$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft File: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json) Hash identifier: h1DXrXi9UuGX0k9kAVETZqD0YJRtNcoPnN/mx+gNcq0= Subject key identifier: CD:2D:94:4F:5E:80:79:81:00:FA:2D:DB:48:8F:6F:57:12:10:13:65 Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 Certificate issuer: /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft Manifest number: 41 Signing time: Mon 03 Nov 2025 07:25:18 +0000 Manifest this update: Mon 03 Nov 2025 07:25:18 +0000 Manifest next update: Mon 10 Nov 2025 07:25:18 +0000 Files and hashes: 1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: pJE1J38XAPQkqDTk/ZoCBvnijKgmZf7HGapN9afNFZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Validity Not Before: Nov 3 07:25:18 2025 GMT Not After : Nov 10 07:25:18 2025 GMT Subject: CN=690858de-d4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:c6:60:dc:9b:99:c9:94:c5:fa:fc:b7:fe: 4b:38:7c:fc:9e:b9:fc:01:00:13:82:49:fa:f3:dd: ef:2d:37:87:8a:91:df:38:ae:60:2a:fe:24:0b:e3: b3:c2:2e:57:23:84:57:99:5d:67:54:22:ce:f2:db: f2:5d:1a:9d:c2:5b:26:57:76:f3:0f:2d:ab:c6:54: 6c:42:67:56:8a:d9:31:0f:97:4a:7e:18:dc:12:63: e5:65:76:7e:81:a2:a9:45:07:02:23:62:d8:8a:8d: d9:a4:c7:c4:b2:0a:62:cf:31:e9:1b:c8:ab:75:9a: 78:2e:5e:14:b5:36:52:5d:21:d4:25:13:c7:f1:63: bf:68:02:8c:ef:1c:34:0a:0b:fe:13:54:37:ea:ec: da:5c:8e:b1:82:fa:8a:72:5e:f0:e5:e3:d4:d8:62: c6:50:f4:c7:55:d6:d5:5c:04:bd:6a:6c:5c:23:70: 66:0b:42:54:6b:c5:d3:ab:1b:46:2e:7d:8e:c4:5f: b6:11:99:2e:01:81:ff:e5:40:f4:4e:ae:ca:d5:93: 30:ed:f5:e9:60:9a:c4:a1:9d:93:97:34:d8:8e:d3: a8:88:ab:9f:3d:db:82:a8:d5:33:29:53:c5:75:42: a4:d1:fe:a3:48:a2:01:60:52:d9:11:49:46:b7:74: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2D:94:4F:5E:80:79:81:00:FA:2D:DB:48:8F:6F:57:12:10:13:65 X509v3 Authority Key Identifier: keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6a:d7:ea:a1:07:f2:47:f7:20:82:10:50:98:40:15:74:6a: 11:90:29:29:98:c6:c7:cb:a9:47:22:8b:fb:85:b1:0d:8e:06: 1c:0c:df:01:b2:81:be:44:f5:74:5a:60:f0:30:d6:fb:79:79: f9:56:29:50:54:46:3f:8b:10:0a:bf:04:67:37:b5:b5:26:9f: d1:58:54:d2:58:24:b4:de:11:05:c5:b2:d8:78:4c:3f:77:30: 0f:24:63:78:01:cc:ba:33:5a:7e:b8:a7:95:1f:08:b6:2f:24: 22:f1:91:2f:85:f7:05:ad:a9:0e:33:44:b4:f8:a3:60:04:11: 1e:08:8f:1a:30:6f:99:8d:a2:76:ae:4a:a6:5d:cd:c2:87:39: c4:b4:da:0b:1d:23:15:9e:ea:8c:8a:28:24:8a:f2:e0:82:41: 49:b3:66:f6:fa:e4:46:13:2c:ff:b4:ec:3e:b5:4f:ea:65:79: 81:f0:89:97:31:d2:50:77:be:d3:1f:11:0a:2f:e8:68:06:8d: 8b:1a:83:9f:99:82:af:85:f7:d2:2b:28:b1:60:fc:47:95:b9: 65:a1:27:a3:92:7f:b0:2d:d9:d0:f4:30:ef:4b:b8:58:72:8b: 43:b2:f5:1b:58:13:cd:78:01:5f:50:79:52:71:56:51:09:10: de:58:72:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNjQ2N0U5MjZDMjE0NEVDRDBGMjc0OEY4NDkzMjhGODVG MDI4QUU5NDAeFw0yNTExMDMwNzI1MThaFw0yNTExMTAwNzI1MThaMBgxFjAUBgNV BAMTDTY5MDg1OGRlLWQ0ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdmsZg3JuZyZTF+vy3/ks4fPyeufwBABOCSfrz3e8tN4eKkd84rmAq/iQL47PC LlcjhFeZXWdUIs7y2/JdGp3CWyZXdvMPLavGVGxCZ1aK2TEPl0p+GNwSY+Vldn6B oqlFBwIjYtiKjdmkx8SyCmLPMekbyKt1mnguXhS1NlJdIdQlE8fxY79oAozvHDQK C/4TVDfq7NpcjrGC+opyXvDl49TYYsZQ9MdV1tVcBL1qbFwjcGYLQlRrxdOrG0Yu fY7EX7YRmS4Bgf/lQPROrsrVkzDt9elgmsShnZOXNNiO06iIq58924Ko1TMpU8V1 QqTR/qNIogFgUtkRSUa3dCwdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzS2UT16A eYEA+i3bSI9vVxIQE2UwHwYDVR0jBBgwFoAUZGfpJsIUTs0PJ0j4STKPhfAorpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0RCMEFFNDM2NTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMwUEowajRTVEtQaGZBb3Jw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkdmcEpzSVVUczBQSjBqNFNUS1BoZkFvcnBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0RCMEFFNDM2NTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMw UEowajRTVEtQaGZBb3JwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJq1+qhB/JH9yCCEFCYQBV0ahGQKSmYxsfLqUcii/uFsQ2OBhwM3wGy gb5E9XRaYPAw1vt5eflWKVBURj+LEAq/BGc3tbUmn9FYVNJYJLTeEQXFsth4TD93 MA8kY3gBzLozWn64p5UfCLYvJCLxkS+F9wWtqQ4zRLT4o2AEER4Ijxowb5mNonau SqZdzcKHOcS02gsdIxWe6oyKKCSK8uCCQUmzZvb65EYTLP+07D61T+pleYHwiZcx 0lB3vtMfEQov6GgGjYsag5+Zgq+F99IrKLFg/EeVuWWhJ6OSf7At2dD0MO9LuFhy i0Oy9RtYE814AV9QeVJxVlEJEN5Ycmo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:02 2025 by rpki-client