$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: VtY1NnC8cvwJVvgDJ2Vvnh+/gAcc2sbg4ZzTFVdVq0M= Subject key identifier: 79:04:67:1C:34:A8:72:B8:DE:82:B1:05:22:68:76:3B:AD:04:40:4C Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 017C Signing time: Wed 05 Nov 2025 04:08:21 +0000 Manifest this update: Wed 05 Nov 2025 04:08:21 +0000 Manifest next update: Wed 12 Nov 2025 04:08:21 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: 6EZrJu4kRmP+7iJb4BrnfHYf8z8j9iAHgRDepuhrm/k=) 2: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (hash: 42v/8WB31KluVgugWaqssdygke8Q1F8h8HksLJ872Jw=) 3: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: ZZF37Hfq3LjjYT+YFdLOw5WGtyeL8yUS6RmDGMnnQ7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Nov 5 04:08:21 2025 GMT Not After : Nov 12 04:08:21 2025 GMT Subject: CN=690acdb5-a42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:e3:c3:08:64:ce:ac:19:ce:ea:8f:90:95: 63:4a:7b:6d:de:03:60:47:a5:d7:03:a0:ca:99:76: 13:88:1f:0f:bf:06:39:e8:b3:e3:45:29:d1:90:52: b7:f7:e7:ca:8b:7e:9e:ae:4e:ac:46:30:fe:75:11: cf:4e:6a:af:36:70:b0:5e:44:43:6d:27:7e:a3:c8: b5:0b:73:05:d0:84:ca:1a:b1:cc:2f:c0:af:19:2f: 65:50:c7:e5:8a:9b:1b:e4:67:9e:51:69:19:88:b7: 76:3a:9b:b4:10:06:54:b1:18:be:50:18:11:5d:bc: 1a:c7:18:9d:f0:bb:32:2a:e2:84:d2:e6:76:fa:db: a4:5a:fa:79:68:9a:99:bd:5b:81:17:1d:60:bd:58: e1:a5:ae:7f:bf:74:9f:4b:8d:a1:3c:83:1a:e1:0d: 26:e9:07:82:df:91:05:fe:a6:9d:9b:eb:d2:26:e5: 2d:4b:e3:f7:48:00:e7:e0:0d:14:50:80:b8:c5:67: d9:97:02:36:fe:da:86:74:89:d1:ad:6c:90:15:11: a1:9a:3b:50:3c:85:13:0a:7f:aa:78:d6:f3:9c:b1: 1f:7c:0f:7c:bd:be:3b:8e:63:b4:53:f8:e4:bf:a6: 7a:00:df:14:ae:4d:47:ff:93:bc:d5:98:ab:59:a7: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:04:67:1C:34:A8:72:B8:DE:82:B1:05:22:68:76:3B:AD:04:40:4C X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:21:7a:b3:7f:f0:9a:8e:4c:30:9e:2d:a5:8d:da:62:c7:24: f3:cd:f0:38:14:ec:b7:6c:d7:ac:66:98:57:73:b8:57:4b:b5: 7a:1a:b0:3d:97:19:81:29:9b:36:1d:62:19:21:7d:38:05:98: 47:ec:72:16:61:81:c4:74:3a:73:6b:44:49:ab:24:71:70:ad: 06:60:e5:ce:16:73:e8:2f:41:67:b0:7c:f8:17:29:57:8b:05: 04:ec:76:0d:94:84:43:d8:d1:4c:07:2d:21:81:89:8f:2c:12: 55:84:d5:65:de:08:65:3c:93:ab:95:23:9b:f4:6c:1b:4c:1c: 21:68:10:aa:7f:5f:0e:92:ec:10:cb:f9:80:07:2f:a0:d6:59: 1c:55:cd:c7:a0:70:e1:32:af:11:4b:a8:c3:88:58:9b:5d:eb: ce:1c:9f:ea:91:33:a8:26:19:1d:2a:26:5f:c0:74:28:38:ed: 45:d5:9b:20:d1:4e:d0:af:58:d2:e1:c7:2f:99:c8:d6:1e:b3: 2a:da:85:ce:9b:e2:e8:97:5c:e3:39:3a:7b:8e:02:84:e9:30: c8:72:65:df:d4:5a:85:cb:40:71:de:3f:00:40:fa:41:66:36: 61:15:e5:42:0a:c1:32:3a:d9:54:3e:9f:02:fe:82:eb:71:62: 18:b8:87:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUxMTA1MDQwODIxWhcNMjUxMTEyMDQwODIxWjAYMRYwFAYD VQQDEw02OTBhY2RiNS1hNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDnjwwhkzqwZzuqPkJVjSntt3gNgR6XXA6DKmXYTiB8PvwY56LPjRSnRkFK3 9+fKi36erk6sRjD+dRHPTmqvNnCwXkRDbSd+o8i1C3MF0ITKGrHML8CvGS9lUMfl ipsb5GeeUWkZiLd2Opu0EAZUsRi+UBgRXbwaxxid8LsyKuKE0uZ2+tukWvp5aJqZ vVuBFx1gvVjhpa5/v3SfS42hPIMa4Q0m6QeC35EF/qadm+vSJuUtS+P3SADn4A0U UIC4xWfZlwI2/tqGdInRrWyQFRGhmjtQPIUTCn+qeNbznLEffA98vb47jmO0U/jk v6Z6AN8Urk1H/5O81ZirWaegHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkEZxw0 qHK43oKxBSJodjutBEBMMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOIXqzf/Cajkwwni2ljdpixyTzzfA4FOy3bNesZphXc7hXS7V6GrA9 lxmBKZs2HWIZIX04BZhH7HIWYYHEdDpza0RJqyRxcK0GYOXOFnPoL0FnsHz4FylX iwUE7HYNlIRD2NFMBy0hgYmPLBJVhNVl3ghlPJOrlSOb9GwbTBwhaBCqf18OkuwQ y/mABy+g1lkcVc3HoHDhMq8RS6jDiFibXevOHJ/qkTOoJhkdKiZfwHQoOO1F1Zsg 0U7Qr1jS4ccvmcjWHrMq2oXOm+Lol1zjOTp7jgKE6TDIcmXf1FqFy0Bx3j8AQPpB ZjZhFeVCCsEyOtlUPp8C/oLrcWIYuIdb -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:08 2025 by rpki-client