$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft File: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft (raw, json) Hash identifier: n779UotRr3csNCIq5eIgQOBi91f2hRsHTKjcRcjtlXI= Subject key identifier: 76:7F:06:41:59:CC:4B:0C:79:BF:45:46:B9:9C:09:BF:CC:FD:57:2D Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft Manifest number: 0B05 Signing time: Tue 04 Nov 2025 19:26:45 +0000 Manifest this update: Tue 04 Nov 2025 19:26:44 +0000 Manifest next update: Tue 11 Nov 2025 19:26:44 +0000 Files and hashes: 1: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl (hash: ixSPlc7j55fafe3hgHNlNJ/6wLDsnJvAaACgYdX3icw=) 2: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (hash: lj/CFwKu+N9KL+BN8rOtiVH/zU3sp7+mG9hyAnPkezU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Validity Not Before: Nov 4 19:26:44 2025 GMT Not After : Nov 11 19:26:44 2025 GMT Subject: CN=690a5375-ad0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:ae:38:7e:cd:be:dc:a3:37:63:8e:21:f7: 77:60:77:b3:6a:ee:10:40:65:7c:5c:ac:0b:7d:12: 5b:f3:1e:45:18:b9:90:d5:6f:61:b5:02:58:3a:2e: b2:3a:13:11:5a:53:10:32:c9:69:e1:4f:a0:48:c5: c5:05:15:1f:be:f0:ec:9b:1f:14:8b:dc:48:2f:c1: 80:08:3c:b8:db:28:a5:f0:9f:25:22:08:32:d2:18: 11:be:06:d0:a7:1f:92:74:22:96:19:bf:ee:83:e8: 05:75:95:4d:d9:a8:8a:3b:8c:33:68:bb:91:8e:1f: fc:42:f4:96:2a:df:6b:61:5d:5a:31:34:d1:1f:4f: d9:5a:6e:1f:ef:71:64:66:89:dc:bf:77:54:ce:a6: cd:de:7d:2d:c3:26:d2:14:98:95:ce:f5:14:33:04: c5:50:9e:b9:ec:66:76:f8:2c:9f:b8:36:eb:43:e0: 46:89:ec:d2:5b:ad:7d:3f:06:72:c9:2d:cc:9e:dd: d2:40:71:bc:ee:54:06:d7:46:e5:5e:23:70:b3:d5: cd:61:60:a6:9b:51:eb:06:a0:04:01:a9:66:dc:20: 91:4a:d0:13:2b:ae:f7:86:88:69:a1:3f:37:41:0b: 1b:47:20:6b:d3:2c:f9:d9:ed:f0:20:63:aa:67:9b: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7F:06:41:59:CC:4B:0C:79:BF:45:46:B9:9C:09:BF:CC:FD:57:2D X509v3 Authority Key Identifier: keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:64:23:77:f5:36:d2:fb:bc:71:d7:74:cd:60:f9:0e:12:1b: a5:a7:34:38:89:ab:87:54:d8:b8:e3:d8:b9:97:6a:a3:ea:55: 79:1c:c4:b7:b8:5a:49:8c:41:67:72:78:fb:c6:f9:40:a7:d6: 70:0f:77:a1:26:37:c8:aa:41:d3:8f:a0:5c:df:80:df:ac:c0: 45:40:28:cc:58:8a:eb:cb:14:88:2f:97:01:f1:36:22:93:31: 1c:97:50:92:61:28:bd:04:70:17:c1:67:21:bb:8d:d3:cc:5d: 2c:9b:d9:93:02:19:69:d5:bb:18:01:6c:ec:3b:65:ae:c5:cb: c1:ef:1d:0f:5e:4d:a1:93:23:73:9b:69:84:9c:c2:42:b3:22: 4d:b4:29:d3:67:e2:33:cc:d9:56:56:e1:5c:74:83:fb:2e:08: 44:9d:ab:8c:47:d9:03:83:7b:30:a2:41:75:fc:15:7a:5f:28: 48:aa:99:c3:e7:04:46:fb:cd:8c:8f:bb:51:58:23:4d:25:69: d1:a4:75:cf:3e:af:ab:b6:eb:27:84:37:57:14:de:9e:c1:71: 2a:72:a8:b3:86:73:41:29:75:9e:78:b8:92:94:bf:a7:64:36: 35:3c:ae:39:cf:ed:51:fe:90:d6:f1:f3:2a:ec:dc:07:82:f0: 3e:26:c0:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk0QUUxMTAvBgNVBAUTKENEQTQ3RTBBMUVFQjUyNUYzQjVBMEZBRkIyRkEwREJC MzYzQkZBNEQwHhcNMjUxMTA0MTkyNjQ0WhcNMjUxMTExMTkyNjQ0WjAYMRYwFAYD VQQDEw02OTBhNTM3NS1hZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqquOH7NvtyjN2OOIfd3YHezau4QQGV8XKwLfRJb8x5FGLmQ1W9htQJYOi6y OhMRWlMQMslp4U+gSMXFBRUfvvDsmx8Ui9xIL8GACDy42yil8J8lIggy0hgRvgbQ px+SdCKWGb/ug+gFdZVN2aiKO4wzaLuRjh/8QvSWKt9rYV1aMTTRH0/ZWm4f73Fk Zoncv3dUzqbN3n0twybSFJiVzvUUMwTFUJ657GZ2+CyfuDbrQ+BGiezSW619PwZy yS3Mnt3SQHG87lQG10blXiNws9XNYWCmm1HrBqAEAalm3CCRStATK673hohpoT83 QQsbRyBr0yz52e3wIGOqZ5scdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ/BkFZ zEsMeb9FRrmcCb/M/VctMB8GA1UdIwQYMBaAFM2kfgoe61JfO1oPr7L6Dbs2O/pN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTRBRS8zRDhCOEM0ODUy QjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVsODdXZy12c3ZvTnV6WTct azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phUi1DaDdyVWw4N1dnLXZzdm9OdXpZNy1rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTRBRS8zRDhCOEM0ODUyQjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVs ODdXZy12c3ZvTnV6WTctazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3ZCN39TbS+7xx13TNYPkOEhulpzQ4iauHVNi449i5l2qj6lV5HMS3 uFpJjEFncnj7xvlAp9ZwD3ehJjfIqkHTj6Bc34DfrMBFQCjMWIrryxSIL5cB8TYi kzEcl1CSYSi9BHAXwWchu43TzF0sm9mTAhlp1bsYAWzsO2WuxcvB7x0PXk2hkyNz m2mEnMJCsyJNtCnTZ+IzzNlWVuFcdIP7LghEnauMR9kDg3swokF1/BV6XyhIqpnD 5wRG+82Mj7tRWCNNJWnRpHXPPq+rtusnhDdXFN6ewXEqcqizhnNBKXWeeLiSlL+n ZDY1PK45z+1R/pDW8fMq7NwHgvA+JsBk -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:24 2025 by rpki-client