$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: bYxV+bQja7io0H+DJ7WLYV+TFmY0X7S1x94BZAykjJs= Subject key identifier: A8:40:28:44:45:51:34:2A:D6:AB:39:46:38:9F:1A:21:79:BC:A2:FB Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 3D Signing time: Wed 05 Nov 2025 07:41:43 +0000 Manifest this update: Wed 05 Nov 2025 07:41:43 +0000 Manifest next update: Wed 12 Nov 2025 07:41:43 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: X3l8C237RZ0xlzSc1KMCrICGMpHQ/JNo/iZri+YMvns=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Nov 5 07:41:43 2025 GMT Not After : Nov 12 07:41:43 2025 GMT Subject: CN=690affb7-4f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:6e:0d:a5:1a:d8:22:59:94:01:06:25:a0: f9:1d:79:84:10:02:ce:d0:94:1f:e6:03:bd:b3:e1: 0e:fe:67:33:4a:7e:a1:e4:b9:1b:a7:ea:92:cf:b4: 4f:d5:7b:20:0d:78:4e:56:a7:d8:6c:3c:8c:d5:b2: 62:86:11:19:d3:4f:01:80:23:e7:76:7a:6e:77:4c: 56:8f:5e:24:08:c9:d7:08:50:a8:8f:52:c9:05:95: 10:c3:ee:1e:37:f1:d9:cc:f9:9d:76:49:b4:24:d3: 4e:ad:67:22:fe:40:ec:57:32:d1:a2:cc:a1:89:ce: 3a:3f:ed:47:db:d6:96:7e:6b:4a:5c:72:23:96:9a: b5:d4:0f:76:2e:47:04:7a:4c:39:c8:19:1b:4d:30: dc:2e:65:85:40:34:75:b9:db:1c:8d:31:98:b1:da: f5:94:02:81:96:0b:9f:c7:fa:b8:ac:8e:c1:b9:6b: 1d:39:75:fb:c4:cb:8e:dd:6c:ce:93:b5:4f:73:dd: 69:04:75:16:84:cf:43:2d:f1:8c:91:a8:31:2d:a8: 36:a8:d0:97:f0:e4:53:7d:87:88:4a:70:73:e8:84: d4:6d:b1:8d:7a:d0:27:42:b4:e9:96:47:38:bf:16: cf:b6:20:b5:7c:b9:e2:9d:9f:1d:ee:06:8f:31:e1: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:40:28:44:45:51:34:2A:D6:AB:39:46:38:9F:1A:21:79:BC:A2:FB X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:47:90:81:7e:9f:d1:30:47:54:ab:91:32:0c:e6:5f:a7:df: fd:a5:33:ce:f0:81:36:6c:a2:25:be:9e:99:67:61:ab:70:cb: 54:89:82:2e:6a:ad:04:64:2c:f2:2c:e9:b0:18:90:2a:e1:54: 80:75:79:f7:43:90:31:c7:76:6d:a4:bf:13:40:7f:88:24:b5: 69:1c:24:a9:3f:bc:fc:c4:ce:b0:bd:36:a6:a1:76:d1:fa:65: d9:9f:ca:e2:b1:48:d0:03:d2:58:e5:ef:20:ae:ca:79:fa:ad: 45:7f:5c:fd:4c:f0:50:9f:69:cc:20:56:f9:b4:2f:0d:22:90: ea:3f:79:3a:29:02:de:68:0e:55:8d:cf:1f:f8:21:33:ce:c3: 05:ff:29:ae:08:c4:87:75:ae:8f:47:1c:e9:1f:89:5f:8e:27: 3e:cf:21:7f:3b:f2:56:6a:e2:a0:9e:a8:f8:74:92:30:e8:a2: 87:6c:69:f6:c4:70:d3:9c:e8:3f:ad:7c:98:8c:b1:73:05:71: 08:00:03:e7:2a:4a:1f:4f:a6:ee:7a:e7:cf:55:65:ce:a0:89: 60:da:25:04:3b:84:f0:55:5b:2e:f1:81:e9:ec:04:24:a7:cd: b9:5e:b2:8d:15:4a:d5:4d:dc:0d:44:61:7d:ee:dc:fd:bb:db: e3:6a:2c:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTExMDUwNzQxNDNaFw0yNTExMTIwNzQxNDNaMBgxFjAUBgNV BAMTDTY5MGFmZmI3LTRmMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Km4NpRrYIlmUAQYloPkdeYQQAs7QlB/mA72z4Q7+ZzNKfqHkuRun6pLPtE/V eyANeE5Wp9hsPIzVsmKGERnTTwGAI+d2em53TFaPXiQIydcIUKiPUskFlRDD7h43 8dnM+Z12SbQk006tZyL+QOxXMtGizKGJzjo/7Ufb1pZ+a0pcciOWmrXUD3YuRwR6 TDnIGRtNMNwuZYVANHW52xyNMZix2vWUAoGWC5/H+risjsG5ax05dfvEy47dbM6T tU9z3WkEdRaEz0Mt8YyRqDEtqDao0Jfw5FN9h4hKcHPohNRtsY160CdCtOmWRzi/ Fs+2ILV8ueKdnx3uBo8x4Sm1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqEAoREVR NCrWqzlGOJ8aIXm8ovswHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJHkIF+n9EwR1SrkTIM5l+n3/2lM87wgTZsoiW+nplnYatwy1SJgi5q rQRkLPIs6bAYkCrhVIB1efdDkDHHdm2kvxNAf4gktWkcJKk/vPzEzrC9NqahdtH6 ZdmfyuKxSNAD0ljl7yCuynn6rUV/XP1M8FCfacwgVvm0Lw0ikOo/eTopAt5oDlWN zx/4ITPOwwX/Ka4IxId1ro9HHOkfiV+OJz7PIX878lZq4qCeqPh0kjDooodsafbE cNOc6D+tfJiMsXMFcQgAA+cqSh9Ppu56589VZc6giWDaJQQ7hPBVWy7xgensBCSn zbleso0VStVN3A1EYX3u3P272+NqLPo= -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:04 2025 by rpki-client