$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: IYotGN0aHFLrF1a3Hje2ILzN6680yVxSMc1qxXl8lH8= Subject key identifier: CE:53:CA:82:28:94:0E:6B:AD:C0:82:10:01:1E:B2:66:94:52:82:1A Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: 0129 Signing time: Wed 05 Nov 2025 04:47:27 +0000 Manifest this update: Wed 05 Nov 2025 04:47:26 +0000 Manifest next update: Wed 12 Nov 2025 04:47:26 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: QbGanmott4bnwM5rEhRrNsGAX+JH99prOMfQ7ZxQbKE=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E, serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Nov 5 04:47:26 2025 GMT Not After : Nov 12 04:47:26 2025 GMT Subject: CN=690ad6df-5f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:17:50:3e:6c:b7:af:f4:ce:83:06:8a:46: 48:4c:75:f5:48:03:25:96:2e:1a:e3:e4:65:c2:1b: 64:17:8b:68:53:65:22:0e:ff:28:cf:8c:68:69:26: 10:31:2a:19:da:41:36:83:34:6b:80:23:43:74:8a: 01:30:f1:65:15:b6:a3:ba:9e:87:8e:1f:6e:d3:46: aa:8a:54:56:05:fb:f3:29:26:1c:3a:b1:90:f2:f5: 29:e0:5a:40:a5:9c:b4:c1:5e:6f:e3:2b:ca:fc:6f: f6:96:6a:96:1e:4e:16:2c:9e:03:86:39:f6:d6:07: c8:bb:15:1b:83:dd:58:97:d2:b9:f5:81:3a:bf:e7: 02:bc:b5:5e:43:1d:ed:78:39:76:15:13:21:9b:fb: 49:ca:9e:5a:1c:c8:ea:99:e3:bb:8e:89:0e:b8:57: cc:ba:cf:4c:74:2a:68:ec:d1:27:4a:d2:97:71:e7: 3a:ff:9f:8d:54:94:23:25:d6:3f:a0:ee:76:a9:f3: cc:75:4e:b2:98:2a:c9:74:78:a4:77:e7:57:74:a2: fc:c0:c1:62:27:e1:3e:c4:68:ae:3a:55:7f:24:6f: b0:89:18:88:a5:9b:dc:f4:bc:4d:12:f5:6b:0d:f3: 53:14:73:9a:cf:ee:50:51:9a:36:85:24:17:eb:42: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:CA:82:28:94:0E:6B:AD:C0:82:10:01:1E:B2:66:94:52:82:1A X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:5c:a7:ce:de:ff:3c:56:cb:b0:5c:98:dd:4d:57:31:74:97: 40:aa:1f:ac:5b:16:b0:17:e7:72:40:d7:c5:56:13:5b:38:34: d0:36:ac:a8:29:09:4a:9b:73:79:f5:bc:fa:4d:61:eb:12:fc: 77:b8:d7:f8:0b:69:77:bd:c4:4a:36:df:f2:33:c0:bf:a0:2a: d2:26:af:74:50:1f:4a:9b:41:0c:29:39:fb:53:07:8a:af:82: 09:7c:8c:96:cc:30:4e:a5:0d:33:8d:a0:fd:c8:6f:9a:16:c2: 07:44:98:15:2a:59:fa:59:40:75:1e:6b:00:3c:85:7b:68:b7: 96:55:a7:f7:22:df:30:91:5c:a6:4e:87:ca:cc:45:78:4d:0c: 46:29:50:c3:f9:2e:fc:49:f2:c1:29:0b:ef:36:d8:49:c4:1f: c7:b4:62:74:43:ea:5b:f2:46:61:d0:46:95:82:e3:a1:35:6b: 02:f8:14:f9:42:da:3d:fe:11:ed:2e:2e:17:b0:4c:a3:3e:7b: 38:af:6d:43:4c:65:81:a0:94:3f:cb:bb:d2:a0:fe:14:a6:35: 5b:ca:64:2d:c2:e5:4e:f9:5a:8d:2f:45:20:14:a7:c5:0c:06: ca:4f:e3:1f:d3:cb:0c:21:42:f3:f5:ad:82:83:79:56:19:3f: 3d:d9:49:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUxMTA1MDQ0NzI2WhcNMjUxMTEyMDQ0NzI2WjAYMRYwFAYD VQQDEw02OTBhZDZkZi01ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVAXUD5st6/0zoMGikZITHX1SAMlli4a4+RlwhtkF4toU2UiDv8oz4xoaSYQ MSoZ2kE2gzRrgCNDdIoBMPFlFbajup6Hjh9u00aqilRWBfvzKSYcOrGQ8vUp4FpA pZy0wV5v4yvK/G/2lmqWHk4WLJ4Dhjn21gfIuxUbg91Yl9K59YE6v+cCvLVeQx3t eDl2FRMhm/tJyp5aHMjqmeO7jokOuFfMus9MdCpo7NEnStKXcec6/5+NVJQjJdY/ oO52qfPMdU6ymCrJdHikd+dXdKL8wMFiJ+E+xGiuOlV/JG+wiRiIpZvc9LxNEvVr DfNTFHOaz+5QUZo2hSQX60LoYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5TyoIo lA5rrcCCEAEesmaUUoIaMB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSXKfO3v88VsuwXJjdTVcxdJdAqh+sWxawF+dyQNfFVhNbODTQNqyo KQlKm3N59bz6TWHrEvx3uNf4C2l3vcRKNt/yM8C/oCrSJq90UB9Km0EMKTn7UweK r4IJfIyWzDBOpQ0zjaD9yG+aFsIHRJgVKln6WUB1HmsAPIV7aLeWVaf3It8wkVym TofKzEV4TQxGKVDD+S78SfLBKQvvNthJxB/HtGJ0Q+pb8kZh0EaVguOhNWsC+BT5 Qto9/hHtLi4XsEyjPns4r21DTGWBoJQ/y7vSoP4UpjVbymQtwuVO+VqNL0UgFKfF DAbKT+Mf08sMIULz9a2Cg3lWGT892UlX -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:21 2025 by rpki-client