$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: STz55cmh5Aq7fEJxWHwZ8MGmFZjfK1bEcq6Xrz4XHRw= Subject key identifier: FA:3A:8D:B8:C4:B3:EE:FE:3E:DA:95:5E:6F:4E:BE:81:5F:C4:47:76 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 0157 Signing time: Mon 03 Nov 2025 04:21:43 +0000 Manifest this update: Mon 03 Nov 2025 04:21:43 +0000 Manifest next update: Mon 10 Nov 2025 04:21:43 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: pvWywGqdOAiBVVVa/rZzno4Rcl/LF48gIv8HPLbMkak=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Nov 3 04:21:43 2025 GMT Not After : Nov 10 04:21:43 2025 GMT Subject: CN=69082dd7-0173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:43:de:7f:34:fd:ad:10:d5:41:a9:f3:12:30: 26:c7:de:d6:47:aa:ed:c3:64:39:5e:e6:09:82:5d: 63:21:93:48:39:13:0e:40:ed:e8:80:69:a8:b5:ca: 96:36:53:44:39:92:4a:6f:75:21:6d:01:b9:87:d4: e6:a5:68:b6:a2:20:34:54:90:dd:d2:ad:35:1f:25: ca:06:a7:34:e9:bb:0d:0f:ec:d8:3a:55:76:b1:32: b4:c6:b7:bc:a3:7a:bc:58:b4:83:5f:32:5b:6c:ee: 0c:39:13:b9:7e:9f:3e:9d:d2:32:3f:fd:d1:22:7d: 50:63:bd:58:3f:6b:23:f2:92:1b:b2:f3:44:11:5b: 7c:88:77:9b:4f:54:1f:80:95:c7:fc:2f:08:ee:07: ab:d3:d2:0b:08:b1:e6:ce:bb:93:2a:69:99:67:42: f4:60:d7:38:2a:4c:19:8a:31:07:1e:f6:7b:93:ca: 58:b7:44:e1:b2:0b:1a:71:48:e9:45:e3:57:7a:7e: 98:d9:d0:53:39:25:e2:10:5c:52:4a:28:cf:c3:18: a3:bd:a0:36:b2:f5:11:62:55:f7:60:0e:5b:93:63: 60:67:d1:81:cb:64:e5:b7:e2:d0:eb:4d:ca:19:11: 10:0c:4e:03:4e:76:6f:78:14:59:e6:4e:8a:66:03: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:8D:B8:C4:B3:EE:FE:3E:DA:95:5E:6F:4E:BE:81:5F:C4:47:76 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:06:7b:70:da:11:27:c2:32:60:5f:c1:79:f4:05:ae:27: c1:81:8b:8a:26:8d:c8:c1:2a:8d:19:94:97:e4:70:c9:27:9c: ff:7f:39:7b:f7:f3:e2:a8:90:ea:e4:b9:1c:01:ae:5a:47:0e: ec:58:0f:47:f3:a3:33:fc:0d:fd:bc:f8:b3:20:dc:6d:a6:7e: d8:16:1f:e9:01:7b:2b:16:00:d8:5e:ac:9e:1a:0a:ab:8e:48: 73:a7:b6:ba:fd:fd:71:91:7d:58:b1:9c:c5:1f:f3:15:2c:41: a8:d4:f4:07:ad:5f:fa:74:d4:fa:b0:1a:e5:a4:63:24:5c:e5: 15:f8:c5:47:82:0f:be:53:70:d9:98:f1:be:99:37:30:d8:42: 59:53:e6:ef:7c:07:7d:f9:24:cb:88:4b:42:16:48:94:8a:e9: 1b:47:6f:25:62:95:17:c1:22:4b:ea:03:b6:a3:2b:8b:39:da: 70:79:53:4d:97:08:56:ce:50:94:49:51:34:6e:70:24:0b:6b: 32:04:53:37:e3:ef:88:66:d3:eb:a2:e8:de:9d:87:76:b7:72: 5b:1e:1c:4b:19:78:bd:8d:b0:c7:fe:c6:ef:54:21:c9:b9:5a: 8c:c1:88:55:49:4c:c1:8e:4f:8b:db:3a:0e:d4:05:95:83:51: 9a:fc:13:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUxMTAzMDQyMTQzWhcNMjUxMTEwMDQyMTQzWjAYMRYwFAYD VQQDEw02OTA4MmRkNy0wMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kPefzT9rRDVQanzEjAmx97WR6rtw2Q5XuYJgl1jIZNIORMOQO3ogGmotcqW NlNEOZJKb3UhbQG5h9TmpWi2oiA0VJDd0q01HyXKBqc06bsND+zYOlV2sTK0xre8 o3q8WLSDXzJbbO4MORO5fp8+ndIyP/3RIn1QY71YP2sj8pIbsvNEEVt8iHebT1Qf gJXH/C8I7ger09ILCLHmzruTKmmZZ0L0YNc4KkwZijEHHvZ7k8pYt0ThsgsacUjp ReNXen6Y2dBTOSXiEFxSSijPwxijvaA2svURYlX3YA5bk2NgZ9GBy2Tlt+LQ603K GREQDE4DTnZveBRZ5k6KZgPd6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo6jbjE s+7+PtqVXm9OvoFfxEd2MB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBajgZ7cNoRJ8IyYF/BefQFrifBgYuKJo3IwSqNGZSX5HDJJ5z/fzl7 9/PiqJDq5LkcAa5aRw7sWA9H86Mz/A39vPizINxtpn7YFh/pAXsrFgDYXqyeGgqr jkhzp7a6/f1xkX1YsZzFH/MVLEGo1PQHrV/6dNT6sBrlpGMkXOUV+MVHgg++U3DZ mPG+mTcw2EJZU+bvfAd9+STLiEtCFkiUiukbR28lYpUXwSJL6gO2oyuLOdpweVNN lwhWzlCUSVE0bnAkC2syBFM34++IZtProujenYd2t3JbHhxLGXi9jbDH/sbvVCHJ uVqMwYhVSUzBjk+L2zoO1AWVg1Ga/BN3 -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:14 2025 by rpki-client