$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json) Hash identifier: K1mNTGbW2W78VuCpelK5tUGCm2kWplDQJaJaUfK625s= Subject key identifier: 32:75:2A:00:10:39:75:CB:21:F3:16:BF:50:35:95:91:9F:56:96:41 Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft Manifest number: 0F Signing time: Mon 03 Nov 2025 07:58:19 +0000 Manifest this update: Mon 03 Nov 2025 07:58:19 +0000 Manifest next update: Mon 10 Nov 2025 07:58:19 +0000 Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: h0KF/InkhWKmAHGasqLOTRAtYQPbF+gDyWKzdscpc3k=) 2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: 4+Fz/s7urhRbpWxiqcwm2WW31Se8f+bopMU0fcrID14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Validity Not Before: Nov 3 07:58:19 2025 GMT Not After : Nov 10 07:58:19 2025 GMT Subject: CN=6908609b-9c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:18:11:3a:b5:05:e7:55:80:5f:e3:ed:bd: 3e:47:28:b0:25:f4:16:99:28:c8:c1:c8:c7:7b:35: b8:be:31:47:81:52:65:91:8f:86:dc:06:2d:9f:8e: d5:d3:9e:4f:b5:6f:25:f4:89:25:d5:97:cb:e7:87: 41:72:60:06:76:07:d3:a4:86:5d:61:37:93:f3:72: 2e:bc:80:56:a4:d6:43:51:9d:f0:84:12:d0:bb:16: 5a:fd:33:97:cd:5f:d7:00:d1:55:40:a7:78:fb:b9: a5:e6:dd:5d:1e:a0:21:e6:09:05:c2:21:ea:0c:7e: c5:35:dc:93:55:9b:69:00:ac:3a:e4:ee:43:e8:83: f7:7f:fc:30:08:d3:75:e7:7d:70:b3:2b:76:dc:03: be:5a:bd:6a:0d:02:d7:af:76:de:f7:93:51:55:3d: 2e:b7:1c:d8:b7:17:44:42:af:7b:78:a0:0f:5c:10: 25:2f:5a:96:ec:34:38:07:ac:0a:ec:a5:80:f5:20: b1:c6:40:99:de:00:05:4e:af:83:da:27:92:b0:88: be:0c:1e:b2:5d:3b:48:de:23:2a:24:1f:7d:c9:10: 45:0b:06:f1:39:98:4d:60:86:63:1f:0f:75:3a:e9: 7a:67:e1:70:84:7d:86:15:be:8e:09:c6:19:70:24: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:75:2A:00:10:39:75:CB:21:F3:16:BF:50:35:95:91:9F:56:96:41 X509v3 Authority Key Identifier: keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a4:d1:a4:ce:2a:3c:59:94:a0:4d:73:e6:52:b6:d4:97:ae: ea:b7:7b:6f:23:84:e5:aa:64:29:22:9a:9a:40:6d:89:6d:b2: 56:c6:c3:9a:b1:5b:00:cb:eb:dd:da:e5:69:0a:e2:33:ce:5e: 35:1a:77:df:67:90:a1:f4:6c:47:6f:17:cd:f1:42:6a:a7:02: c2:91:d8:02:f0:46:ad:40:93:92:2d:a6:e7:09:00:3a:da:0d: 9f:cd:29:3d:57:6e:56:68:c1:23:9f:fd:92:50:d1:ef:98:90: 89:04:11:1f:20:16:fa:30:d8:03:99:c3:c6:d4:9b:11:8b:a8: af:29:42:33:f6:2e:61:b8:16:63:27:91:8a:7a:b1:f4:7c:67: 3c:3b:96:01:90:48:f7:0a:43:bb:00:6e:9e:52:29:1d:8b:b5: 62:11:18:d9:10:94:e9:fd:48:c4:34:2f:68:54:2e:5d:83:e4: c7:94:3f:06:81:37:94:85:7b:fe:3f:4d:4d:e1:94:99:f1:7a: 3b:b5:09:a8:4e:3b:df:a7:e7:fa:9a:e7:fa:57:53:f7:9f:ee: 6e:ea:8e:52:66:2c:7a:60:07:57:43:b0:85:cf:79:f0:68:89: 27:2f:9c:c1:d6:21:f0:0a:81:4d:0f:20:82:cc:55:d1:23:55: 86:4e:54:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw NTEyM0EyNDAeFw0yNTExMDMwNzU4MTlaFw0yNTExMTAwNzU4MTlaMBgxFjAUBgNV BAMTDTY5MDg2MDliLTljMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFYxgROrUF51WAX+PtvT5HKLAl9BaZKMjByMd7Nbi+MUeBUmWRj4bcBi2fjtXT nk+1byX0iSXVl8vnh0FyYAZ2B9Okhl1hN5Pzci68gFak1kNRnfCEEtC7Flr9M5fN X9cA0VVAp3j7uaXm3V0eoCHmCQXCIeoMfsU13JNVm2kArDrk7kPog/d//DAI03Xn fXCzK3bcA75avWoNAtevdt73k1FVPS63HNi3F0RCr3t4oA9cECUvWpbsNDgHrArs pYD1ILHGQJneAAVOr4PaJ5KwiL4MHrJdO0jeIyokH33JEEULBvE5mE1ghmMfD3U6 6Xpn4XCEfYYVvo4JxhlwJIPLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMnUqABA5 dcsh8xa/UDWVkZ9WlkEwHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl TTQyLUgtVTVfY1FVU09pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+k0aTOKjxZlKBNc+ZSttSXruq3e28jhOWqZCkimppAbYltslbGw5qx WwDL693a5WkK4jPOXjUad99nkKH0bEdvF83xQmqnAsKR2ALwRq1Ak5ItpucJADra DZ/NKT1XblZowSOf/ZJQ0e+YkIkEER8gFvow2AOZw8bUmxGLqK8pQjP2LmG4FmMn kYp6sfR8Zzw7lgGQSPcKQ7sAbp5SKR2LtWIRGNkQlOn9SMQ0L2hULl2D5MeUPwaB N5SFe/4/TU3hlJnxeju1CahOO9+n5/qa5/pXU/ef7m7qjlJmLHpgB1dDsIXPefBo iScvnMHWIfAKgU0PIILMVdEjVYZOVCc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:23:46 2025 by rpki-client