$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: Pr8bb8yM67JWKwd0ZeorcMy7XoXv1dMPMwpOVEMBsIk= Subject key identifier: E4:9C:CF:A2:93:06:5F:63:D5:21:2A:EE:54:AA:8E:A0:DC:24:6C:B1 Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 0180 Signing time: Wed 05 Nov 2025 03:57:32 +0000 Manifest this update: Wed 05 Nov 2025 03:57:32 +0000 Manifest next update: Wed 12 Nov 2025 03:57:32 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: b+fcnSNMAQN8i101yuoxmlPZyiMtd73Z3Qrhkikv00g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: Nov 5 03:57:32 2025 GMT Not After : Nov 12 03:57:32 2025 GMT Subject: CN=690acb2c-46a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:db:58:1b:c3:ed:3f:da:37:34:06:43:70: 45:34:93:a4:d6:d7:cd:22:ee:fd:9e:32:91:13:2e: ae:2a:49:3e:b0:41:32:0d:f4:fd:8e:a5:a1:83:3e: b9:48:ee:9c:86:b4:42:46:3a:19:11:23:8c:fe:b5: f9:77:e6:e4:7c:46:1f:87:c5:2a:11:84:61:bd:24: 02:87:84:34:7e:76:e0:d7:0f:69:f0:78:4e:b3:73: ea:c9:25:8f:85:0f:b3:2b:fb:5d:cd:a9:84:d3:62: 73:78:2d:14:de:44:e6:72:76:79:b1:65:b5:6f:3a: 37:07:5c:5b:da:ae:be:95:b8:9e:34:94:66:f5:81: 0b:ee:48:d1:41:67:77:af:e8:b1:79:43:36:dc:a1: 23:59:66:f9:e8:24:38:a7:93:e1:7b:dd:e0:21:c8: 79:8b:5a:61:37:05:e9:d7:8f:10:29:21:e9:15:0c: e3:dc:7f:c1:9c:22:fa:cd:7d:ec:04:99:b7:1b:9f: c5:ee:f5:6a:45:b2:30:1d:f9:a2:86:25:82:51:2f: 3d:8a:36:0e:72:3e:55:4e:a2:05:a7:46:46:86:46: 03:25:3d:f7:e9:7a:f3:55:e6:68:6b:20:c5:a9:74: 9c:e9:bc:dd:76:6a:09:fd:c7:90:05:4e:71:cd:48: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9C:CF:A2:93:06:5F:63:D5:21:2A:EE:54:AA:8E:A0:DC:24:6C:B1 X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:86:e4:60:55:b1:84:0f:4f:d1:57:db:28:87:b4:e5:6d:3b: 9f:d3:a8:2c:5a:95:33:f7:5a:7a:90:1d:bf:0d:c1:69:7b:0f: ce:f1:6e:3d:32:8e:d7:a3:79:bf:11:aa:a5:a5:34:57:a4:bd: 37:76:38:b0:26:25:c9:6a:8b:bc:b8:63:55:f9:19:5b:e1:ca: 39:33:ae:c9:98:bb:02:b4:f1:d9:a6:c3:98:33:0d:b5:cf:03: a8:fb:80:83:93:d7:0d:cf:b9:b2:43:44:db:e3:06:43:61:4c: 0c:fe:e3:cb:b7:aa:e3:c8:e1:32:76:e2:96:19:28:09:d2:c1: c3:2b:12:ac:ea:20:da:7e:68:38:ed:bb:8f:eb:41:82:d6:ee: cc:61:f9:bb:49:04:ec:5a:13:71:8b:dc:b9:70:a5:f9:45:c3: 03:6a:3b:4e:cd:80:53:ed:b0:e3:9e:41:e3:ad:17:bc:c7:08: 85:90:99:b5:f1:64:74:e3:23:1e:ef:55:33:69:11:f1:df:d4: 99:f8:92:3a:c8:df:d0:ce:32:95:26:c8:a3:ff:00:d8:d0:70: f8:35:02:b0:5f:ab:69:3e:39:fa:5e:e5:3b:82:74:0f:f1:f8: 5f:33:a5:36:9c:67:d2:d0:06:11:1f:49:2b:aa:4a:c5:73:8a: 42:dc:c9:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjUxMTA1MDM1NzMyWhcNMjUxMTEyMDM1NzMyWjAYMRYwFAYD VQQDEw02OTBhY2IyYy00NmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApazbWBvD7T/aNzQGQ3BFNJOk1tfNIu79njKREy6uKkk+sEEyDfT9jqWhgz65 SO6chrRCRjoZESOM/rX5d+bkfEYfh8UqEYRhvSQCh4Q0fnbg1w9p8HhOs3PqySWP hQ+zK/tdzamE02JzeC0U3kTmcnZ5sWW1bzo3B1xb2q6+lbieNJRm9YEL7kjRQWd3 r+ixeUM23KEjWWb56CQ4p5Phe93gIch5i1phNwXp148QKSHpFQzj3H/BnCL6zX3s BJm3G5/F7vVqRbIwHfmihiWCUS89ijYOcj5VTqIFp0ZGhkYDJT336XrzVeZoayDF qXSc6bzddmoJ/ceQBU5xzUjZ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOScz6KT Bl9j1SEq7lSqjqDcJGyxMB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5huRgVbGED0/RV9soh7TlbTuf06gsWpUz91p6kB2/DcFpew/O8W49 Mo7Xo3m/EaqlpTRXpL03djiwJiXJaou8uGNV+Rlb4co5M67JmLsCtPHZpsOYMw21 zwOo+4CDk9cNz7myQ0Tb4wZDYUwM/uPLt6rjyOEyduKWGSgJ0sHDKxKs6iDafmg4 7buP60GC1u7MYfm7SQTsWhNxi9y5cKX5RcMDajtOzYBT7bDjnkHjrRe8xwiFkJm1 8WR04yMe71UzaRHx39SZ+JI6yN/QzjKVJsij/wDY0HD4NQKwX6tpPjn6XuU7gnQP 8fhfM6U2nGfS0AYRH0krqkrFc4pC3Mks -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:13 2025 by rpki-client