$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: no5lKfP+MTZ6KHA3aZ7NMT5+1UE4b79E5kDk5ci7b5E= Subject key identifier: 78:F3:AF:80:D1:37:0F:4B:7B:36:2F:57:1E:DD:30:92:D1:1F:96:0A Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E77 Signing time: Sun 02 Nov 2025 17:44:23 +0000 Manifest this update: Sun 02 Nov 2025 17:44:23 +0000 Manifest next update: Sun 09 Nov 2025 17:44:23 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: jC7aG1arjd1T5AGZADvRzP0j9aJBEU8GCNTqk33aKe4=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Nov 2 17:44:23 2025 GMT Not After : Nov 9 17:44:23 2025 GMT Subject: CN=69079877-4be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:79:58:1b:12:3d:7e:56:47:bf:7f:54:25: 0c:1d:84:66:f3:4e:b3:39:35:22:0f:af:df:8c:5a: 5c:ab:7f:63:09:db:38:86:ac:de:0a:d3:bc:9f:91: d9:a4:01:3a:e9:ac:a0:d8:81:18:40:f5:f9:50:71: f9:a9:03:a4:0b:ab:85:97:91:47:d6:18:01:c5:1f: 8d:3e:97:4d:d1:78:fa:7e:48:29:02:7c:a4:f7:55: b8:6b:70:50:c2:21:c3:75:7c:ec:e7:bc:62:30:c7: 92:e0:db:57:a2:3f:42:3d:2a:b7:94:e1:a6:89:a5: 4b:97:24:e1:a0:11:29:77:78:66:e0:09:56:3d:a3: d4:b5:c5:a2:e8:12:0a:b7:89:2d:95:ed:67:16:ef: 5e:ff:b5:73:e7:68:d2:77:7c:84:60:5b:45:62:ac: 40:77:e8:77:9e:08:1b:1d:28:8e:1d:2e:68:b0:8b: cd:08:b1:1e:73:40:0a:35:01:86:a4:76:a7:2d:0c: 32:82:14:aa:31:a6:af:41:60:ea:5f:08:2f:83:d2: bc:91:3c:dc:30:77:18:ff:f2:16:14:c4:07:79:57: 62:d1:f7:d9:20:5b:15:1b:c5:0f:1e:5f:f8:01:a0: 8b:4b:57:76:21:d6:ab:b6:70:2c:70:e5:c9:bd:fa: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F3:AF:80:D1:37:0F:4B:7B:36:2F:57:1E:DD:30:92:D1:1F:96:0A X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:43:9c:77:f2:1e:b1:97:67:45:31:e5:ac:c5:26:69:da:ef: 27:67:a5:f3:25:1d:e7:0c:86:3f:0c:f8:5a:98:0b:ec:55:ba: 94:36:27:d8:20:81:f3:01:8b:91:d6:40:09:9b:79:5e:ed:b1: 61:03:f6:3c:95:5b:e9:65:5d:75:2a:90:9f:4a:50:fc:f3:90: cd:35:1e:ca:0c:55:0c:08:8c:f9:90:9b:88:38:2e:65:22:6d: 5e:db:92:d2:f4:cb:85:60:f5:71:75:36:3e:22:61:8e:fe:c4: 90:e8:ad:45:38:44:20:71:3d:95:1f:23:20:ff:04:9a:28:2b: 0f:a3:4f:b8:0b:93:49:be:2b:dd:c2:fd:93:71:c0:65:20:0a: 11:1c:60:ba:8b:6b:b6:3b:62:67:95:f2:c4:05:54:1d:6f:6a: 9f:a0:6e:d6:15:66:cd:33:8e:43:ac:d4:6b:d1:28:91:15:df: 14:81:78:5a:b1:dc:3d:91:70:92:43:53:43:a8:57:89:72:ed: 9f:e9:53:13:c7:74:b4:17:53:89:e5:f9:8d:07:da:d4:13:4c: 05:c8:d7:e3:8f:be:18:af:b5:7e:cf:6d:eb:7c:59:06:f7:84: 25:bf:aa:ba:56:6a:3a:50:b6:2c:4f:ac:d2:2d:f0:69:c4:26: 44:b2:e3:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUxMTAyMTc0NDIzWhcNMjUxMTA5MTc0NDIzWjAYMRYwFAYD VQQDEw02OTA3OTg3Ny00YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT95WBsSPX5WR79/VCUMHYRm806zOTUiD6/fjFpcq39jCds4hqzeCtO8n5HZ pAE66ayg2IEYQPX5UHH5qQOkC6uFl5FH1hgBxR+NPpdN0Xj6fkgpAnyk91W4a3BQ wiHDdXzs57xiMMeS4NtXoj9CPSq3lOGmiaVLlyThoBEpd3hm4AlWPaPUtcWi6BIK t4ktle1nFu9e/7Vz52jSd3yEYFtFYqxAd+h3nggbHSiOHS5osIvNCLEec0AKNQGG pHanLQwyghSqMaavQWDqXwgvg9K8kTzcMHcY//IWFMQHeVdi0ffZIFsVG8UPHl/4 AaCLS1d2IdartnAscOXJvfr08QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjzr4DR Nw9LezYvVx7dMJLRH5YKMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUQ5x38h6xl2dFMeWsxSZp2u8nZ6XzJR3nDIY/DPhamAvsVbqUNifY IIHzAYuR1kAJm3le7bFhA/Y8lVvpZV11KpCfSlD885DNNR7KDFUMCIz5kJuIOC5l Im1e25LS9MuFYPVxdTY+ImGO/sSQ6K1FOEQgcT2VHyMg/wSaKCsPo0+4C5NJvivd wv2TccBlIAoRHGC6i2u2O2JnlfLEBVQdb2qfoG7WFWbNM45DrNRr0SiRFd8UgXha sdw9kXCSQ1NDqFeJcu2f6VMTx3S0F1OJ5fmNB9rUE0wFyNfjj74Yr7V+z23rfFkG 94Qlv6q6Vmo6ULYsT6zSLfBpxCZEsuP9 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:41 2025 by rpki-client