$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: 0oKo8eeyrl45+tBU871VY7SIlNXkPzaP9mrIlal7NGE= Subject key identifier: 29:26:20:DE:29:D5:5D:7C:BD:CD:06:95:37:57:E6:62:71:60:7D:84 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0CD2 Signing time: Sun 02 Nov 2025 18:11:47 +0000 Manifest this update: Sun 02 Nov 2025 18:11:46 +0000 Manifest next update: Sun 09 Nov 2025 18:11:46 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: TWvj6Fm4FvPpVkKRiNFNLTLlBTSwXICv9O3R3fk2/i4=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Nov 2 18:11:46 2025 GMT Not After : Nov 9 18:11:46 2025 GMT Subject: CN=69079ee2-76ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:2e:0e:31:24:bb:95:02:31:52:ad:50:04: 4f:74:88:a4:70:d6:ae:e7:fd:5f:80:4d:53:b2:aa: cc:5e:2f:15:37:2e:18:be:a0:6a:6d:15:4c:cc:a1: 43:af:8b:40:82:50:3b:37:3b:96:5b:45:21:3b:fb: 03:37:a1:65:f9:a1:0c:00:9c:c5:e0:06:9e:84:32: 7a:c7:77:cf:a2:23:d6:0d:52:da:63:29:ce:5c:45: ee:ff:44:6a:89:25:c9:96:47:45:04:34:93:72:c0: 97:52:3b:b5:5c:44:5d:ed:d9:3a:95:a5:01:ec:25: 96:bb:9a:86:21:27:27:03:e0:a1:5f:15:28:b1:4b: 08:04:e8:36:e8:8a:78:b5:44:4d:3f:22:fd:7f:b1: a7:8e:6d:39:42:4c:a3:2b:1d:20:f2:96:fd:30:f9: e5:6c:36:35:e1:4f:30:0b:40:f3:c9:b5:17:97:72: e8:15:d7:a8:dc:11:76:21:20:c2:35:7e:cb:e0:13: 4a:65:6c:20:35:35:cb:66:66:3a:0e:6e:bc:93:eb: 29:76:42:39:8d:36:5d:7f:28:f0:97:cd:ca:b1:01: eb:f6:a3:8c:d8:f0:c9:20:ff:42:a7:ea:2f:c1:92: 7f:d5:b7:b9:6c:7e:16:2d:1a:ad:94:47:2a:3a:b3: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:20:DE:29:D5:5D:7C:BD:CD:06:95:37:57:E6:62:71:60:7D:84 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5c:91:eb:79:e1:9a:58:89:aa:05:4d:5f:3e:e4:18:96:a1: d5:d9:fb:26:d6:32:1e:69:a4:dd:15:fa:4f:c2:09:a0:82:2e: ce:d0:ae:3a:a9:ee:d2:ab:ba:f9:75:57:82:2e:f6:46:d7:d4: 35:12:42:c6:03:e3:7d:1b:ed:ab:c1:71:4c:30:3f:a9:ea:04: 32:de:92:24:fd:79:e3:77:3a:a9:be:b7:bd:7d:a2:14:86:91: 82:bd:d4:72:6e:bd:ac:d4:49:1e:9e:b2:4e:1b:ec:87:2f:f7: fc:40:65:a3:c1:1a:93:aa:29:7f:58:cd:f8:6d:b9:97:aa:68: a9:9d:e8:19:ea:c9:2f:9c:6b:07:ed:cb:6d:d5:ee:7d:5b:3d: d3:2c:0d:95:c3:29:24:a6:e2:ae:28:c8:f4:4f:a7:45:47:4c: 51:28:86:6d:60:de:da:c4:a9:b5:63:a6:ae:18:9e:cf:01:d6: ce:13:d3:36:e0:90:d2:13:fb:c3:9d:11:94:a6:aa:27:60:7e: 1c:03:d9:8a:76:0c:4f:93:bc:ad:d2:bf:e1:95:48:98:bd:3f: 12:98:b9:1a:1a:19:dd:ce:a2:18:6b:63:7b:a3:19:1d:31:8b: 29:55:92:76:95:f9:64:5d:48:48:44:9f:ac:1b:8b:f4:ee:3d: c3:e3:69:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUxMTAyMTgxMTQ2WhcNMjUxMTA5MTgxMTQ2WjAYMRYwFAYD VQQDEw02OTA3OWVlMi03NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QkuDjEku5UCMVKtUARPdIikcNau5/1fgE1TsqrMXi8VNy4YvqBqbRVMzKFD r4tAglA7NzuWW0UhO/sDN6Fl+aEMAJzF4AaehDJ6x3fPoiPWDVLaYynOXEXu/0Rq iSXJlkdFBDSTcsCXUju1XERd7dk6laUB7CWWu5qGIScnA+ChXxUosUsIBOg26Ip4 tURNPyL9f7Gnjm05QkyjKx0g8pb9MPnlbDY14U8wC0DzybUXl3LoFdeo3BF2ISDC NX7L4BNKZWwgNTXLZmY6Dm68k+spdkI5jTZdfyjwl83KsQHr9qOM2PDJIP9Cp+ov wZJ/1be5bH4WLRqtlEcqOrO7tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkmIN4p 1V18vc0GlTdX5mJxYH2EMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfXJHreeGaWImqBU1fPuQYlqHV2fsm1jIeaaTdFfpPwgmggi7O0K46 qe7Sq7r5dVeCLvZG19Q1EkLGA+N9G+2rwXFMMD+p6gQy3pIk/Xnjdzqpvre9faIU hpGCvdRybr2s1EkenrJOG+yHL/f8QGWjwRqTqil/WM34bbmXqmipnegZ6skvnGsH 7ctt1e59Wz3TLA2VwykkpuKuKMj0T6dFR0xRKIZtYN7axKm1Y6auGJ7PAdbOE9M2 4JDSE/vDnRGUpqonYH4cA9mKdgxPk7yt0r/hlUiYvT8SmLkaGhndzqIYa2N7oxkd MYspVZJ2lflkXUhIRJ+sG4v07j3D42lR -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:54 2025 by rpki-client