$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: VMqeUUgJVt2bUdtE0WTE0wHVLeoFurTcAzRy8H1n298= Subject key identifier: 90:8D:A1:9D:F2:51:3E:2E:C6:84:2E:E6:CE:79:4A:0F:FF:B2:D1:32 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 01CC Signing time: Wed 05 Nov 2025 03:04:18 +0000 Manifest this update: Wed 05 Nov 2025 03:04:17 +0000 Manifest next update: Wed 12 Nov 2025 03:04:17 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: JT/sAcMuvOU3Gb3jzPbsYtSy8inJPqbvitwCZbNb73E=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: /WHhFE8HR2/iD7xp6rQgZmxwAGaC9m5vwnf8mgyK/js=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: DrYkymHZyiAQw1Bqzltyrk4HKF4mxO309GHL6Bkb9ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Nov 5 03:04:17 2025 GMT Not After : Nov 12 03:04:17 2025 GMT Subject: CN=690abeb2-de50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:cd:7f:2c:f4:0c:c7:0f:ce:2d:0c:cc:41: b3:72:c3:ab:8b:47:55:16:d2:45:ee:6b:86:b4:8f: 92:41:0d:13:a1:96:f1:99:fa:a2:6e:d2:76:e7:83: 16:b9:e4:06:18:b1:9f:b4:9e:63:bf:36:ff:e4:5e: 08:1f:50:52:bc:06:d7:06:70:34:a5:98:04:04:a7: ff:11:e8:63:8c:cd:f1:82:11:48:b1:e3:cc:9e:62: d2:7c:82:4f:52:01:43:6b:83:35:6c:f3:b2:2a:a0: e2:94:ea:b4:30:ce:67:c5:52:bf:b3:45:8f:a6:c6: c1:1a:68:59:43:39:36:14:dc:85:4a:f3:b6:15:08: 98:52:18:3b:c9:21:04:2a:7d:e6:1a:27:8e:cd:62: 0f:0a:92:a2:8b:be:82:18:e5:48:cf:06:73:9c:34: f4:cd:b4:cf:fc:60:42:70:cc:b4:91:db:65:b0:fc: 96:c1:6f:79:1d:af:8b:97:65:98:75:2d:6b:f4:81: ac:31:b0:bf:d8:eb:b3:13:a5:0b:a0:77:3f:ff:85: c6:a1:47:ca:58:f5:04:42:8a:8f:64:be:dc:9c:87: 08:fb:54:8d:c2:e2:df:f8:12:a6:6b:a9:2c:31:bf: 57:25:51:88:6e:56:c7:92:fc:b9:6f:bc:0d:88:2a: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:A1:9D:F2:51:3E:2E:C6:84:2E:E6:CE:79:4A:0F:FF:B2:D1:32 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:52:78:93:4c:ed:5b:11:4e:44:48:c5:cc:ef:8d:90:37:62: 04:0b:1c:25:65:aa:2e:a2:f1:aa:39:38:e1:c5:3c:c6:79:1d: 45:38:2a:58:56:2a:6a:49:f7:dd:d5:3b:08:9c:58:25:5c:6a: 37:5a:0b:87:8f:a7:c4:df:23:cb:b5:57:b2:f5:4a:4c:4c:24: 8c:7a:11:33:6d:da:9c:0d:2e:6c:c0:3d:da:46:30:fa:93:d1: 27:f7:20:e3:a9:68:7d:8a:54:98:a4:38:68:bd:d9:ed:e8:68: d0:96:7f:24:fb:71:27:c1:67:7c:2d:c7:7a:b3:84:a1:92:45: 2f:b4:ed:5a:7a:28:ca:76:17:0c:0b:8f:99:72:4b:ac:a9:9b: 6d:45:ad:f0:f3:99:fe:ed:c9:4d:a0:e8:38:54:f3:1e:cf:08: 17:92:bd:8d:3a:ad:03:31:bb:de:89:de:2d:7a:73:0b:a2:2a: 00:d6:fa:f0:b5:84:3e:c3:e5:15:50:83:5b:ff:51:8a:38:ce: be:ee:aa:09:6b:a2:50:4d:b5:33:0d:6c:2a:81:d9:b9:12:ff: a2:72:1d:20:14:d0:9e:f5:0b:12:10:f4:ff:1a:67:f6:68:83: 84:e3:33:e7:c3:90:85:67:e4:1a:46:df:2f:ed:36:ee:05:76: 40:df:5d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUxMTA1MDMwNDE3WhcNMjUxMTEyMDMwNDE3WjAYMRYwFAYD VQQDEw02OTBhYmViMi1kZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt3Nfyz0DMcPzi0MzEGzcsOri0dVFtJF7muGtI+SQQ0ToZbxmfqibtJ254MW ueQGGLGftJ5jvzb/5F4IH1BSvAbXBnA0pZgEBKf/EehjjM3xghFIsePMnmLSfIJP UgFDa4M1bPOyKqDilOq0MM5nxVK/s0WPpsbBGmhZQzk2FNyFSvO2FQiYUhg7ySEE Kn3mGieOzWIPCpKii76CGOVIzwZznDT0zbTP/GBCcMy0kdtlsPyWwW95Ha+Ll2WY dS1r9IGsMbC/2OuzE6ULoHc//4XGoUfKWPUEQoqPZL7cnIcI+1SNwuLf+BKma6ks Mb9XJVGIblbHkvy5b7wNiCqCNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCNoZ3y UT4uxoQu5s55Sg//stEyMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUniTTO1bEU5ESMXM742QN2IECxwlZaouovGqOTjhxTzGeR1FOCpY VipqSffd1TsInFglXGo3WguHj6fE3yPLtVey9UpMTCSMehEzbdqcDS5swD3aRjD6 k9En9yDjqWh9ilSYpDhovdnt6GjQln8k+3EnwWd8Lcd6s4ShkkUvtO1aeijKdhcM C4+ZckusqZttRa3w85n+7clNoOg4VPMezwgXkr2NOq0DMbveid4tenMLoioA1vrw tYQ+w+UVUINb/1GKOM6+7qoJa6JQTbUzDWwqgdm5Ev+ich0gFNCe9QsSEPT/Gmf2 aIOE4zPnw5CFZ+QaRt8v7TbuBXZA312O -----END CERTIFICATE-----Generated at Wed Nov 5 15:24:44 2025 by rpki-client