$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: bRepXoUTanvABCQkiUuBxfZmqJn659DOuyH9rt7n08A= Subject key identifier: 4F:B6:DA:24:2B:B7:73:E5:1D:2A:07:F2:E6:C2:AF:86:C6:6C:B0:1B Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 07F5 Signing time: Tue 04 Nov 2025 21:10:22 +0000 Manifest this update: Tue 04 Nov 2025 21:10:21 +0000 Manifest next update: Tue 11 Nov 2025 21:10:21 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: 60NdS2Gm2s4XS4n4D2skprwO2oKweBXNnaWZrcVQbDw=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Nov 4 21:10:21 2025 GMT Not After : Nov 11 21:10:21 2025 GMT Subject: CN=690a6bbd-1b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:5a:40:ba:1c:e1:56:e3:66:39:eb:ee:3a: b3:5d:dc:7c:73:57:3f:25:ce:e5:df:5b:9b:ce:b1: 38:de:cb:38:d3:17:fa:85:72:de:22:fd:c4:56:02: 30:f7:f0:1e:55:b5:47:25:36:1a:3b:8b:de:3c:ed: 5e:a5:46:31:a5:0f:47:55:a3:53:7a:76:88:da:26: c5:c0:85:63:23:4e:ca:ca:65:79:57:c6:00:a5:ce: a7:a4:a1:4e:fc:1f:2f:44:54:1f:64:1a:e7:48:df: 3b:5c:2a:89:9b:4b:c7:66:4f:aa:b6:2a:49:09:87: b5:b0:02:f0:77:9d:b1:dd:2e:b0:20:2c:1c:2b:31: ef:ae:6a:8b:6d:bc:7d:c7:da:6d:39:e5:5b:7c:31: b2:bb:e1:45:43:07:2e:b0:50:fd:1f:48:10:eb:1e: 95:e4:90:57:8c:6f:11:f4:65:62:09:21:aa:c3:67: 8e:ff:bc:08:1a:e6:e1:4f:8a:2d:56:a2:e8:b7:20: 59:23:de:42:bc:93:33:4d:cc:16:7a:a2:62:c7:5a: 9f:d2:6e:bb:31:04:f7:62:57:0e:a1:bf:8e:a3:a8: 83:2c:73:66:18:53:7b:9d:0f:f3:2c:d3:ed:b7:19: c2:63:39:a8:5f:c1:96:27:e4:98:3f:61:72:0a:ac: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:DA:24:2B:B7:73:E5:1D:2A:07:F2:E6:C2:AF:86:C6:6C:B0:1B X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:22:cc:0f:69:04:1b:c7:ba:a7:3d:7b:de:8b:a1:8b:88:c3: 28:c1:87:ff:77:60:0c:21:aa:00:85:11:2f:7e:47:fc:7b:21: 44:c0:97:e0:13:58:d3:0c:93:d8:0c:96:41:02:f1:56:b3:cf: 75:6d:28:3f:9c:8f:3d:1b:6d:38:52:af:e9:55:f2:5f:07:48: 28:5a:9f:b8:be:e3:38:ed:79:2a:08:7b:ba:f1:6f:ec:09:54: fa:f6:a3:3d:ea:94:4b:a7:9e:49:03:86:ef:0d:60:c8:f3:3c: e0:88:a9:c7:50:e7:f5:c4:cd:d7:fc:19:b3:4b:f6:18:d5:ca: 5d:9b:6c:cf:a8:ae:74:75:1d:df:67:01:1a:67:44:3e:df:f4: d6:44:c8:04:22:96:1a:64:6c:d0:89:8c:1d:06:a8:b3:5e:ab: d2:f3:76:a8:db:4b:48:f4:c6:41:62:9b:ce:59:18:e5:a7:b0: 81:9f:dd:7e:57:fd:98:48:27:22:16:e1:2d:5e:77:1c:dd:ce: 52:88:56:49:2e:2d:f7:28:05:b6:95:a9:84:a1:8a:86:bb:6f: b5:bb:c6:e3:b3:8a:65:3a:d8:26:2d:1c:ae:52:0b:17:0a:e0: 7b:e8:9f:c8:75:5b:2d:e0:de:34:e2:bf:c9:73:41:7a:74:e0: c6:37:32:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjUxMTA0MjExMDIxWhcNMjUxMTExMjExMDIxWjAYMRYwFAYD VQQDEw02OTBhNmJiZC0xYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX1aQLoc4VbjZjnr7jqzXdx8c1c/Jc7l31ubzrE43ss40xf6hXLeIv3EVgIw 9/AeVbVHJTYaO4vePO1epUYxpQ9HVaNTenaI2ibFwIVjI07KymV5V8YApc6npKFO /B8vRFQfZBrnSN87XCqJm0vHZk+qtipJCYe1sALwd52x3S6wICwcKzHvrmqLbbx9 x9ptOeVbfDGyu+FFQwcusFD9H0gQ6x6V5JBXjG8R9GViCSGqw2eO/7wIGubhT4ot VqLotyBZI95CvJMzTcwWeqJix1qf0m67MQT3YlcOob+Oo6iDLHNmGFN7nQ/zLNPt txnCYzmoX8GWJ+SYP2FyCqz6cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+22iQr t3PlHSoH8ubCr4bGbLAbMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLIswPaQQbx7qnPXvei6GLiMMowYf/d2AMIaoAhREvfkf8eyFEwJfg E1jTDJPYDJZBAvFWs891bSg/nI89G204Uq/pVfJfB0goWp+4vuM47XkqCHu68W/s CVT69qM96pRLp55JA4bvDWDI8zzgiKnHUOf1xM3X/BmzS/YY1cpdm2zPqK50dR3f ZwEaZ0Q+3/TWRMgEIpYaZGzQiYwdBqizXqvS83ao20tI9MZBYpvOWRjlp7CBn91+ V/2YSCciFuEtXncc3c5SiFZJLi33KAW2lamEoYqGu2+1u8bjs4plOtgmLRyuUgsX CuB76J/IdVst4N404r/Jc0F6dODGNzIx -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:15 2025 by rpki-client