$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json) Hash identifier: GvbgjANCEffgEHWqLHW8QUUHmUXkd3OgGRZCrTV65+o= Subject key identifier: 41:51:F8:40:54:64:C7:0C:EF:2C:BA:EE:27:90:BA:4E:3A:E5:70:B0 Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft Manifest number: 7E Signing time: Wed 05 Nov 2025 06:59:54 +0000 Manifest this update: Wed 05 Nov 2025 06:59:53 +0000 Manifest next update: Wed 12 Nov 2025 06:59:53 +0000 Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: 6MnqKUJfb39pFoe5bX0s9wOTonNf1O2FpidfBqygwUk=) 2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: 6uK19EDHQqPyaVVXXtHQJXfGGnOJLngyIEFvwQHYfKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A Validity Not Before: Nov 5 06:59:53 2025 GMT Not After : Nov 12 06:59:53 2025 GMT Subject: CN=690af5e9-5f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:51:78:db:c7:00:a9:98:cc:fe:a6:d1:b8: 3c:2e:69:3d:80:dc:30:cf:fd:42:02:7d:4f:41:b1: bb:f8:de:74:4f:0c:f4:b8:e6:dc:3d:d4:20:c0:72: 55:5c:1e:5c:a5:b1:9f:d3:21:1f:5d:10:69:20:6f: 76:96:dd:d0:1a:84:d1:84:af:a2:86:49:58:08:49: 60:78:29:86:22:1e:3c:51:8e:74:ae:ac:da:63:95: 2d:00:0f:46:90:57:f5:83:28:3c:47:b1:0e:87:ce: cb:09:b8:91:48:f3:e4:d8:71:a7:4c:27:4f:6d:cf: 91:ac:a7:e6:31:7e:c3:de:48:ea:78:a7:20:13:76: ec:d5:e2:f8:59:fb:7b:0a:8b:51:94:80:1e:bf:d4: 47:4f:a1:15:eb:73:e8:9f:fa:bb:fe:ad:5d:d1:81: 3d:23:7a:72:eb:c1:a0:54:5d:b0:82:eb:bd:af:ae: b1:a7:23:77:7e:95:86:cc:58:5f:5f:81:c6:80:07: 96:61:7c:84:30:92:89:95:ce:ad:7c:da:09:51:5f: 4a:d6:00:2e:45:87:eb:c1:da:dd:be:30:fd:e3:7f: 32:09:93:fe:aa:06:ef:2e:45:ac:64:74:6a:35:f4: c4:07:c7:f5:d0:d9:6a:b1:ab:c2:1f:42:a8:f0:1c: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:51:F8:40:54:64:C7:0C:EF:2C:BA:EE:27:90:BA:4E:3A:E5:70:B0 X509v3 Authority Key Identifier: keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:78:52:ba:97:ba:3d:b3:6e:66:1e:08:7b:28:29:71:ec:78: b7:27:a8:fa:aa:90:b9:7d:26:ec:ae:d1:c5:36:29:fc:aa:66: e3:c0:44:f7:f0:13:a3:b2:d7:f5:0c:6c:13:90:4b:dc:89:f5: 1e:cd:b4:83:72:65:f5:8c:be:28:b3:48:0c:cf:7c:39:42:bc: 0c:e0:6c:b7:13:14:bd:9d:69:6b:2b:9b:41:bd:46:22:09:42: 26:2d:dd:9f:07:36:73:62:32:74:4a:d7:9d:c2:aa:ab:bf:0b: b6:5d:fb:78:aa:82:8b:6d:e4:54:ef:c5:54:d8:da:f2:46:d0: 5d:c6:a0:6b:56:86:a8:8e:c2:71:94:2d:df:e6:1f:ce:e6:c5: 67:fd:02:6b:4b:17:51:fc:fd:82:ae:93:95:b9:65:2d:92:6e: 78:46:d7:2f:ce:41:cb:b9:3a:13:a2:37:1a:0f:94:a6:c9:6a: b3:47:75:10:6d:11:30:ab:fe:9f:b1:fc:00:9f:b7:25:d6:bf: 12:0a:ae:4d:2b:14:a4:b7:85:3a:31:40:93:d5:53:05:ee:f8: 63:f0:ee:fb:2d:d9:89:5b:c4:0f:92:75:77:d6:f0:23:04:2f: f7:04:ed:19:1a:49:75:04:d0:47:d0:ea:9b:a6:bd:b0:e4:81: 25:98:dc:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE0NkQxMTAvBgNVBAUTKDY2NEU1OUEwMDBCOTFFNzJGODAzRTZEODY4NDExNTRD ODA1NkI4OEEwHhcNMjUxMTA1MDY1OTUzWhcNMjUxMTEyMDY1OTUzWjAYMRYwFAYD VQQDEw02OTBhZjVlOS01ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9FReNvHAKmYzP6m0bg8Lmk9gNwwz/1CAn1PQbG7+N50Twz0uObcPdQgwHJV XB5cpbGf0yEfXRBpIG92lt3QGoTRhK+ihklYCElgeCmGIh48UY50rqzaY5UtAA9G kFf1gyg8R7EOh87LCbiRSPPk2HGnTCdPbc+RrKfmMX7D3kjqeKcgE3bs1eL4Wft7 CotRlIAev9RHT6EV63Pon/q7/q1d0YE9I3py68GgVF2wguu9r66xpyN3fpWGzFhf X4HGgAeWYXyEMJKJlc6tfNoJUV9K1gAuRYfrwdrdvjD9438yCZP+qgbvLkWsZHRq NfTEB8f10NlqsavCH0Ko8BwdkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFR+EBU ZMcM7yy67ieQuk465XCwMB8GA1UdIwQYMBaAFGZOWaAAuR5y+APm2GhBFUyAVriK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTQ2RC9FQ0IwMEI0MjAw MzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhuTDRBLWJZYUVFVlRJQld1 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1prNVpvQUM1SG5MNEEtYllhRUVWVElCV3VJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTQ2RC9FQ0IwMEI0MjAwMzcxMUYwQkJENzI0NzVDNEY5QUUwMi9aazVab0FDNUhu TDRBLWJZYUVFVlRJQld1SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCreFK6l7o9s25mHgh7KClx7Hi3J6j6qpC5fSbsrtHFNin8qmbjwET3 8BOjstf1DGwTkEvcifUezbSDcmX1jL4os0gMz3w5QrwM4Gy3ExS9nWlrK5tBvUYi CUImLd2fBzZzYjJ0Stedwqqrvwu2Xft4qoKLbeRU78VU2NryRtBdxqBrVoaojsJx lC3f5h/O5sVn/QJrSxdR/P2CrpOVuWUtkm54RtcvzkHLuToTojcaD5SmyWqzR3UQ bREwq/6fsfwAn7cl1r8SCq5NKxSkt4U6MUCT1VMF7vhj8O77LdmJW8QPknV31vAj BC/3BO0ZGkl1BNBH0Oqbpr2w5IElmNy6 -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:49 2025 by rpki-client