$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: b60zXI+rNz229oAw83ObVIUJ0ZbFSdGXWERuXoT0Tb0= Subject key identifier: A9:09:40:81:EB:42:F7:24:B2:6B:CB:AD:0F:85:D2:00:AA:F9:D2:C8 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A6F Signing time: Tue 04 Nov 2025 16:26:29 +0000 Manifest this update: Tue 04 Nov 2025 16:26:29 +0000 Manifest next update: Tue 11 Nov 2025 16:26:29 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: Y294buQSTxIHpRGf7kgueTubVceVYBPH13zUrMlBicY=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6795 (0x1a8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Nov 4 16:26:29 2025 GMT Not After : Nov 11 16:26:29 2025 GMT Subject: CN=690a2935-c24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:7f:e7:da:76:6a:76:6c:7b:ed:30:b7:03: 7b:81:8f:92:ea:f1:7f:ac:63:73:c7:83:cf:63:38: e5:44:86:e7:35:11:49:ea:cb:53:a3:d3:2b:13:9c: c7:27:12:b0:df:f7:e4:37:2b:0a:2d:16:e4:d7:98: 5d:f4:47:1b:46:4a:b1:ea:fa:8e:b0:8d:37:73:a7: ae:1c:73:32:29:0b:97:63:97:03:2c:3c:2e:c9:5a: 0a:91:73:69:7a:2a:77:d8:46:75:2b:2b:9f:97:e5: ca:ae:37:47:1e:20:a9:e4:44:6c:75:ca:34:65:70: 73:f2:09:8d:37:a6:2c:4e:b5:78:34:ac:02:73:89: a0:85:c5:fd:5a:36:49:e2:ed:df:45:9b:bb:28:1a: 97:f2:ee:59:6e:0c:68:1b:61:3a:da:0e:19:86:46: 7e:d0:a5:3b:60:2b:30:7e:e0:b3:f8:89:4a:bb:fa: 9f:1c:ad:5c:71:c1:40:36:7b:31:9e:89:fc:44:a8: 1f:4e:69:40:18:82:d7:be:9e:b6:21:ff:48:25:76: d0:fb:3d:d5:96:a6:8d:bd:81:ff:89:91:88:d6:8c: 0e:1a:ec:60:b9:c4:c3:e7:ee:ad:f2:ca:2c:4f:68: 6f:1c:7f:90:c4:bf:86:a3:a2:35:5e:67:c9:fb:15: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:40:81:EB:42:F7:24:B2:6B:CB:AD:0F:85:D2:00:AA:F9:D2:C8 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f7:3e:53:c0:4b:fa:dd:07:b1:8e:3e:79:be:63:6a:a5:d8: af:c7:cc:00:fa:27:a4:73:ce:02:48:15:c3:b9:88:4e:53:69: af:55:c6:70:20:59:0d:a4:77:5a:62:01:9b:57:c6:c1:15:30: b5:0d:9a:77:8e:8f:86:c2:74:28:97:80:de:3b:2c:c0:90:ad: 2d:a5:e4:14:69:40:52:26:06:fa:e8:1a:96:2d:2f:11:b5:a3: 51:5f:54:8e:c9:31:a2:f8:94:10:53:5b:a8:69:4a:8a:24:36: c9:c0:36:c0:5d:35:c6:16:5e:de:1c:e4:f6:4d:e2:dd:d5:54: 67:d9:24:6c:f7:60:3a:50:24:e7:74:2d:ea:c8:93:09:a5:ad: 10:6e:15:34:f9:91:1f:e9:8b:aa:4a:ae:68:87:d9:1a:38:8d: 5d:47:33:b4:08:33:7e:b9:e5:b6:0f:fb:13:3c:a5:63:4e:b2: f2:bb:87:6d:66:42:5b:02:71:42:5a:80:0d:20:3b:47:aa:63: 81:a1:17:97:89:69:96:4e:73:2d:d0:43:ef:87:24:8f:69:90: 9c:b1:d7:df:8e:93:8f:79:ff:67:15:6f:c8:05:bb:e7:97:f3: 8c:a9:c6:f7:6e:83:0c:d6:7f:6a:78:32:b8:a2:2d:fd:41:d5: 81:72:cf:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUxMTA0MTYyNjI5WhcNMjUxMTExMTYyNjI5WjAYMRYwFAYD VQQDEw02OTBhMjkzNS1jMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHN/59p2anZse+0wtwN7gY+S6vF/rGNzx4PPYzjlRIbnNRFJ6stTo9MrE5zH JxKw3/fkNysKLRbk15hd9EcbRkqx6vqOsI03c6euHHMyKQuXY5cDLDwuyVoKkXNp eip32EZ1Kyufl+XKrjdHHiCp5ERsdco0ZXBz8gmNN6YsTrV4NKwCc4mghcX9WjZJ 4u3fRZu7KBqX8u5ZbgxoG2E62g4ZhkZ+0KU7YCswfuCz+IlKu/qfHK1cccFANnsx non8RKgfTmlAGILXvp62If9IJXbQ+z3VlqaNvYH/iZGI1owOGuxgucTD5+6t8sos T2hvHH+QxL+Go6I1XmfJ+xU3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkJQIHr QvcksmvLrQ+F0gCq+dLIMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/9z5TwEv63Qexjj55vmNqpdivx8wA+iekc84CSBXDuYhOU2mvVcZw IFkNpHdaYgGbV8bBFTC1DZp3jo+GwnQol4DeOyzAkK0tpeQUaUBSJgb66BqWLS8R taNRX1SOyTGi+JQQU1uoaUqKJDbJwDbAXTXGFl7eHOT2TeLd1VRn2SRs92A6UCTn dC3qyJMJpa0QbhU0+ZEf6YuqSq5oh9kaOI1dRzO0CDN+ueW2D/sTPKVjTrLyu4dt ZkJbAnFCWoANIDtHqmOBoReXiWmWTnMt0EPvhySPaZCcsdffjpOPef9nFW/IBbvn l/OMqcb3boMM1n9qeDK4oi39QdWBcs8j -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:42 2025 by rpki-client