$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: 0ZkOo9Tied4mL20mHVSTNm8RTDpUmJFvEJhtLs47Evs= Subject key identifier: 8F:A4:FF:C2:61:3B:DB:56:BB:2F:54:A8:7E:D9:7D:F7:AA:4A:7F:E1 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0CA8 Signing time: Sun 02 Nov 2025 18:14:35 +0000 Manifest this update: Sun 02 Nov 2025 18:14:34 +0000 Manifest next update: Sun 09 Nov 2025 18:14:34 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: 1fkXG69NeGokxO44psjF98ZWxneGR2S2Nt9oinI/qGU=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: 9FmnWb9pui6Pv8KaY3QdF38c9SeSZeT0GfsxD7+8mfg=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: bcKs3JCB0Pnfj/bjvQqBTGxWS9Rxr52rn9mWhFguD3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Nov 2 18:14:34 2025 GMT Not After : Nov 9 18:14:34 2025 GMT Subject: CN=69079f8b-f138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:68:60:0e:43:74:e7:c9:42:eb:59:24:70:99: 9e:19:a3:b6:92:d3:8c:ea:b3:df:08:d9:7c:98:cd: 6e:8c:51:81:df:c9:e8:a5:d5:d8:5c:67:d0:8d:28: f0:3e:c9:58:b8:fa:40:85:64:f0:71:76:e8:02:6e: e0:09:b5:93:a8:67:1d:71:0b:13:e1:6e:77:bf:bd: 8d:78:2d:de:84:4d:44:b6:55:cf:a2:e9:b5:4a:d6: a9:48:e1:b7:c0:30:35:06:e3:b5:36:6d:e4:8d:5e: 1e:c9:ef:0a:51:11:23:8a:e0:a3:e3:1c:22:25:6e: d2:bf:16:e8:c7:e0:73:e7:4a:4d:a2:12:26:4a:73: e6:18:05:3e:91:8e:fe:6f:03:40:b7:82:32:f9:c8: 99:d4:72:67:7c:cb:f9:4e:35:b2:69:a1:7c:b1:59: 0b:13:01:13:f2:38:1a:0f:a5:cc:e6:9b:c5:3f:6c: bb:e0:91:46:8d:9c:d7:60:7e:c2:f7:a7:da:9f:35: 74:ac:03:43:29:a5:a9:bc:b2:c3:51:43:90:01:e9: f7:c6:1b:89:f8:bc:35:82:5e:e0:b3:76:cf:26:b3: 4f:88:30:88:7f:75:05:f8:a6:ae:9a:a3:ce:b1:13: d1:55:d2:78:25:94:d5:db:fa:4c:2d:83:f7:9a:b7: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:FF:C2:61:3B:DB:56:BB:2F:54:A8:7E:D9:7D:F7:AA:4A:7F:E1 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e1:72:0f:29:66:98:2c:91:cd:19:77:86:b1:75:45:43:9d: d3:d4:a1:5b:59:67:3a:6f:45:6c:3e:ba:48:2d:e0:2d:b1:31: a4:b5:2b:cd:36:e9:d2:f9:2c:42:00:e7:37:ee:f9:4c:29:50: b9:b0:9a:e2:39:2c:65:ae:76:0e:61:72:ab:4c:a8:b2:93:89: 23:8c:37:dc:0c:c2:7a:83:d2:10:87:2d:37:7d:8e:ee:4c:c8: 66:58:05:e0:85:9b:2d:80:cc:ee:22:2d:2f:e9:84:8e:c7:03: d1:3f:25:90:3c:b9:8f:fb:1e:de:52:6f:b6:9c:51:f5:6d:7c: af:01:d2:06:ed:9e:af:b6:dd:0d:6e:7f:f9:b3:4e:c3:46:2b: b4:c9:c8:d3:79:a7:a7:46:ec:4b:f2:45:19:5a:4d:eb:ea:a6: f2:97:be:61:f3:ff:6c:e9:1d:54:9b:f8:07:82:e8:17:c6:59: 78:ed:f7:62:b0:ba:0b:2a:9d:7e:bc:57:48:e4:c2:af:88:82: 24:3c:f0:91:16:29:22:11:2f:15:94:a3:0c:39:f9:0d:24:f0: 2d:cb:b3:75:d1:35:b3:e4:d8:3d:33:34:d2:ad:fe:22:b3:58: c2:74:33:69:45:52:ee:db:14:f6:20:24:3a:66:86:fc:7d:02: 21:b7:7c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUxMTAyMTgxNDM0WhcNMjUxMTA5MTgxNDM0WjAYMRYwFAYD VQQDEw02OTA3OWY4Yi1mMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GhgDkN058lC61kkcJmeGaO2ktOM6rPfCNl8mM1ujFGB38nopdXYXGfQjSjw PslYuPpAhWTwcXboAm7gCbWTqGcdcQsT4W53v72NeC3ehE1EtlXPoum1StapSOG3 wDA1BuO1Nm3kjV4eye8KUREjiuCj4xwiJW7Svxbox+Bz50pNohImSnPmGAU+kY7+ bwNAt4Iy+ciZ1HJnfMv5TjWyaaF8sVkLEwET8jgaD6XM5pvFP2y74JFGjZzXYH7C 96fanzV0rANDKaWpvLLDUUOQAen3xhuJ+Lw1gl7gs3bPJrNPiDCIf3UF+KaumqPO sRPRVdJ4JZTV2/pMLYP3mrcDdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+k/8Jh O9tWuy9UqH7ZffeqSn/hMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb4XIPKWaYLJHNGXeGsXVFQ53T1KFbWWc6b0VsPrpILeAtsTGktSvN NunS+SxCAOc37vlMKVC5sJriOSxlrnYOYXKrTKiyk4kjjDfcDMJ6g9IQhy03fY7u TMhmWAXghZstgMzuIi0v6YSOxwPRPyWQPLmP+x7eUm+2nFH1bXyvAdIG7Z6vtt0N bn/5s07DRiu0ycjTeaenRuxL8kUZWk3r6qbyl75h8/9s6R1Um/gHgugXxll47fdi sLoLKp1+vFdI5MKviIIkPPCRFikiES8VlKMMOfkNJPAty7N10TWz5Ng9MzTSrf4i s1jCdDNpRVLu2xT2ICQ6Zob8fQIht3xo -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:06 2025 by rpki-client