$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: 87R/aYfmmdjJdgJTQkLNR/YItRnSH31fN/E3av/CpVU= Subject key identifier: CA:3E:8E:8C:7E:6C:DF:F9:6B:8B:A6:C4:42:3B:22:7C:A1:0D:8A:A6 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: D0 Signing time: Wed 05 Nov 2025 05:49:43 +0000 Manifest this update: Wed 05 Nov 2025 05:49:43 +0000 Manifest next update: Wed 12 Nov 2025 05:49:43 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: 8YlTiT2t/2560O8lHj0ZBuuU6Ynfv7gSxfbl45/x/MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Nov 5 05:49:43 2025 GMT Not After : Nov 12 05:49:43 2025 GMT Subject: CN=690ae577-88ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:f3:de:d7:1b:1c:fb:04:6e:f7:f6:41:b2: 24:38:ef:54:d7:75:72:b9:41:5b:3d:9f:56:63:4c: 23:2a:86:6c:ab:5d:4a:8e:7a:37:98:3e:a1:54:28: 4f:3a:9b:d9:13:8c:69:59:7f:f9:e4:33:d7:91:bd: 8b:dd:b3:86:71:b4:c2:5e:60:63:c9:3d:4a:20:9f: ef:99:ba:af:d1:b2:25:bc:3e:3a:54:c6:ed:c2:9c: 69:7f:1f:49:3a:06:cb:6c:25:eb:5e:fa:75:6e:df: 7a:95:b4:58:c0:b5:90:15:da:f3:c2:28:7c:3b:df: 42:b3:bb:d4:bb:a7:a7:e8:1b:5b:bb:35:67:3a:75: c7:f0:88:6d:59:01:cd:ee:74:9b:67:89:52:40:a0: 09:6e:c4:57:14:39:a3:06:40:fa:e4:a7:d5:0d:ff: a7:c6:eb:ce:66:4c:d1:39:78:ed:74:c8:82:28:4c: 37:47:46:a9:18:2a:d0:11:38:91:cc:20:7d:3d:fc: 5f:b4:bd:2d:fe:c1:b2:65:81:70:e8:63:d8:c6:ae: 70:db:b2:e4:bb:c6:5c:c3:5b:48:12:5a:0c:1c:38: 07:f7:6b:d1:e1:ab:14:ee:36:30:53:79:00:f0:51: 71:9e:64:0e:29:49:3f:8f:41:7d:cf:e0:90:98:cb: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3E:8E:8C:7E:6C:DF:F9:6B:8B:A6:C4:42:3B:22:7C:A1:0D:8A:A6 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b0:40:d2:54:47:67:66:14:46:20:c8:ca:41:a0:ed:13:8b: a3:18:6a:14:98:f8:9d:20:a3:55:25:ad:c7:62:ec:4d:85:11: 96:3d:98:d8:d6:4f:86:01:f1:1d:04:0c:2d:c8:f6:65:68:8e: f8:e6:86:68:26:6e:0f:94:cd:6e:0e:c5:12:6a:af:f2:2d:8c: eb:e7:6c:4c:a2:ea:5d:0b:41:8e:3c:9f:8e:5f:3e:1a:c2:e0: 34:4b:d0:4f:3a:c5:8a:0d:82:49:12:f6:ce:52:ed:ef:1c:ac: d0:a8:7f:bf:35:65:3f:a0:c0:ad:77:fc:ff:30:2c:a5:c3:95: 39:16:91:03:64:3c:ef:2d:e5:1e:3a:39:7a:8f:f5:cb:8e:49: 55:54:f5:97:db:3a:45:e2:d9:2f:e0:5c:9d:a6:5f:9b:03:26: 59:1a:eb:2d:35:f3:69:29:36:30:70:79:fb:f6:42:49:f1:48: 6f:9b:50:a7:11:bf:94:67:a6:32:61:b7:47:1c:f2:bd:ac:27: f1:ee:43:a2:9f:c3:d1:d7:c2:15:ac:3e:24:9b:c4:b1:9b:51: 15:3f:a7:92:0a:03:10:e9:08:8e:38:b0:1d:64:e6:69:1e:3e: af:fd:f2:3d:05:0a:8a:aa:7e:aa:3e:b1:72:d7:ef:83:35:cd: 4d:0d:d8:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUxMTA1MDU0OTQzWhcNMjUxMTEyMDU0OTQzWjAYMRYwFAYD VQQDEw02OTBhZTU3Ny04OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Tz3tcbHPsEbvf2QbIkOO9U13VyuUFbPZ9WY0wjKoZsq11Kjno3mD6hVChP OpvZE4xpWX/55DPXkb2L3bOGcbTCXmBjyT1KIJ/vmbqv0bIlvD46VMbtwpxpfx9J OgbLbCXrXvp1bt96lbRYwLWQFdrzwih8O99Cs7vUu6en6BtbuzVnOnXH8IhtWQHN 7nSbZ4lSQKAJbsRXFDmjBkD65KfVDf+nxuvOZkzROXjtdMiCKEw3R0apGCrQETiR zCB9PfxftL0t/sGyZYFw6GPYxq5w27Lku8Zcw1tIEloMHDgH92vR4asU7jYwU3kA 8FFxnmQOKUk/j0F9z+CQmMu46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo+jox+ bN/5a4umxEI7InyhDYqmMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAssEDSVEdnZhRGIMjKQaDtE4ujGGoUmPidIKNVJa3HYuxNhRGWPZjY 1k+GAfEdBAwtyPZlaI745oZoJm4PlM1uDsUSaq/yLYzr52xMoupdC0GOPJ+OXz4a wuA0S9BPOsWKDYJJEvbOUu3vHKzQqH+/NWU/oMCtd/z/MCylw5U5FpEDZDzvLeUe Ojl6j/XLjklVVPWX2zpF4tkv4Fydpl+bAyZZGustNfNpKTYwcHn79kJJ8Uhvm1Cn Eb+UZ6YyYbdHHPK9rCfx7kOin8PR18IVrD4km8Sxm1EVP6eSCgMQ6QiOOLAdZOZp Hj6v/fI9BQqKqn6qPrFy1++DNc1NDdg0 -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:52 2025 by rpki-client