$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: DfVK+g9YUDE0Kazj+NcUu/LZHcAD8nazc6pSp6bjDDc= Subject key identifier: 01:1E:08:F4:87:01:82:0A:14:91:BB:34:08:A6:0D:50:B9:20:14:F9 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 0267 Signing time: Mon 03 Nov 2025 01:44:53 +0000 Manifest this update: Mon 03 Nov 2025 01:44:53 +0000 Manifest next update: Mon 10 Nov 2025 01:44:53 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: f0qi4y1lDA89ItayMLEU3RY2cDve9HkvthrxvybBiSk=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 871uvrhz95uu9PNNNjkaUPMmnQGHPUEZxKLtNFNyiww=) 3: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: 2FCjP9I2/yq4W7jtorK7EdCQLAyPAUZVTbUcZxh3PfE=) 4: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: lFcxWTnHl633f4QvQDWMLUYmUkZFYUPdGoBmb8KL4MM=) 5: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: dqWEuxtnbfWU4nZkFSb2NotigdJvsBeg81R5KHdp3N8=) 6: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: yyhxzF0/c5uMQ12puVXLcHeNACYdhT0nLnFanNPNceA=) 7: F84FF96A493911ED805EB686C4F9AE02.roa (hash: piVutmjNzZ4LWdxVos9KOORv1t2npbwh4keUJmvsk68=) 8: 4CB6FAD482E511F0B57EE434C4F9AE02.roa (hash: 9arVIkvwCMJQp1ZfBQ9/+i/kNwxii6qQmOc3SD5i3yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Nov 3 01:44:53 2025 GMT Not After : Nov 10 01:44:53 2025 GMT Subject: CN=69080915-885f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:29:8b:d0:a4:c8:09:fe:06:26:ed:ee:97: ba:c8:55:e7:f1:ef:fd:a2:b5:2c:b9:30:76:47:eb: 21:f5:42:72:d3:4f:2b:a3:21:a2:b1:87:1e:f7:dd: e0:84:f4:58:63:78:41:95:ac:57:88:c0:6b:f8:b0: cb:3e:f1:e7:d7:fa:7c:41:7c:14:98:54:e6:e1:d1: df:a9:a3:41:09:5b:00:ad:fd:de:8d:4b:70:1f:a7: f4:c5:e1:2c:aa:f9:27:d8:4b:fb:10:28:01:2c:be: 78:8d:3f:19:de:d0:b0:8c:03:61:d5:79:ce:43:6a: f9:0c:2d:31:50:0c:f1:66:6a:40:4c:27:b8:bb:74: c0:f3:5e:8b:72:2e:47:1a:81:54:10:8b:5d:07:80: 61:b3:76:ed:af:a5:6f:dc:4b:c5:34:fa:32:c4:c5: 56:d9:f4:5a:d3:c9:85:09:67:ae:de:e7:44:bd:77: 20:de:e5:c3:fa:f6:cc:35:66:48:7f:fa:7e:0b:25: 98:34:fe:5f:50:5a:e0:26:de:56:68:08:b3:99:01: e3:23:5b:c1:ac:09:e8:71:11:d3:0a:a1:2c:28:c2: eb:a8:b3:83:10:dd:bd:dc:11:f1:9f:5d:3d:36:87: 0c:d9:85:e1:d3:ae:ee:5c:ff:4f:1d:5f:4a:21:93: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1E:08:F4:87:01:82:0A:14:91:BB:34:08:A6:0D:50:B9:20:14:F9 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:dd:81:df:11:96:be:58:a8:a4:b6:ad:6b:a9:69:4c:55:d5: 5e:ed:d9:8e:6b:eb:07:44:d6:dd:28:aa:7d:b3:45:9f:29:25: fe:91:bb:ab:a1:73:c9:15:6f:07:93:3a:c7:5b:8c:af:c2:32: 0f:c9:ad:4d:58:7c:3d:e1:4f:6a:14:de:91:3a:5d:17:3c:b7: 3e:79:b6:07:ec:be:8d:48:3b:f6:42:c6:3f:44:86:01:c7:ea: df:f5:f9:a7:0f:27:41:23:69:39:89:5d:42:b0:bd:ca:39:32: 9e:e3:9a:ae:a3:52:22:af:d6:7c:22:d7:aa:91:4c:05:32:42: 04:f5:bc:45:a1:8b:3e:7a:2c:a0:33:58:59:65:e3:df:44:be: 6c:4e:1a:81:2e:95:f7:73:30:30:7d:7a:dd:00:37:1d:08:15: 85:27:58:0c:19:7e:62:79:0e:75:b7:8e:fa:9e:ae:03:9a:a7: 7f:93:c1:12:49:b0:d6:b9:ac:34:81:d6:4c:f4:f3:8e:60:b2: ed:28:ec:59:99:76:e0:19:04:ab:0f:60:b7:7a:5f:6c:4b:f3: 95:3e:52:45:4b:40:51:92:db:81:b3:0a:c8:40:56:43:fc:fb: 86:3d:d4:2a:37:48:b4:2f:41:76:6d:3a:ac:be:54:54:b8:75: 45:93:34:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUxMTAzMDE0NDUzWhcNMjUxMTEwMDE0NDUzWjAYMRYwFAYD VQQDEw02OTA4MDkxNS04ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Qpi9CkyAn+Bibt7pe6yFXn8e/9orUsuTB2R+sh9UJy008royGisYce993g hPRYY3hBlaxXiMBr+LDLPvHn1/p8QXwUmFTm4dHfqaNBCVsArf3ejUtwH6f0xeEs qvkn2Ev7ECgBLL54jT8Z3tCwjANh1XnOQ2r5DC0xUAzxZmpATCe4u3TA816Lci5H GoFUEItdB4Bhs3btr6Vv3EvFNPoyxMVW2fRa08mFCWeu3udEvXcg3uXD+vbMNWZI f/p+CyWYNP5fUFrgJt5WaAizmQHjI1vBrAnocRHTCqEsKMLrqLODEN293BHxn109 NocM2YXh067uXP9PHV9KIZPGqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEeCPSH AYIKFJG7NAimDVC5IBT5MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR3YHfEZa+WKiktq1rqWlMVdVe7dmOa+sHRNbdKKp9s0WfKSX+kbur oXPJFW8HkzrHW4yvwjIPya1NWHw94U9qFN6ROl0XPLc+ebYH7L6NSDv2QsY/RIYB x+rf9fmnDydBI2k5iV1CsL3KOTKe45quo1Iir9Z8IteqkUwFMkIE9bxFoYs+eiyg M1hZZePfRL5sThqBLpX3czAwfXrdADcdCBWFJ1gMGX5ieQ51t476nq4Dmqd/k8ES SbDWuaw0gdZM9POOYLLtKOxZmXbgGQSrD2C3el9sS/OVPlJFS0BRktuBswrIQFZD /PuGPdQqN0i0L0F2bTqsvlRUuHVFkzRD -----END CERTIFICATE-----Generated at Tue Nov 4 20:32:27 2025 by rpki-client