$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: XPgoN3GpUl5SOx4j+0k665SUcXXHTLOUANFsXjoj0cQ= Subject key identifier: 16:40:1A:43:54:BF:FF:D4:15:CB:63:7E:BC:F3:29:98:1F:62:26:D0 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: E8 Signing time: Wed 05 Nov 2025 05:34:56 +0000 Manifest this update: Wed 05 Nov 2025 05:34:55 +0000 Manifest next update: Wed 12 Nov 2025 05:34:55 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: zE2CwZeXaV/R54M0B9R4qhah/cUTXG10TLkzHhIF7zs=) 2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: WZcZmgFPpXfORxvGM494Pr8Ava0fj6MltmQBEC1MNTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Nov 5 05:34:55 2025 GMT Not After : Nov 12 05:34:55 2025 GMT Subject: CN=690ae1ff-8709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:db:f0:5f:c8:37:dd:34:71:0e:97:24:9c: a9:f4:08:89:a8:62:c5:0f:cd:01:d5:b9:34:1b:81: 1a:a1:32:5d:9d:c2:95:f8:f5:c4:03:83:47:ce:5f: 2c:cd:af:93:7c:69:ac:c4:e1:ae:01:19:0f:97:51: 96:49:7d:7b:54:22:d0:7c:4d:dd:51:8c:8e:f4:59: 6b:80:df:a9:bf:bf:8e:7a:11:cf:31:0e:6e:5f:51: 18:43:dc:73:50:53:91:0c:4c:d9:ef:7e:9d:ee:70: 29:18:e6:83:7f:bc:03:9e:75:c8:53:47:3d:9f:c0: f1:4b:69:77:25:59:8f:af:8b:f1:e6:92:58:f3:ea: b7:65:14:23:60:1a:d5:ef:67:31:d2:e1:f0:65:d8: 86:a8:bf:95:7d:e2:e6:8e:ce:ad:67:b0:48:81:3f: eb:e7:77:f0:2a:79:9a:7f:22:7d:52:0b:14:29:c6: 3c:62:b0:95:c1:08:58:6a:a0:be:56:95:08:b7:f4: 72:92:e0:90:97:37:d3:2d:b0:b7:e1:a6:aa:85:49: 9c:24:4b:cd:d6:73:a1:34:e6:13:b2:0e:84:95:23: 06:b0:20:e7:99:7a:18:bd:1c:77:56:ef:d9:86:6d: 10:e5:b7:11:cf:da:7f:4f:d6:d1:57:aa:13:4e:b1: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:1A:43:54:BF:FF:D4:15:CB:63:7E:BC:F3:29:98:1F:62:26:D0 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:06:78:c1:77:47:0b:15:36:74:29:f1:63:fd:cd:77:ff:f6: c9:02:28:b7:1c:b9:39:bb:2f:ac:61:7b:00:78:88:64:2b:b1: 04:dc:45:b8:d4:09:31:6e:d4:e5:a1:47:ac:f8:51:0f:6f:37: b3:75:56:a2:93:04:fb:a0:d9:85:a4:2b:9d:32:44:f7:46:34: db:22:40:bb:3b:e6:0f:8b:e3:83:55:de:20:a2:31:aa:00:6b: c2:58:02:30:ce:e8:36:5f:3a:9a:3d:53:42:7d:73:f1:e4:2d: 91:82:7d:c6:58:9e:b1:74:5a:6c:9e:5d:5a:0a:8d:9c:14:1a: 88:8c:ac:d4:8d:6b:23:90:f8:22:cd:32:9a:23:94:aa:d8:2f: 46:cd:fb:8f:f3:f9:7b:46:96:9b:cf:8a:76:df:38:c2:72:96: c3:f8:a6:ee:34:c2:99:4d:3c:4a:94:5b:a6:0c:3b:2b:98:0f: 11:e3:db:26:15:4a:bc:be:df:01:df:8c:dd:10:fd:5e:ff:22: a4:fc:94:16:40:35:fb:7b:a8:71:7b:86:1e:22:af:4d:76:78: 32:0d:d4:05:06:be:ce:15:7d:39:83:a9:29:95:9d:08:df:3b: 54:29:37:5d:32:09:db:b2:27:c2:23:72:27:b7:9b:74:b7:99: 5b:ad:5b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjUxMTA1MDUzNDU1WhcNMjUxMTEyMDUzNDU1WjAYMRYwFAYD VQQDEw02OTBhZTFmZi04NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshrb8F/IN900cQ6XJJyp9AiJqGLFD80B1bk0G4EaoTJdncKV+PXEA4NHzl8s za+TfGmsxOGuARkPl1GWSX17VCLQfE3dUYyO9FlrgN+pv7+OehHPMQ5uX1EYQ9xz UFORDEzZ736d7nApGOaDf7wDnnXIU0c9n8DxS2l3JVmPr4vx5pJY8+q3ZRQjYBrV 72cx0uHwZdiGqL+VfeLmjs6tZ7BIgT/r53fwKnmafyJ9UgsUKcY8YrCVwQhYaqC+ VpUIt/RykuCQlzfTLbC34aaqhUmcJEvN1nOhNOYTsg6ElSMGsCDnmXoYvRx3Vu/Z hm0Q5bcRz9p/T9bRV6oTTrG6GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZAGkNU v//UFctjfrzzKZgfYibQMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOBnjBd0cLFTZ0KfFj/c13//bJAii3HLk5uy+sYXsAeIhkK7EE3EW4 1AkxbtTloUes+FEPbzezdVaikwT7oNmFpCudMkT3RjTbIkC7O+YPi+ODVd4gojGq AGvCWAIwzug2XzqaPVNCfXPx5C2Rgn3GWJ6xdFpsnl1aCo2cFBqIjKzUjWsjkPgi zTKaI5Sq2C9GzfuP8/l7Rpabz4p23zjCcpbD+KbuNMKZTTxKlFumDDsrmA8R49sm FUq8vt8B34zdEP1e/yKk/JQWQDX7e6hxe4YeIq9NdngyDdQFBr7OFX05g6kplZ0I 3ztUKTddMgnbsifCI3Int5t0t5lbrVs3 -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:51 2025 by rpki-client