$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: MvKjTzz5oDZWf6FuJLlRc5gPsFITxsDvo52j2/aYXSU= Subject key identifier: 6C:3C:80:4A:6A:D5:51:AC:DF:17:7C:CD:3A:03:DE:38:84:6D:D1:08 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 08E0 Signing time: Tue 04 Nov 2025 20:31:15 +0000 Manifest this update: Tue 04 Nov 2025 20:31:14 +0000 Manifest next update: Tue 11 Nov 2025 20:31:14 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: H1FT/WNrHqcThKwE2KYnJ3XK+A+3orY7S9fYw9Mqzbo=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: v0qe3Is5q3yvzdsZV9nmpFuwmP+tm+rwCc0Ad6aEiXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Nov 4 20:31:14 2025 GMT Not After : Nov 11 20:31:14 2025 GMT Subject: CN=690a6293-c5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:32:2c:6c:0a:61:39:71:51:8f:ee:30:74: 87:cb:44:29:9d:79:0c:79:60:5d:de:c6:b6:e7:4f: a3:bd:80:44:54:a2:94:ff:12:3f:b7:cc:d5:52:79: d5:c4:72:e4:61:65:f5:e1:cf:a9:0c:06:15:03:b9: db:bb:68:fd:49:72:ba:83:67:f8:0f:69:09:68:c6: ef:16:b6:d5:20:58:d6:4c:c5:d9:c9:54:df:90:48: c4:5c:d6:f7:57:8d:1f:16:92:90:0c:bf:c0:f3:ad: b3:cc:41:12:ca:3c:b7:41:90:90:b0:b1:23:25:6b: 28:01:f2:c6:51:61:f6:da:14:3a:bf:ea:f2:98:b5: 8c:a4:38:8c:12:8c:1e:31:eb:46:41:4e:db:12:bd: 95:a3:38:fa:da:58:db:27:20:e2:c6:77:59:02:35: 18:f8:be:34:94:5e:9d:56:fe:3c:db:d3:f6:f7:ef: 13:4b:db:cb:c5:a4:00:c3:8a:1f:14:93:bd:bc:73: af:0b:3d:9e:a2:40:8f:70:67:7a:9f:b5:6e:43:4d: 5e:5e:b5:a5:12:d1:dc:78:d4:f0:db:7d:59:e9:05: be:c3:c7:ec:29:d0:d9:2c:b6:2e:14:f9:d0:a6:7b: bd:fa:3c:0d:87:8e:d4:25:6b:2d:01:26:aa:59:19: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3C:80:4A:6A:D5:51:AC:DF:17:7C:CD:3A:03:DE:38:84:6D:D1:08 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:1f:57:2d:8b:3b:11:83:f6:20:02:64:de:07:05:9d:b4:89: 97:f7:de:f5:83:b9:43:43:7a:ec:13:3f:27:f0:6c:6a:9d:c5: 51:1a:ea:79:25:42:3c:08:3d:15:ad:b8:98:df:51:42:76:4b: a2:01:58:6d:48:f4:3b:5e:5e:35:52:d8:99:f4:17:ea:9d:63: f7:0d:68:8e:1b:9b:1c:96:8f:6f:d7:6f:ec:10:a7:9f:dc:0b: c0:30:6e:9c:8e:64:b6:ae:71:07:37:f6:52:b6:c5:c2:c6:82: 7a:d3:b7:f3:f9:77:6a:28:8b:90:8b:f1:73:16:bb:15:fe:a8: 82:09:dd:c3:af:a3:9c:25:40:9e:7a:f3:14:ec:ed:82:d9:df: 28:8f:2b:be:81:d8:0b:ff:99:d9:8e:2b:6e:c0:87:a3:54:87: b8:33:c4:00:79:50:26:7a:fd:a3:9e:df:61:c5:a7:84:23:b1: 53:fb:26:bc:6e:af:f4:5d:a7:ba:7c:91:32:76:17:22:73:46: ee:f9:12:e5:09:58:f2:97:9e:cc:0f:3e:f6:3f:9a:f0:ab:8f: de:f2:3c:ac:c2:1b:e6:4e:e6:8c:3c:b4:6b:83:96:81:ec:9a: 5d:e7:3a:5b:1a:a3:27:87:57:95:23:e5:8c:43:ad:5a:3e:60: 91:94:7f:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNTExMDQyMDMxMTRaFw0yNTExMTEyMDMxMTRaMBgxFjAUBgNV BAMTDTY5MGE2MjkzLWM1ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUEjIsbAphOXFRj+4wdIfLRCmdeQx5YF3exrbnT6O9gERUopT/Ej+3zNVSedXE cuRhZfXhz6kMBhUDudu7aP1JcrqDZ/gPaQloxu8WttUgWNZMxdnJVN+QSMRc1vdX jR8WkpAMv8DzrbPMQRLKPLdBkJCwsSMlaygB8sZRYfbaFDq/6vKYtYykOIwSjB4x 60ZBTtsSvZWjOPraWNsnIOLGd1kCNRj4vjSUXp1W/jzb0/b37xNL28vFpADDih8U k728c68LPZ6iQI9wZ3qftW5DTV5etaUS0dx41PDbfVnpBb7Dx+wp0Nksti4U+dCm e736PA2HjtQlay0BJqpZGfu1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbDyASmrV UazfF3zNOgPeOIRt0QgwHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL4fVy2LOxGD9iACZN4HBZ20iZf33vWDuUNDeuwTPyfwbGqdxVEa6nkl QjwIPRWtuJjfUUJ2S6IBWG1I9DteXjVS2Jn0F+qdY/cNaI4bmxyWj2/Xb+wQp5/c C8AwbpyOZLaucQc39lK2xcLGgnrTt/P5d2ooi5CL8XMWuxX+qIIJ3cOvo5wlQJ56 8xTs7YLZ3yiPK76B2Av/mdmOK27Ah6NUh7gzxAB5UCZ6/aOe32HFp4QjsVP7Jrxu r/Rdp7p8kTJ2FyJzRu75EuUJWPKXnswPPvY/mvCrj97yPKzCG+ZO5ow8tGuDloHs ml3nOlsaoyeHV5Uj5YxDrVo+YJGUf2g= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:43 2025 by rpki-client