$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: C41V9n5wM8BE4wqDAEi1pUHhxwGv/L34XlJealxM5zs= Subject key identifier: 87:F6:BC:BA:14:DB:24:44:F4:2E:94:DD:DE:FF:9A:A5:46:63:D1:89 Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: D4 Signing time: Wed 05 Nov 2025 05:49:07 +0000 Manifest this update: Wed 05 Nov 2025 05:49:06 +0000 Manifest next update: Wed 12 Nov 2025 05:49:06 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: XB+FR5rpe0BvMNqDJQ4M2mJsLFE4+KaB5EKg5dJdVko=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: WB7ggddHEomyZcx3S7RLh6MvEgEJdGUHo6oxjSeOfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Nov 5 05:49:06 2025 GMT Not After : Nov 12 05:49:06 2025 GMT Subject: CN=690ae552-f3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:07:92:7a:f6:6f:de:d3:a4:3a:72:66:79: 82:07:83:c1:7d:a8:46:b6:91:29:2d:d7:41:97:60: 1b:65:cc:97:14:73:0e:e6:bb:85:d3:7d:2d:01:65: 81:fd:91:44:04:bd:b0:14:8b:3e:01:1d:94:9c:34: 8d:73:62:18:bb:a2:12:2d:43:c5:e5:7c:c0:c2:09: aa:41:01:72:b9:6c:f0:26:f4:79:d7:72:e4:b1:1d: 9b:18:97:2d:a7:5d:63:8b:18:1c:b8:17:17:f9:5c: 82:69:67:db:6b:c5:c5:bc:db:52:7e:3a:14:d5:6b: c7:99:1d:1a:25:fe:39:66:1d:ce:a7:54:5c:67:f9: eb:be:7d:4a:2d:76:6e:f8:37:73:be:49:e2:43:86: a6:5f:9e:58:27:27:f2:03:a1:fd:08:d3:a4:95:b5: 96:71:11:69:1d:45:6c:b2:7a:02:99:ba:0e:c5:52: 42:c4:d2:8e:20:80:d1:88:d6:14:3b:bf:36:18:db: 6d:66:7c:39:63:b0:d4:31:67:0d:c6:41:9f:45:c1: 64:4f:b1:51:1e:1d:a9:58:1f:d4:f6:3b:d0:2b:92: 27:c4:d2:af:ba:0c:ec:2a:73:43:71:e4:5e:38:d5: d0:fc:21:b2:81:82:b1:fd:14:ff:c4:80:ed:b6:9b: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:BC:BA:14:DB:24:44:F4:2E:94:DD:DE:FF:9A:A5:46:63:D1:89 X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fb:5f:b9:3c:b7:c2:44:ab:30:ae:4f:38:de:17:4c:d9:8a: 38:94:4c:81:51:d8:4e:75:59:1b:99:1c:e1:8b:e8:4b:1e:82: a8:bd:60:ce:39:05:f8:69:ec:ee:b3:93:20:30:80:90:c1:4e: 40:a3:f7:dc:cf:dd:d9:14:50:9f:6a:3e:0d:74:c7:b9:ac:f7: 60:66:0f:b9:32:93:ea:9f:61:25:2a:d3:4d:90:a9:c7:26:7c: a3:2c:74:8b:64:76:91:c6:4e:27:7d:42:29:86:ef:35:0d:69: 13:af:f7:b3:f8:78:bc:f9:06:66:8e:30:27:74:d8:82:29:9e: 99:80:e1:2d:76:fd:02:0b:6f:e8:31:e1:23:71:5b:63:82:d9: 6c:96:7f:e8:07:21:94:a2:58:e7:aa:07:46:97:9e:99:9a:ec: cf:04:25:c0:7a:d7:fb:70:6a:02:09:e5:50:63:91:37:96:5e: f9:29:a3:54:e5:fa:c6:a9:ea:d3:4b:4e:80:46:fe:e9:b7:00: 94:1f:bc:6c:3a:e3:10:32:0e:d7:e6:a3:c9:64:12:71:22:d1: 6d:85:3c:7d:c2:69:41:b7:b9:a6:3a:f5:37:8a:0b:77:84:5c: 10:fa:67:41:c4:e5:64:97:ed:84:85:93:74:87:15:6a:3f:94: 4c:35:ec:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjUxMTA1MDU0OTA2WhcNMjUxMTEyMDU0OTA2WjAYMRYwFAYD VQQDEw02OTBhZTU1Mi1mM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqB8Hknr2b97TpDpyZnmCB4PBfahGtpEpLddBl2AbZcyXFHMO5ruF030tAWWB /ZFEBL2wFIs+AR2UnDSNc2IYu6ISLUPF5XzAwgmqQQFyuWzwJvR513LksR2bGJct p11jixgcuBcX+VyCaWfba8XFvNtSfjoU1WvHmR0aJf45Zh3Op1RcZ/nrvn1KLXZu +DdzvkniQ4amX55YJyfyA6H9CNOklbWWcRFpHUVssnoCmboOxVJCxNKOIIDRiNYU O782GNttZnw5Y7DUMWcNxkGfRcFkT7FRHh2pWB/U9jvQK5InxNKvugzsKnNDceRe ONXQ/CGygYKx/RT/xIDttptOnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf2vLoU 2yRE9C6U3d7/mqVGY9GJMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk+1+5PLfCRKswrk843hdM2Yo4lEyBUdhOdVkbmRzhi+hLHoKovWDO OQX4aezus5MgMICQwU5Ao/fcz93ZFFCfaj4NdMe5rPdgZg+5MpPqn2ElKtNNkKnH JnyjLHSLZHaRxk4nfUIphu81DWkTr/ez+Hi8+QZmjjAndNiCKZ6ZgOEtdv0CC2/o MeEjcVtjgtlsln/oByGUoljnqgdGl56ZmuzPBCXAetf7cGoCCeVQY5E3ll75KaNU 5frGqerTS06ARv7ptwCUH7xsOuMQMg7X5qPJZBJxItFthTx9wmlBt7mmOvU3igt3 hFwQ+mdBxOVkl+2EhZN0hxVqP5RMNezy -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:05 2025 by rpki-client