$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: AZY8I+uTZJE4yJre1vPk8gBJh4CKpv+x4aBeiRGx38E= Subject key identifier: 48:AF:14:2D:38:42:CE:D4:78:D5:D2:6D:0F:82:C3:79:59:22:1C:4C Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: 3C Signing time: Wed 05 Nov 2025 07:42:01 +0000 Manifest this update: Wed 05 Nov 2025 07:42:00 +0000 Manifest next update: Wed 12 Nov 2025 07:42:00 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: SuGpoEot7bSCpRrLYtXrhJdfeEnFrMMkAmmZcyHZWQ8=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 9UZrURL/5cYm+3q79UbhWbJw8l3P1ZGycupb15ORpsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Nov 5 07:42:00 2025 GMT Not After : Nov 12 07:42:00 2025 GMT Subject: CN=690affc8-cb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:d2:c8:44:16:83:ca:89:d4:2e:6b:bb:26: 0a:9d:1b:cb:37:82:fa:bf:75:27:cd:d3:67:c9:6f: 03:32:b8:5c:45:ec:b4:7e:8d:00:1f:7c:9e:84:37: 6a:34:76:73:59:18:ee:42:e1:d7:4e:06:6c:d3:a8: 49:ca:04:29:29:d6:f0:8c:52:3e:65:41:4b:0e:7e: f3:31:e3:28:ca:5e:11:93:f1:51:ec:6e:0b:40:af: cd:3a:bb:d0:c2:c7:40:2e:1f:72:ca:de:3c:69:b7: f1:a9:80:0a:21:e6:97:4f:6d:b2:b3:d8:f4:83:f6: 6d:d2:9c:ea:23:fb:57:27:ab:65:eb:4c:8c:2f:52: 55:ac:ba:1b:c9:f4:f5:b3:12:e6:66:9f:bf:6b:a2: f2:12:32:49:fe:14:b2:aa:fc:36:bd:0e:0f:1c:ed: 5b:a8:1a:cd:b2:1a:6f:8b:76:cb:71:48:58:13:db: 40:60:05:f4:bd:6c:68:35:57:59:3a:53:85:2d:99: 47:a0:b0:58:92:ac:ac:3f:70:ea:61:71:d8:c8:d5: 5e:a7:8d:a2:b2:09:34:84:cb:83:31:42:97:5c:9c: 7b:83:44:fd:0b:d6:70:3b:e9:9d:70:d9:dc:38:3d: a9:60:03:35:35:62:6c:b5:dd:d3:15:f3:6f:18:9c: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AF:14:2D:38:42:CE:D4:78:D5:D2:6D:0F:82:C3:79:59:22:1C:4C X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:42:8d:22:40:4d:4a:5f:3e:5b:1f:23:6a:0b:5d:00:73:8f: bd:58:4f:68:5c:60:45:90:d1:97:a4:bd:c1:6b:3a:c5:9c:3a: c4:aa:5a:00:6c:f6:ed:0f:21:f4:be:b5:11:83:96:34:a3:df: 2e:6f:06:d2:8e:a6:b8:dd:c3:29:95:b4:c5:95:23:1f:a3:22: 07:9d:eb:bd:53:19:23:96:61:a0:cd:eb:e8:25:aa:42:39:fe: a2:32:4e:56:b2:f5:57:0d:a8:4b:dc:cf:07:57:28:80:ba:29: f4:6b:dc:da:7a:83:ee:7a:be:70:82:2e:c5:13:9b:89:5a:7c: ab:94:58:50:3a:f1:d7:08:e5:94:34:a8:8b:a9:3e:97:c1:bf: 01:ef:31:76:b6:4f:5c:35:ff:c3:30:41:bc:8b:9d:0e:fc:d1: b7:2a:c7:f0:1f:bb:66:c8:18:bf:b9:06:94:8d:91:9a:e6:0a: cb:51:43:1d:22:d2:dc:a8:e6:db:2a:cb:cb:fa:b6:90:9d:4c: a3:76:d3:e4:fe:a8:20:ae:9e:15:9c:d0:2a:61:42:d5:f7:05: 18:81:84:4f:88:7f:2e:24:e9:2a:50:70:49:66:d8:c9:50:13: 6e:1b:4c:20:83:c5:04:32:14:24:47:6b:a7:87:db:35:25:3a: 00:73:46:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNjQ3RTVDQURDQjFGQkY3RUJCODk5QTcyMTlDM0EwRjAz RDNGN0IwRDAeFw0yNTExMDUwNzQyMDBaFw0yNTExMTIwNzQyMDBaMBgxFjAUBgNV BAMTDTY5MGFmZmM4LWNiMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCykdLIRBaDyonULmu7JgqdG8s3gvq/dSfN02fJbwMyuFxF7LR+jQAffJ6EN2o0 dnNZGO5C4ddOBmzTqEnKBCkp1vCMUj5lQUsOfvMx4yjKXhGT8VHsbgtAr806u9DC x0AuH3LK3jxpt/GpgAoh5pdPbbKz2PSD9m3SnOoj+1cnq2XrTIwvUlWsuhvJ9PWz EuZmn79rovISMkn+FLKq/Da9Dg8c7VuoGs2yGm+LdstxSFgT20BgBfS9bGg1V1k6 U4UtmUegsFiSrKw/cOphcdjI1V6njaKyCTSEy4MxQpdcnHuDRP0L1nA76Z1w2dw4 PalgAzU1Ymy13dMV828YnNF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSK8ULThC ztR41dJtD4LDeVkiHEwwHwYDVR0jBBgwFoAUZH5crcsfv367iZpyGcOg8D0/ew0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzkwNEY4NzBBNjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkg1Y3Jjc2Z2MzY3aVpweUdjT2c4RDBfZXcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzkwNEY4NzBBNjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL1pINWNyY3NmdjM2 N2lacHlHY09nOEQwX2V3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdCjSJATUpfPlsfI2oLXQBzj71YT2hcYEWQ0ZekvcFrOsWcOsSqWgBs 9u0PIfS+tRGDljSj3y5vBtKOprjdwymVtMWVIx+jIged671TGSOWYaDN6+glqkI5 /qIyTlay9VcNqEvczwdXKIC6KfRr3Np6g+56vnCCLsUTm4lafKuUWFA68dcI5ZQ0 qIupPpfBvwHvMXa2T1w1/8MwQbyLnQ780bcqx/Afu2bIGL+5BpSNkZrmCstRQx0i 0tyo5tsqy8v6tpCdTKN20+T+qCCunhWc0CphQtX3BRiBhE+Ify4k6SpQcElm2MlQ E24bTCCDxQQyFCRHa6eH2zUlOgBzRhM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:44 2025 by rpki-client