$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: 1BrmREysYlWYwcYMnV3TE/R6RjhgQLWZhb69lN1PBSc= Subject key identifier: FD:0B:DA:60:1B:00:D0:3C:4D:D9:75:05:32:58:54:8B:26:D6:7C:7C Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 23AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 2399 Signing time: Sun 02 Nov 2025 15:49:49 +0000 Manifest this update: Sun 02 Nov 2025 15:49:48 +0000 Manifest next update: Sun 09 Nov 2025 15:49:48 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: M8Ycx0j7mSDDzOA338KdC7hD9BQVaSwhidXDz+OI2Ks=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9130 (0x23aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Nov 2 15:49:48 2025 GMT Not After : Nov 9 15:49:48 2025 GMT Subject: CN=69077d9c-692e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:bd:88:8a:9d:31:8a:4c:98:40:25:d0:29: 0b:3a:7b:08:9d:42:16:eb:4b:17:65:a5:de:cc:89: e4:7d:10:ea:e0:79:b5:cd:a3:58:da:34:3e:96:ca: 5a:a0:ec:ba:90:a4:ef:88:a4:e8:7d:65:ba:5e:11: 99:47:cb:90:18:3e:90:e0:3a:68:fd:b5:93:d7:ec: 18:68:2b:4f:dc:5d:8d:cf:29:63:2e:62:33:53:bd: 88:5a:45:56:64:12:f5:5d:c2:ce:8a:4e:28:b1:7f: 9d:5d:f2:dc:84:e1:de:ea:18:34:68:26:21:9e:a5: 68:4c:07:6e:88:47:b2:61:01:17:d8:04:e7:6b:91: 55:c7:d1:26:6a:70:05:3b:83:fe:f3:9c:7a:d2:d2: ac:7e:38:2d:48:5a:52:cb:63:4c:89:d6:0d:d9:e6: 71:ff:9e:86:56:0f:c7:6f:1c:e6:40:d0:57:78:d7: 2e:d1:c9:3b:4e:8a:d2:78:a6:34:81:c5:cf:34:04: 30:48:e7:0f:c0:25:ef:fa:11:cc:52:41:e2:a1:9f: bc:7f:77:80:8f:bf:7f:09:a7:8f:d1:24:57:0e:8a: d8:99:b4:d9:ad:20:d3:99:b7:e3:c1:01:b7:93:17: 68:2d:57:7a:ec:9c:93:32:0e:a1:09:8a:b5:53:cc: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0B:DA:60:1B:00:D0:3C:4D:D9:75:05:32:58:54:8B:26:D6:7C:7C X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a6:74:35:58:09:0d:6d:3d:39:ba:49:19:9f:6a:71:5b:4f: ab:06:ce:96:85:66:db:4d:67:db:e0:77:a2:96:c7:1d:35:07: aa:35:92:7f:89:98:4d:34:26:ed:54:46:2c:02:c4:72:69:f4: fa:53:62:f2:b1:cc:0a:67:34:a0:b6:b4:f4:21:6c:52:cc:f0: 23:37:35:4a:6d:dd:b8:d2:e8:fe:53:6f:06:dd:ad:fe:f1:d7: 0e:2a:06:55:c5:48:ba:32:21:04:29:c9:ed:c6:e7:c5:e0:09: 8c:fe:eb:82:db:a8:85:7f:6d:6f:ca:40:d7:6c:fb:8d:cb:a9: 4b:d9:0b:c7:3a:6c:b5:09:4e:c8:c0:14:9f:7c:1b:e8:db:f1: 70:ce:2f:a5:a5:5a:24:b8:d3:1a:f8:68:4f:58:a2:98:ca:77: f5:84:de:f8:ae:49:ab:ba:c3:17:52:99:e4:43:50:f7:c3:d8: e2:6b:6c:d2:e1:24:83:b0:3e:61:ec:0d:51:d8:7f:e8:80:f4: cd:ca:8c:15:91:9f:d0:8c:49:b4:25:0d:ad:a6:a2:3c:61:37: 26:ab:1f:a1:53:d6:7f:aa:c4:e3:eb:4c:6c:74:c6:63:54:9a: e0:d9:5c:89:71:9e:5f:d8:9c:02:e7:17:d0:5b:0a:b5:e3:1d: d4:49:35:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUxMTAyMTU0OTQ4WhcNMjUxMTA5MTU0OTQ4WjAYMRYwFAYD VQQDEw02OTA3N2Q5Yy02OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwju9iIqdMYpMmEAl0CkLOnsInUIW60sXZaXezInkfRDq4Hm1zaNY2jQ+lspa oOy6kKTviKTofWW6XhGZR8uQGD6Q4Dpo/bWT1+wYaCtP3F2NzyljLmIzU72IWkVW ZBL1XcLOik4osX+dXfLchOHe6hg0aCYhnqVoTAduiEeyYQEX2ATna5FVx9EmanAF O4P+85x60tKsfjgtSFpSy2NMidYN2eZx/56GVg/HbxzmQNBXeNcu0ck7TorSeKY0 gcXPNAQwSOcPwCXv+hHMUkHioZ+8f3eAj79/CaeP0SRXDorYmbTZrSDTmbfjwQG3 kxdoLVd67JyTMg6hCYq1U8yjKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0L2mAb ANA8Tdl1BTJYVIsm1nx8MB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2pnQ1WAkNbT05ukkZn2pxW0+rBs6WhWbbTWfb4HeilscdNQeqNZJ/ iZhNNCbtVEYsAsRyafT6U2LyscwKZzSgtrT0IWxSzPAjNzVKbd240uj+U28G3a3+ 8dcOKgZVxUi6MiEEKcntxufF4AmM/uuC26iFf21vykDXbPuNy6lL2QvHOmy1CU7I wBSffBvo2/Fwzi+lpVokuNMa+GhPWKKYynf1hN74rkmrusMXUpnkQ1D3w9jia2zS 4SSDsD5h7A1R2H/ogPTNyowVkZ/QjEm0JQ2tpqI8YTcmqx+hU9Z/qsTj60xsdMZj VJrg2VyJcZ5f2JwC5xfQWwq14x3USTUi -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:23 2025 by rpki-client