$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: pxZbK/IpYYW0j1XdHVBbxiqJDcDpAgkkQZWFWVysGVY= Subject key identifier: F9:77:C6:E8:EE:DB:2C:6F:6D:D4:BB:D9:B3:7F:7A:82:70:45:A5:BF Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 15 Signing time: Wed 05 Nov 2025 08:05:50 +0000 Manifest this update: Wed 05 Nov 2025 08:05:49 +0000 Manifest next update: Wed 12 Nov 2025 08:05:49 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: z8VkeO4xs3kxs4jM1afHPA9iwK7qN8OgpOE+bcdVuBY=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: qXahNWKD3ULNKbUsqqR6NoyLBXctmb1mpVL8KL1rQa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Nov 5 08:05:49 2025 GMT Not After : Nov 12 08:05:49 2025 GMT Subject: CN=690b055e-4427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:31:04:b2:9b:fa:6f:c2:63:8c:7e:f3:32: 4e:a6:0d:d3:4a:39:2e:cd:ba:49:93:75:9a:a1:bc: a3:01:f1:a8:4e:e6:83:23:df:a3:80:f4:24:57:db: b1:b8:ff:93:e7:c3:d1:11:21:6d:32:6d:76:35:09: 74:28:68:2b:00:48:2c:67:85:78:ae:82:4c:e2:25: a4:b0:7f:9c:90:8b:a7:e4:aa:cb:e7:2d:15:6b:2d: ac:3a:eb:39:b9:92:17:8b:5a:22:9b:2d:70:53:71: a6:65:63:35:f9:cb:8b:88:d1:62:ea:65:cd:f7:81: 22:ff:51:66:5a:f3:53:42:7f:ed:b5:73:dd:a9:14: b7:8d:48:ee:da:bf:24:9f:f0:43:54:0e:d5:65:3c: 9e:88:f1:21:7f:7d:40:fb:45:b5:f0:c0:46:53:0d: 42:fb:82:f7:3a:26:63:8a:fd:d4:57:ea:f7:ff:4d: 9d:fc:f0:d9:d7:23:e9:9f:85:df:eb:22:6b:6f:43: 84:76:1e:14:51:0d:f5:19:8d:61:cc:35:06:b9:44: 2c:05:4b:df:33:b3:fe:5d:16:10:d6:b8:1b:9f:fd: 20:ad:37:08:4a:fa:63:f7:07:5f:e7:9a:28:b7:33: 8b:9b:f3:53:a7:7a:ba:f5:d8:6f:7d:df:15:8b:38: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:C6:E8:EE:DB:2C:6F:6D:D4:BB:D9:B3:7F:7A:82:70:45:A5:BF X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a5:f3:ae:05:21:ca:2f:a1:ea:48:e0:d4:77:1d:c4:2b:bc: 62:1c:be:33:58:78:fb:c8:ff:65:f1:93:7b:32:9b:ab:80:40: 78:0a:2c:af:c9:2d:e5:63:c8:79:6b:ca:7b:57:ee:94:da:1e: cf:0b:ee:11:f3:14:aa:4d:9f:6d:24:af:e4:72:21:7a:09:3b: 26:ba:81:cd:3e:aa:a9:16:fc:d9:c0:fe:2f:8d:00:6d:b2:00: 20:8d:71:9a:9f:f2:6c:61:00:be:16:2d:90:4a:ec:21:a9:46: 02:27:02:21:ff:a4:ad:9d:a4:c5:98:b9:eb:a9:34:9f:a0:6b: d4:c1:47:ed:4d:c4:b8:17:3d:79:33:9f:ce:15:40:80:4d:ba: d2:fd:54:82:ca:3b:c7:73:02:e4:83:66:f3:9b:24:6b:23:e7: dd:7c:d7:17:e7:a3:f4:46:22:e5:e2:f7:6d:a9:63:00:98:01: 05:19:c3:f5:a1:b9:f6:78:6a:ca:70:d4:d5:5f:90:46:dc:90: 95:f7:09:a7:41:67:69:2f:dd:9c:dc:2a:90:44:e7:0d:50:aa: 4a:81:98:5e:01:28:c5:fe:3d:4b:8a:fa:fb:33:48:78:9a:71: 32:ba:ce:e5:d8:fb:c8:0e:0b:7c:1c:98:4d:4b:96:a4:fe:43: 7e:67:03:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNTExMDUwODA1NDlaFw0yNTExMTIwODA1NDlaMBgxFjAUBgNV BAMTDTY5MGIwNTVlLTQ0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHgjEEspv6b8JjjH7zMk6mDdNKOS7NukmTdZqhvKMB8ahO5oMj36OA9CRX27G4 /5Pnw9ERIW0ybXY1CXQoaCsASCxnhXiugkziJaSwf5yQi6fkqsvnLRVrLaw66zm5 kheLWiKbLXBTcaZlYzX5y4uI0WLqZc33gSL/UWZa81NCf+21c92pFLeNSO7avySf 8ENUDtVlPJ6I8SF/fUD7RbXwwEZTDUL7gvc6JmOK/dRX6vf/TZ388NnXI+mfhd/r ImtvQ4R2HhRRDfUZjWHMNQa5RCwFS98zs/5dFhDWuBuf/SCtNwhK+mP3B1/nmii3 M4ub81Onerr12G993xWLOG49AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+XfG6O7b LG9t1LvZs396gnBFpb8wHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIil864FIcovoepI4NR3HcQrvGIcvjNYePvI/2Xxk3sym6uAQHgKLK/J LeVjyHlryntX7pTaHs8L7hHzFKpNn20kr+RyIXoJOya6gc0+qqkW/NnA/i+NAG2y ACCNcZqf8mxhAL4WLZBK7CGpRgInAiH/pK2dpMWYueupNJ+ga9TBR+1NxLgXPXkz n84VQIBNutL9VILKO8dzAuSDZvObJGsj59181xfno/RGIuXi922pYwCYAQUZw/Wh ufZ4aspw1NVfkEbckJX3CadBZ2kv3ZzcKpBE5w1QqkqBmF4BKMX+PUuK+vszSHia cTK6zuXY+8gOC3wcmE1LlqT+Q35nA8Y= -----END CERTIFICATE-----Generated at Wed Nov 5 18:16:27 2025 by rpki-client