$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: Z8mFpJ5y564itFjTkF4+OTV9nPNJkqWu7asxzv0AGP0= Subject key identifier: E1:05:E2:12:48:C7:4E:29:F8:1F:65:73:29:A5:7D:68:01:55:9E:52 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 05D5 Signing time: Tue 04 Nov 2025 23:09:07 +0000 Manifest this update: Tue 04 Nov 2025 23:09:07 +0000 Manifest next update: Tue 11 Nov 2025 23:09:07 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: WL+GhXkocEmILeMWZBmTB8g7SS/awziF2GkCAARPdws=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Nov 4 23:09:07 2025 GMT Not After : Nov 11 23:09:07 2025 GMT Subject: CN=690a8793-22d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d9:08:3e:77:a8:67:e4:40:21:34:e8:2e:f2: 12:06:eb:f4:b1:0c:03:86:7b:c5:ac:a2:37:ca:28: 7b:1f:42:df:98:aa:35:30:a8:b8:e6:d4:8e:e1:42: 96:63:21:0e:c2:23:82:5f:1b:df:5c:a3:8a:3c:01: f6:38:7d:4f:65:cd:0b:ba:9e:6a:4b:4d:2a:e8:23: 0e:a2:5b:94:b6:5d:d2:2c:de:5d:5e:d0:fe:9a:96: e8:6e:99:bc:89:c4:02:24:67:40:84:8a:7c:d6:e9: a3:8a:dd:24:7e:c8:fe:e2:e7:12:0f:45:e7:6d:ad: 7f:5f:38:48:89:ea:b6:52:a1:34:80:9f:79:0d:ad: 4e:61:f8:fd:5d:9a:89:3b:60:22:ad:20:b2:06:ba: a5:27:41:08:67:2e:fa:ca:ce:a6:30:bd:bc:3a:48: 64:c8:15:51:ab:2a:7d:bb:ac:99:34:60:07:e0:22: ec:1d:7c:7b:ae:ae:56:bb:17:dd:c1:05:a0:fe:bb: ec:28:6c:80:65:bf:5d:b3:9b:3a:a3:20:c7:b9:a5: 85:31:93:e1:e6:cc:d4:38:cd:33:61:f5:39:fd:b1: 68:bd:b0:a3:5c:44:1b:b4:5b:a4:65:5c:1d:25:a5: 7d:4d:75:a3:14:2c:a0:d8:0b:f0:05:e0:e5:c9:8f: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:05:E2:12:48:C7:4E:29:F8:1F:65:73:29:A5:7D:68:01:55:9E:52 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:47:a1:83:d9:a5:73:14:b9:b0:3d:b8:76:19:e0:ce:82:7e: 28:47:8b:70:a9:dc:80:45:58:3b:45:c4:19:8f:2c:5a:b1:3f: f8:2a:db:fb:4e:1f:05:3e:8e:bd:9a:bf:8e:eb:1e:c1:0a:89: f1:6d:be:a9:03:3d:ca:6e:e1:2c:36:70:47:e3:99:d9:85:12: 77:34:d6:40:e1:bd:13:4c:1a:e9:2f:43:80:7a:41:23:f5:89: af:d6:c0:69:f6:f7:49:97:45:ab:fc:6b:49:67:4c:42:15:95: 30:b0:95:f4:20:38:15:20:7e:5b:0c:fe:af:83:15:d7:48:35: 63:d4:8b:4c:6e:a1:4d:8d:c0:cc:b7:17:e0:9e:f7:17:52:a2: 31:8a:df:53:75:15:6d:86:38:fe:62:a5:c1:8b:5f:75:ae:68: 20:ff:cb:6f:ee:b0:86:ab:14:72:fd:99:e9:1a:31:ff:d7:f0: 1e:f1:cd:ac:8c:c6:a0:9a:fc:70:2a:cb:ce:48:5c:f9:f9:3d: 31:34:23:da:c5:55:ab:e3:d2:ff:03:c9:bc:f3:5f:5e:5b:57: 84:75:25:ee:9c:0a:2b:87:2f:b7:aa:54:9a:1b:4f:ed:17:25: 22:93:d3:3d:94:89:61:9e:58:0d:6c:99:d2:99:78:fc:35:03: 8c:6f:9e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUxMTA0MjMwOTA3WhcNMjUxMTExMjMwOTA3WjAYMRYwFAYD VQQDEw02OTBhODc5My0yMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NkIPneoZ+RAITToLvISBuv0sQwDhnvFrKI3yih7H0LfmKo1MKi45tSO4UKW YyEOwiOCXxvfXKOKPAH2OH1PZc0Lup5qS00q6CMOoluUtl3SLN5dXtD+mpbobpm8 icQCJGdAhIp81umjit0kfsj+4ucSD0Xnba1/XzhIieq2UqE0gJ95Da1OYfj9XZqJ O2AirSCyBrqlJ0EIZy76ys6mML28OkhkyBVRqyp9u6yZNGAH4CLsHXx7rq5Wuxfd wQWg/rvsKGyAZb9ds5s6oyDHuaWFMZPh5szUOM0zYfU5/bFovbCjXEQbtFukZVwd JaV9TXWjFCyg2AvwBeDlyY/CXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEF4hJI x04p+B9lcymlfWgBVZ5SMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZR6GD2aVzFLmwPbh2GeDOgn4oR4twqdyARVg7RcQZjyxasT/4Ktv7 Th8FPo69mr+O6x7BConxbb6pAz3KbuEsNnBH45nZhRJ3NNZA4b0TTBrpL0OAekEj 9Ymv1sBp9vdJl0Wr/GtJZ0xCFZUwsJX0IDgVIH5bDP6vgxXXSDVj1ItMbqFNjcDM txfgnvcXUqIxit9TdRVthjj+YqXBi191rmgg/8tv7rCGqxRy/ZnpGjH/1/Ae8c2s jMagmvxwKsvOSFz5+T0xNCPaxVWr49L/A8m8819eW1eEdSXunAorhy+3qlSaG0/t FyUik9M9lIlhnlgNbJnSmXj8NQOMb55V -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:29 2025 by rpki-client