGYYGN49wLbChwXlchyEu3C0lFsGqPW0ecMMd6Lzyg 5mhtqkPaf3pJVPjsZbwsgxsvj48ryTfEK4KUiMhdY8F2oL/8ooaitbs4uYiVYZTo kYzD7jq5kksc8rTtIf7JvWg8P+6qKn6OjdaJ3kTOSQYbiW4brn4pOmc50K60Z8Lz iQWhKfE0dhbfG10+26oS4HCRRL6TZyvoms7ye+4XChCIlC2jSb1idIEvRZPS1NuH eiy0eV5NO46irf4Gbu1ByVWK2uibzdZYsM+WPuAJD4lnHmSPTiRxE946LSKZag0U ZBM8+GRZr34k82w9bEO/IdlJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/Fzig0 GW/YnsxY4nPWjufQz8tTMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1ghqeDfNl1DM8bDpABcrqBEGbHM5D9Hf8NBJW5mWncNUUnXTo8Hhs koH7upJfBZztKVV6xyIWvSTs1gosDMYP5WWGkX3zUuKUNA/+3OEptDO7P2GDkfTI glm1KKPMGQ/RgCOy+a/1kv5ExrIBj2rpZYjoZZLDd6yATMk5pod6J0CEg9y6arun Dmj3/uM6WN0hZLVEd3jevXxhyqIvVF65WSWVF4FXDHOhXO+pnIY5EcoKopUhNj/Q L7BX8G61mC926AGowduJ+MVTBbCePeoWqj/hmgSKlU1lydePcxN58hE8HDWl2+Kk vIp2qarucuQ5eKoJNaeUUVEdhnDZGDB8 -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:56 2025 by rpki-client