$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: OPxrnTZO6lMOY2XubAT9tB40BgxHbwxTSmM5CfsJ6Os= Subject key identifier: 33:E4:A2:BE:02:2F:AA:98:A3:CC:98:1C:6B:60:38:48:14:F0:06:79 Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: 0144 Signing time: Mon 03 Nov 2025 04:28:33 +0000 Manifest this update: Mon 03 Nov 2025 04:28:33 +0000 Manifest next update: Mon 10 Nov 2025 04:28:33 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: Njn0Z8nyjgC3YvNyQs7botSGJMQIWt54JBVixQkgucY=) 2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: Nov 3 04:28:33 2025 GMT Not After : Nov 10 04:28:33 2025 GMT Subject: CN=69082f71-7eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:8d:55:20:a8:b0:83:b8:87:5c:18:0a:82: d4:cd:5f:cb:0a:59:0e:fd:99:87:a5:d4:59:b6:11: 21:af:73:21:60:32:05:55:25:fa:ed:fd:68:dd:bf: bd:02:48:16:f4:a6:53:61:16:cb:7f:a0:71:92:ff: 27:70:b6:f0:55:5b:8e:41:83:83:4e:d2:87:7e:6f: ee:91:10:07:9c:2c:55:b6:4e:c7:04:6a:d2:3b:88: 3b:e6:b9:3d:69:96:43:8f:65:6e:fa:e3:8d:1f:e5: 09:3d:e4:19:40:9b:9a:5e:0f:6d:71:56:91:e7:a8: ea:c2:6e:88:52:dc:00:0d:20:d1:3d:55:e2:46:ab: 20:5b:e6:4a:fd:8b:d8:e9:11:0c:48:7d:b0:87:99: 29:c3:13:78:d7:0d:48:68:68:16:71:eb:08:24:03: 4a:71:00:68:2d:78:1a:21:8a:b4:3c:6d:d3:4b:1f: 26:32:56:ec:64:09:cf:c2:f5:1e:5d:31:d4:b2:69: e3:a1:2b:4d:b3:98:d7:72:ab:fc:6d:dd:88:8c:98: 53:44:a5:40:a9:aa:e4:df:a8:8f:1a:e0:a5:05:58: 92:e1:b2:c8:08:a7:89:6a:28:d3:74:91:d3:24:ab: ab:8e:8a:ad:4e:29:8c:96:2b:d3:2e:22:83:d4:13: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E4:A2:BE:02:2F:AA:98:A3:CC:98:1C:6B:60:38:48:14:F0:06:79 X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ba:a9:ff:be:17:7e:06:a5:3a:ca:f4:72:ce:de:1a:17:0c: b9:20:41:58:3c:02:97:e7:9d:5d:a3:ea:ed:ec:af:72:c8:2c: 06:ef:0b:ee:2c:89:f8:60:d8:43:e8:95:01:f8:ac:31:df:c3: e7:9e:65:9d:88:ff:5d:3c:f6:15:4d:45:1a:c5:57:e4:a5:40: af:28:69:b2:fc:71:e4:00:ef:51:15:53:81:cb:8a:7b:b2:37: 8c:54:e6:00:88:a8:ce:da:8d:30:3d:62:10:f0:3b:28:57:16: 95:58:ef:c8:21:fa:48:a1:ac:22:a4:ff:66:be:48:b9:68:55: 0b:b1:8e:37:b7:3f:a0:cc:40:a8:d3:1f:84:c4:40:d3:1a:28: ab:23:a7:54:3e:ba:c5:ed:db:1e:2f:66:76:ac:e2:e4:4a:ce: ff:0b:31:05:8e:f1:3a:57:60:c8:67:43:ff:7c:5e:0e:43:36: df:24:36:6d:49:66:c1:c6:07:93:df:42:cf:4e:b7:a1:df:3c: 69:d8:4b:2d:27:1f:b6:df:b8:4e:6b:c2:ca:90:66:92:30:d1: 0c:8a:de:0d:fe:93:8a:bb:21:ea:24:21:8c:2f:d1:6b:69:46: 09:a4:a2:55:5b:f5:03:f8:1c:50:8b:3d:9d:24:e7:9c:f9:f0: 08:ab:79:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjUxMTAzMDQyODMzWhcNMjUxMTEwMDQyODMzWjAYMRYwFAYD VQQDEw02OTA4MmY3MS03ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30KNVSCosIO4h1wYCoLUzV/LClkO/ZmHpdRZthEhr3MhYDIFVSX67f1o3b+9 AkgW9KZTYRbLf6Bxkv8ncLbwVVuOQYODTtKHfm/ukRAHnCxVtk7HBGrSO4g75rk9 aZZDj2Vu+uONH+UJPeQZQJuaXg9tcVaR56jqwm6IUtwADSDRPVXiRqsgW+ZK/YvY 6REMSH2wh5kpwxN41w1IaGgWcesIJANKcQBoLXgaIYq0PG3TSx8mMlbsZAnPwvUe XTHUsmnjoStNs5jXcqv8bd2IjJhTRKVAqark36iPGuClBViS4bLICKeJaijTdJHT JKurjoqtTimMlivTLiKD1BPJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPkor4C L6qYo8yYHGtgOEgU8AZ5MB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIuqn/vhd+BqU6yvRyzt4aFwy5IEFYPAKX551do+rt7K9yyCwG7wvu LIn4YNhD6JUB+Kwx38PnnmWdiP9dPPYVTUUaxVfkpUCvKGmy/HHkAO9RFVOBy4p7 sjeMVOYAiKjO2o0wPWIQ8DsoVxaVWO/IIfpIoawipP9mvki5aFULsY43tz+gzECo 0x+ExEDTGiirI6dUPrrF7dseL2Z2rOLkSs7/CzEFjvE6V2DIZ0P/fF4OQzbfJDZt SWbBxgeT30LPTreh3zxp2EstJx+237hOa8LKkGaSMNEMit4N/pOKuyHqJCGML9Fr aUYJpKJVW/UD+BxQiz2dJOec+fAIq3mS -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:30 2025 by rpki-client