$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: t7/ras9G0qrZazSumYfG+urchMe/3oHEzHwwdev08QU= Subject key identifier: D0:BE:DE:3D:9F:A8:03:26:D0:BF:2C:A4:C4:F8:09:C5:D0:F6:1A:38 Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 9B Signing time: Wed 05 Nov 2025 06:43:03 +0000 Manifest this update: Wed 05 Nov 2025 06:43:03 +0000 Manifest next update: Wed 12 Nov 2025 06:43:03 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: FlxanJBTpjtH0gUEQ+rOPlvDPaMXIDuAqD509EqoVCA=) 2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=) 4: CAB9B360E20211EF80FC810DC4F9AE02.roa (hash: 65X5sPIhdKM1lp6V7hevZEuaDbWujUAm7MoeXT80kOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Nov 5 06:43:03 2025 GMT Not After : Nov 12 06:43:03 2025 GMT Subject: CN=690af1f7-192c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:9e:31:1c:30:f5:75:ad:04:8d:af:72:0e: 54:6a:7b:f2:ef:2a:89:e7:b4:39:5e:1b:ba:f6:8a: eb:20:b8:76:f0:2f:d4:17:fe:39:62:75:46:de:e7: 8e:46:06:61:84:0d:df:7c:68:91:c1:c2:3f:a5:9d: e0:c1:ab:3a:be:8c:d0:19:a3:3e:7d:ca:29:8f:88: 05:cc:7e:e6:95:4d:6f:0b:45:6d:62:76:60:13:19: 00:38:b9:5e:4f:10:eb:a6:46:83:15:43:95:13:49: 73:ba:27:d3:75:3b:13:43:ae:ec:1d:7b:9f:b5:18: 2d:33:3b:dc:65:34:28:68:81:a0:95:1b:15:cc:3b: f3:05:5d:de:53:6b:04:03:2c:3a:1d:ce:da:50:9e: 0c:c7:57:eb:77:f3:3b:5f:8e:02:67:55:11:42:5e: 11:e4:d9:a7:5d:90:73:96:49:b5:e5:55:8d:be:65: 98:9a:09:95:55:14:67:6b:70:5c:9a:30:a2:51:89: cc:75:41:9e:fe:34:3e:b0:3e:f8:55:89:3c:32:09: 90:6a:7c:e4:56:88:7d:9b:71:f6:70:2b:18:c8:7f: 1a:12:cd:04:78:07:3e:9f:a6:5c:30:df:cc:ab:c6: 19:c7:05:13:ea:62:9a:64:30:36:78:a1:c4:a1:2f: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BE:DE:3D:9F:A8:03:26:D0:BF:2C:A4:C4:F8:09:C5:D0:F6:1A:38 X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:cc:58:40:5a:1c:ef:8d:1d:7f:42:71:69:e5:32:f6:ef:ee: 42:f9:1f:ab:e7:0e:18:90:fb:8d:04:e7:65:2f:57:50:b7:fd: 3d:9f:38:b7:fd:7d:6a:3d:80:28:81:b3:c5:a0:30:59:6f:bc: 92:bb:c3:49:d4:7c:bb:58:89:32:f9:ec:e0:05:f5:4b:7d:7c: c7:6e:b6:f1:96:84:6f:7a:3e:6b:6a:92:c1:59:7e:0a:62:d7: e9:f3:0a:08:4e:30:6e:1b:19:b2:93:68:7c:27:e2:85:96:c5: a9:61:02:f2:f4:1c:12:8a:69:af:c8:13:1b:9a:ed:cf:d7:07: f2:15:38:8d:be:f2:2d:ba:7d:d4:03:30:96:b0:30:34:dd:6d: a1:19:b1:84:7b:f2:2e:bc:43:41:ea:f2:b9:26:73:09:c3:5c: 2b:0b:b9:a3:42:7d:b5:0f:58:9f:80:da:a2:56:8e:4e:35:3d: 82:11:db:a8:82:83:96:eb:33:2a:79:c9:bf:e2:6b:ff:a2:15: d3:6f:3a:0e:e4:43:82:53:75:27:57:d4:8b:ca:9c:71:73:20: 2c:0d:7d:48:9d:62:05:c3:d0:df:9b:56:73:62:c1:08:7e:8c: f8:ef:c0:08:27:50:93:e4:2f:06:68:c8:ce:c7:b1:d7:4d:9e: 1b:3c:3f:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjUxMTA1MDY0MzAzWhcNMjUxMTEyMDY0MzAzWjAYMRYwFAYD VQQDEw02OTBhZjFmNy0xOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkWeMRww9XWtBI2vcg5Uanvy7yqJ57Q5Xhu69orrILh28C/UF/45YnVG3ueO RgZhhA3ffGiRwcI/pZ3gwas6vozQGaM+fcopj4gFzH7mlU1vC0VtYnZgExkAOLle TxDrpkaDFUOVE0lzuifTdTsTQ67sHXuftRgtMzvcZTQoaIGglRsVzDvzBV3eU2sE Ayw6Hc7aUJ4Mx1frd/M7X44CZ1URQl4R5NmnXZBzlkm15VWNvmWYmgmVVRRna3Bc mjCiUYnMdUGe/jQ+sD74VYk8MgmQanzkVoh9m3H2cCsYyH8aEs0EeAc+n6ZcMN/M q8YZxwUT6mKaZDA2eKHEoS/YeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC+3j2f qAMm0L8spMT4CcXQ9ho4MB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRzFhAWhzvjR1/QnFp5TL27+5C+R+r5w4YkPuNBOdlL1dQt/09nzi3 /X1qPYAogbPFoDBZb7ySu8NJ1Hy7WIky+ezgBfVLfXzHbrbxloRvej5rapLBWX4K Ytfp8woITjBuGxmyk2h8J+KFlsWpYQLy9BwSimmvyBMbmu3P1wfyFTiNvvItun3U AzCWsDA03W2hGbGEe/IuvENB6vK5JnMJw1wrC7mjQn21D1ifgNqiVo5ONT2CEduo goOW6zMqecm/4mv/ohXTbzoO5EOCU3UnV9SLypxxcyAsDX1InWIFw9Dfm1ZzYsEI foz478AIJ1CT5C8GaMjOx7HXTZ4bPD9r -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:34 2025 by rpki-client