$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: T/N+SxRLXbwKRbvXH7B519RGIguBROSSQL/AYhXjlhg= Subject key identifier: CD:CB:25:9A:96:F7:2C:54:36:B2:5E:4E:58:71:75:EF:CF:13:81:9C Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 30FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 30E5 Signing time: Tue 04 Nov 2025 15:27:44 +0000 Manifest this update: Tue 04 Nov 2025 15:27:43 +0000 Manifest next update: Tue 11 Nov 2025 15:27:43 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: V2heX7txd3kxkaTMFU6In0hEs+Ql7OnDMLcAGyFM2fQ=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: 54WI7bxOwof+H1Cz8+uPiLZ+tzpprbk2GuCnR0w5MUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12542 (0x30fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: Nov 4 15:27:43 2025 GMT Not After : Nov 11 15:27:43 2025 GMT Subject: CN=690a1b6f-e31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:e8:8f:9f:cc:f5:f5:ff:0f:c3:5c:72:9a: e6:2d:45:54:0f:d2:e0:92:e5:f2:e1:ed:94:ed:5c: 76:04:cf:55:6d:ed:d9:bc:49:86:f5:26:be:38:33: b6:46:9b:aa:f5:b8:05:e0:5b:a3:6e:b0:4d:ab:84: 7a:5a:38:0f:43:28:87:ef:c4:2f:54:60:ed:b5:cc: 5c:e3:d4:35:74:fa:e5:f7:f8:f4:ea:6f:1f:14:49: 33:38:b1:76:8a:b6:72:1a:08:d4:d0:7f:a0:be:98: ca:43:f6:3c:d4:a8:ad:61:32:00:e7:5c:d5:cb:6c: 75:ad:9e:3e:09:81:1e:5f:2a:99:76:b8:db:8f:b5: 2d:21:e5:2c:10:6c:02:0a:d5:8a:75:c1:dd:2d:50: 34:9d:d6:d8:e6:28:c3:29:04:82:27:82:e4:b5:cb: 21:64:d2:25:94:e0:9d:e7:4d:2e:b8:1d:f2:e6:0e: 69:fc:9f:21:73:23:e2:77:e7:7f:10:57:68:3f:16: 85:c5:1f:21:df:c9:06:c4:bd:e8:f2:2b:18:bc:71: c0:1c:ab:de:1b:4d:e5:64:60:11:84:2b:6e:ca:47: 8b:b1:72:ca:3c:12:e8:53:09:7c:92:5d:76:91:65: 60:88:84:5e:a4:f7:ac:34:37:b1:11:3d:a1:64:46: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CB:25:9A:96:F7:2C:54:36:B2:5E:4E:58:71:75:EF:CF:13:81:9C X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1b:62:88:35:47:db:81:1d:78:24:94:a3:90:11:ea:92:2f: 02:30:f2:ca:2e:79:e1:ce:ea:31:4b:f0:b6:da:c2:91:6d:df: b0:03:6e:68:51:10:73:0c:32:70:09:ea:57:bd:7d:f0:a5:87: 44:56:c1:95:72:8a:38:76:a1:f0:a7:d7:27:81:ab:eb:3a:85: 34:f1:6c:ec:b9:77:5f:32:58:cc:12:3b:e6:b8:43:85:1f:f4: ed:13:55:d8:86:f8:9b:bc:bb:88:38:b5:e1:c7:77:2b:03:23: e3:20:3d:b1:05:f5:19:05:fb:d5:9e:2e:2d:35:ae:94:fd:37: ab:f0:f6:7c:13:e7:c6:64:e9:ff:09:e6:aa:bf:9f:7a:c0:9e: 14:66:e2:b2:bf:a3:56:e9:73:41:90:e1:e8:1f:b2:02:df:3a: eb:1d:45:4f:43:a6:1d:be:d9:66:83:ea:4d:d7:19:90:ee:9f: f7:49:f4:64:4f:06:3c:09:3c:90:47:5b:76:17:d3:12:e6:23: ae:40:55:e6:32:d8:80:8b:44:91:6d:78:c1:76:7f:5e:5d:4d: 19:de:f3:88:46:fa:0d:0a:5a:c1:80:38:4b:14:85:47:9a:8d: 88:bb:d8:db:2a:67:2b:ad:7b:7b:cb:75:2b:9f:13:5a:61:54: 5c:da:d5:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjUxMTA0MTUyNzQzWhcNMjUxMTExMTUyNzQzWjAYMRYwFAYD VQQDEw02OTBhMWI2Zi1lMzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/foj5/M9fX/D8NccprmLUVUD9LgkuXy4e2U7Vx2BM9Vbe3ZvEmG9Sa+ODO2 Rpuq9bgF4FujbrBNq4R6WjgPQyiH78QvVGDttcxc49Q1dPrl9/j06m8fFEkzOLF2 irZyGgjU0H+gvpjKQ/Y81KitYTIA51zVy2x1rZ4+CYEeXyqZdrjbj7UtIeUsEGwC CtWKdcHdLVA0ndbY5ijDKQSCJ4LktcshZNIllOCd500uuB3y5g5p/J8hcyPid+d/ EFdoPxaFxR8h38kGxL3o8isYvHHAHKveG03lZGARhCtuykeLsXLKPBLoUwl8kl12 kWVgiIRepPesNDexET2hZEb8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3LJZqW 9yxUNrJeTlhxde/PE4GcMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeG2KINUfbgR14JJSjkBHqki8CMPLKLnnhzuoxS/C22sKRbd+wA25o URBzDDJwCepXvX3wpYdEVsGVcoo4dqHwp9cngavrOoU08WzsuXdfMljMEjvmuEOF H/TtE1XYhvibvLuIOLXhx3crAyPjID2xBfUZBfvVni4tNa6U/Ter8PZ8E+fGZOn/ Ceaqv596wJ4UZuKyv6NW6XNBkOHoH7IC3zrrHUVPQ6Ydvtlmg+pN1xmQ7p/3SfRk TwY8CTyQR1t2F9MS5iOuQFXmMtiAi0SRbXjBdn9eXU0Z3vOIRvoNClrBgDhLFIVH mo2Iu9jbKmcrrXt7y3UrnxNaYVRc2tVj -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:10 2025 by rpki-client