$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: DlgeoISkGpAbWUFqzkBsZkDRf8Mzl9VkNaytIUGOtMA= Subject key identifier: 80:F9:2E:BE:17:8F:F8:13:8A:FB:EA:B3:88:CF:12:2F:2A:ED:09:31 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B5F Signing time: Tue 04 Nov 2025 19:38:09 +0000 Manifest this update: Tue 04 Nov 2025 19:38:09 +0000 Manifest next update: Tue 11 Nov 2025 19:38:09 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: 6OhWzH/V5M3s71a3D0ulF85EfiwBhWxEc9B3PhL9gHY=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: +N5jmkplHBxyDznfmd7ebgnemm9ct5hvDRURAbbUFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Nov 4 19:38:09 2025 GMT Not After : Nov 11 19:38:09 2025 GMT Subject: CN=690a5621-fdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:f3:e2:c4:b9:8c:11:ec:c6:2c:b1:64:15: 02:ff:83:4b:f9:b4:4b:e5:21:6e:05:aa:27:f6:e8: eb:44:2b:33:f0:73:08:15:55:63:60:09:85:0e:0d: 69:31:40:35:71:df:31:b3:d2:e0:1b:83:8a:a7:43: 1c:11:de:df:aa:38:62:d7:65:6a:9d:3e:cf:67:33: 05:24:23:3f:1d:38:41:1e:6b:90:aa:cd:e6:50:59: ef:6c:2c:31:aa:71:33:ae:7c:b5:75:b3:06:7b:28: 99:af:8e:7b:a0:07:80:a2:d0:a0:97:0c:95:60:f5: a1:93:9f:80:9d:e6:1e:f5:8e:31:99:a7:ef:35:5c: a2:f9:62:01:c2:c1:72:93:59:ed:cc:17:5e:8c:9b: bb:5c:e6:06:1b:e9:96:24:d1:8f:f5:d0:e6:1d:72: d7:54:f4:c3:aa:ab:ac:13:26:1e:ba:d6:63:49:66: e1:38:9c:79:a2:56:a3:61:f0:78:fb:96:78:74:d3: 1b:30:13:2b:33:3e:17:ac:d9:97:1c:24:b3:6f:7e: 21:ad:78:1b:48:54:10:3c:c9:81:10:75:10:cd:b2: d9:f7:b1:65:7a:39:97:e5:f3:17:9c:b8:5d:7f:f0: 4a:f3:14:d6:7e:6a:f9:5e:a1:87:3a:99:52:ec:7d: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:2E:BE:17:8F:F8:13:8A:FB:EA:B3:88:CF:12:2F:2A:ED:09:31 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:08:25:ce:b1:e3:59:de:6c:f9:2a:8f:f3:97:97:58:7e:04: d4:53:c2:25:93:d7:80:26:15:55:fd:a3:a4:db:f9:03:9b:dc: 88:22:7e:a5:64:8b:da:7d:d4:58:64:2a:6c:49:c4:49:7f:d2: 0f:69:47:ae:98:27:be:76:d1:36:dc:6b:4e:35:dd:de:a1:39: 61:15:8b:18:52:f7:c3:b0:83:5a:12:d9:02:23:4d:c5:bc:32: 07:6c:b7:fb:ff:8b:76:ba:07:09:bf:df:13:f8:b6:b6:2c:32: d8:93:48:9a:ae:98:f7:04:8d:80:37:4c:18:a3:40:20:d5:7e: 84:3b:83:6e:c2:21:1b:70:46:08:bb:a2:b8:2c:b6:a5:3b:f0: a8:91:e9:c2:32:3e:95:f2:26:a7:e0:c1:75:3b:f0:67:82:cd: 11:a5:74:a7:51:b5:68:37:24:9f:49:03:7f:59:58:37:59:59: 32:0f:98:1e:e7:aa:4b:13:d9:74:43:74:3a:ee:3f:2c:f6:69: da:f1:2c:cb:0e:02:a1:de:32:8e:d6:5d:10:fb:ff:4a:e0:00: af:33:ed:fd:8c:e9:35:f7:e3:9f:a3:bf:53:c6:37:ec:1f:a9: 4a:f8:f7:1b:29:41:b6:84:f6:93:3f:90:98:cd:44:ae:fa:a2: c4:a0:e7:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUxMTA0MTkzODA5WhcNMjUxMTExMTkzODA5WjAYMRYwFAYD VQQDEw02OTBhNTYyMS1mZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqknz4sS5jBHsxiyxZBUC/4NL+bRL5SFuBaon9ujrRCsz8HMIFVVjYAmFDg1p MUA1cd8xs9LgG4OKp0McEd7fqjhi12VqnT7PZzMFJCM/HThBHmuQqs3mUFnvbCwx qnEzrny1dbMGeyiZr457oAeAotCglwyVYPWhk5+AneYe9Y4xmafvNVyi+WIBwsFy k1ntzBdejJu7XOYGG+mWJNGP9dDmHXLXVPTDqqusEyYeutZjSWbhOJx5olajYfB4 +5Z4dNMbMBMrMz4XrNmXHCSzb34hrXgbSFQQPMmBEHUQzbLZ97FlejmX5fMXnLhd f/BK8xTWfmr5XqGHOplS7H1d6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFID5Lr4X j/gTivvqs4jPEi8q7QkxMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLCCXOseNZ3mz5Ko/zl5dYfgTUU8Ilk9eAJhVV/aOk2/kDm9yIIn6l ZIvafdRYZCpsScRJf9IPaUeumCe+dtE23GtONd3eoTlhFYsYUvfDsINaEtkCI03F vDIHbLf7/4t2ugcJv98T+La2LDLYk0iarpj3BI2AN0wYo0Ag1X6EO4NuwiEbcEYI u6K4LLalO/CokenCMj6V8ian4MF1O/Bngs0RpXSnUbVoNySfSQN/WVg3WVkyD5ge 56pLE9l0Q3Q67j8s9mna8SzLDgKh3jKO1l0Q+/9K4ACvM+39jOk19+Ofo79Txjfs H6lK+PcbKUG2hPaTP5CYzUSu+qLEoOea -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:53 2025 by rpki-client