$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: zRYhetrlH/rQsrpq39jAQmy5FAcqNqK8M6Bx6kGux+w= Subject key identifier: D3:E2:A5:00:A1:CC:43:FE:27:77:E3:6E:23:80:26:05:1B:39:06:22 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 0866 Signing time: Sun 02 Nov 2025 20:35:25 +0000 Manifest this update: Sun 02 Nov 2025 20:35:25 +0000 Manifest next update: Sun 09 Nov 2025 20:35:25 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: jbIaPa2JzikgGFmB9/vgzQ4b3+tUGBCKrLBE9VgL5LQ=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: 5FNBX5H270TTnOX6V0W/sXkhhqzheyLbOa1sf514DnQ=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: VBveYclvQ2SVsxz7urPOSzVM9trDrjYG3QLCDnYlh4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Nov 2 20:35:25 2025 GMT Not After : Nov 9 20:35:25 2025 GMT Subject: CN=6907c08d-bcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:91:7d:51:7d:e8:81:c7:b6:d9:e2:01:6e: 5f:59:20:96:3d:af:22:2e:40:5f:3a:12:5d:90:31: ec:42:62:19:e2:3b:7c:90:cb:10:fb:81:1b:fb:c5: ca:d1:5a:20:2f:a0:76:eb:6f:6c:67:80:8d:76:8f: 61:37:1b:2c:20:f8:b6:17:68:6e:67:9f:31:0d:e1: 52:e2:08:c6:03:b1:46:7d:2c:2f:3c:58:e6:33:26: 35:c6:dc:9f:ed:a2:06:b9:30:23:1f:6c:f2:d1:da: 88:f6:01:9e:08:3a:f6:bc:f7:30:fd:34:5b:58:50: 4b:82:f1:b5:3a:a8:59:d0:cc:65:71:4b:97:be:bb: c3:b0:da:7d:ce:5a:5e:2c:08:74:74:52:18:96:a6: 91:fc:70:45:ca:bf:c8:35:53:27:35:bd:ee:d6:1a: ee:69:38:63:af:fb:b3:5f:3a:3c:3d:ae:50:ed:f8: 8a:ab:fe:40:5c:df:8b:ba:8d:31:17:34:7d:ab:3b: 26:28:9a:91:01:78:68:25:94:94:c8:4f:b3:e1:fc: 1c:87:92:a5:a3:cb:aa:b3:08:dd:ba:26:7e:c2:de: 1b:0f:d6:c7:3e:7c:09:5f:f8:ec:8d:c5:e7:38:c5: d7:6b:e0:7c:33:c6:83:18:7f:38:93:5a:f6:bb:f0: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:A5:00:A1:CC:43:FE:27:77:E3:6E:23:80:26:05:1B:39:06:22 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:40:e6:e7:84:c1:28:e1:ce:60:b5:9c:35:91:b0:91:9c:94: f4:e0:34:f2:73:e6:4a:7b:a4:2f:d1:8b:65:84:80:a6:dd:6c: b0:dc:26:7f:f0:c6:01:7b:d9:2d:04:ed:57:f1:f4:e5:4a:ba: e8:59:52:0d:e6:33:91:c0:9c:d1:d3:a9:6c:42:e1:c2:74:1e: 47:0d:d8:1b:1b:d1:3c:0c:d3:1a:61:90:89:30:d5:1d:c2:6e: 19:3d:a1:03:c1:a1:34:18:a7:eb:8b:b4:2a:7a:68:3f:36:40: dc:98:b1:33:ad:c5:92:29:77:7a:60:36:c9:14:a0:ab:b1:8d: 31:f9:ba:df:bd:78:ff:72:3e:2e:b9:c8:75:fa:dd:48:4c:f6: e7:d8:d2:a5:82:6b:3f:7b:29:92:b2:88:78:1b:07:9f:67:ea: 32:61:f1:c8:25:64:c7:3c:ab:33:7f:cf:1c:5e:17:98:b1:2b: 51:8b:40:64:f3:86:f9:b2:cd:c3:9d:b3:42:1d:54:48:6c:2e: cc:21:76:e1:10:c5:e6:d0:17:4b:d1:78:e8:bf:62:06:bf:5e: 2c:95:b8:40:28:29:31:5a:f2:35:9a:18:b6:e5:d1:3c:4c:d4: 6a:19:70:e8:4e:b5:2e:30:ef:b2:df:01:7a:0b:01:9c:53:51: 17:47:21:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUxMTAyMjAzNTI1WhcNMjUxMTA5MjAzNTI1WjAYMRYwFAYD VQQDEw02OTA3YzA4ZC1iY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvleRfVF96IHHttniAW5fWSCWPa8iLkBfOhJdkDHsQmIZ4jt8kMsQ+4Eb+8XK 0VogL6B2629sZ4CNdo9hNxssIPi2F2huZ58xDeFS4gjGA7FGfSwvPFjmMyY1xtyf 7aIGuTAjH2zy0dqI9gGeCDr2vPcw/TRbWFBLgvG1OqhZ0MxlcUuXvrvDsNp9zlpe LAh0dFIYlqaR/HBFyr/INVMnNb3u1hruaThjr/uzXzo8Pa5Q7fiKq/5AXN+Luo0x FzR9qzsmKJqRAXhoJZSUyE+z4fwch5Klo8uqswjduiZ+wt4bD9bHPnwJX/jsjcXn OMXXa+B8M8aDGH84k1r2u/C2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPipQCh zEP+J3fjbiOAJgUbOQYiMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAQObnhMEo4c5gtZw1kbCRnJT04DTyc+ZKe6Qv0YtlhICm3Wyw3CZ/ 8MYBe9ktBO1X8fTlSrroWVIN5jORwJzR06lsQuHCdB5HDdgbG9E8DNMaYZCJMNUd wm4ZPaEDwaE0GKfri7Qqemg/NkDcmLEzrcWSKXd6YDbJFKCrsY0x+brfvXj/cj4u uch1+t1ITPbn2NKlgms/eymSsoh4GwefZ+oyYfHIJWTHPKszf88cXheYsStRi0Bk 84b5ss3DnbNCHVRIbC7MIXbhEMXm0BdL0Xjov2IGv14slbhAKCkxWvI1mhi25dE8 TNRqGXDoTrUuMO+y3wF6CwGcU1EXRyHw -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:11 2025 by rpki-client