$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: mkSK26b7Oy0kvS3mWPcnc0PbQUQIU3r++peXOYZOZ6M= Subject key identifier: FD:2D:7D:EE:C1:C9:E0:85:F1:85:25:8D:04:03:AE:24:47:62:3E:48 Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 02D0 Signing time: Wed 05 Nov 2025 01:27:10 +0000 Manifest this update: Wed 05 Nov 2025 01:27:10 +0000 Manifest next update: Wed 12 Nov 2025 01:27:10 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: j9Bfo2GCgN6u6ghhE1DYdLW7Fg4ETg3wncF0WPvtMT4=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: nnR9EPSyG4Kq21NgPkJ1y+q1NVNPyw5fBJX9VgzqqTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Nov 5 01:27:10 2025 GMT Not After : Nov 12 01:27:10 2025 GMT Subject: CN=690aa7ee-916a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a4:2f:6a:78:22:e2:40:83:ff:50:df:48:d5: ed:70:6b:b9:c3:d5:f4:ef:6e:f7:3e:63:11:19:43: bc:9a:f1:68:3f:78:3e:67:76:fe:38:a3:40:5b:c6: f5:fc:21:18:e8:3b:df:f6:8b:2c:95:41:75:73:13: 01:62:26:0a:be:8b:32:cf:ba:42:00:10:e5:40:6c: 6a:a4:6f:be:7a:2c:ec:3d:e6:bd:4a:45:66:8a:92: f6:4e:1b:f2:22:8c:1b:81:17:28:32:ba:e4:6e:5e: bd:52:9e:02:a2:89:1d:43:09:6d:7d:e0:78:2f:f6: 48:38:45:3f:7f:c0:20:01:b2:b2:6b:78:40:89:68: 1d:49:40:aa:cd:bd:9f:a1:5a:1b:07:0a:eb:34:35: af:f7:95:a4:b0:98:94:08:a9:7c:ca:73:38:94:71: d9:81:a2:3e:c3:0e:7a:8f:3a:ec:25:a2:e4:90:7f: 54:ad:63:a4:3e:26:48:23:ad:53:c6:72:68:cf:3f: 37:38:f7:1d:27:cb:4c:56:db:3a:40:3d:8c:41:cc: f8:57:65:02:ce:44:7d:28:ce:f7:b4:99:d0:92:8f: 53:e4:ff:40:f1:47:4f:50:2c:1a:98:e7:eb:02:94: 9d:91:e3:5e:a9:93:9a:a4:14:73:7b:82:c8:7c:17: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:7D:EE:C1:C9:E0:85:F1:85:25:8D:04:03:AE:24:47:62:3E:48 X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:16:8f:6f:ad:f9:f1:34:a6:1a:17:13:57:fa:24:bb:7a: 8d:59:01:3a:0c:76:63:fc:50:b8:5e:31:16:ef:d0:db:2c:c1: 4d:b9:db:d3:2b:d3:c3:4e:a0:ad:0a:ae:05:fc:e9:48:e1:bf: 51:7b:dd:bd:fa:f5:ec:d1:fa:79:2d:af:f2:0a:74:03:27:b9: f9:6c:e7:69:36:8e:83:ee:cd:aa:61:10:06:b4:92:3b:b9:82: c0:7f:6f:f0:1e:32:fb:8e:4a:87:60:c0:a1:e2:ff:2c:35:03: 93:e9:26:d6:39:da:16:43:fe:55:31:fa:38:fb:5e:8b:48:d0: d2:20:d0:31:c1:55:f6:aa:88:1d:cd:56:f4:9b:ae:dd:2e:63: 37:65:9d:04:e6:13:61:2e:2c:8b:4f:80:19:6c:2e:e8:27:91: 02:63:3c:bd:0c:dd:7e:8e:7d:de:8a:73:cf:73:08:5d:7e:94: 7f:7d:d5:55:69:e7:a0:9d:af:b9:32:b8:24:96:25:e6:1b:fb: 37:46:25:fb:bc:79:4c:c6:70:95:68:66:1f:cb:bb:96:38:3a: 91:de:ea:98:b5:ac:0b:a4:52:52:57:48:70:9b:53:e2:62:d7: 28:1b:b9:61:a8:b2:9b:93:09:e1:2f:64:db:8c:c1:6d:ad:a3: 3c:5e:fd:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUxMTA1MDEyNzEwWhcNMjUxMTEyMDEyNzEwWjAYMRYwFAYD VQQDEw02OTBhYTdlZS05MTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KQvangi4kCD/1DfSNXtcGu5w9X07273PmMRGUO8mvFoP3g+Z3b+OKNAW8b1 /CEY6Dvf9osslUF1cxMBYiYKvosyz7pCABDlQGxqpG++eizsPea9SkVmipL2Thvy IowbgRcoMrrkbl69Up4CookdQwltfeB4L/ZIOEU/f8AgAbKya3hAiWgdSUCqzb2f oVobBwrrNDWv95WksJiUCKl8ynM4lHHZgaI+ww56jzrsJaLkkH9UrWOkPiZII61T xnJozz83OPcdJ8tMVts6QD2MQcz4V2UCzkR9KM73tJnQko9T5P9A8UdPUCwamOfr ApSdkeNeqZOapBRze4LIfBfW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0tfe7B yeCF8YUljQQDriRHYj5IMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNdhaPb6358TSmGhcTV/oku3qNWQE6DHZj/FC4XjEW79DbLMFNudvT K9PDTqCtCq4F/OlI4b9Re929+vXs0fp5La/yCnQDJ7n5bOdpNo6D7s2qYRAGtJI7 uYLAf2/wHjL7jkqHYMCh4v8sNQOT6SbWOdoWQ/5VMfo4+16LSNDSINAxwVX2qogd zVb0m67dLmM3ZZ0E5hNhLiyLT4AZbC7oJ5ECYzy9DN1+jn3einPPcwhdfpR/fdVV aeegna+5MrgkliXmG/s3RiX7vHlMxnCVaGYfy7uWODqR3uqYtawLpFJSV0hwm1Pi YtcoG7lhqLKbkwnhL2TbjMFtraM8Xv2U -----END CERTIFICATE-----Generated at Thu Nov 6 00:42:08 2025 by rpki-client