$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: DJr4C2/dRUwSPv/m+IDLRKnPJhPJqB9H5rXIV0TaNyM= Subject key identifier: 6C:75:68:06:9D:B9:85:8E:06:11:DB:AD:FA:FB:B8:C3:A6:59:48:7B Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: AC Signing time: Wed 05 Nov 2025 06:25:31 +0000 Manifest this update: Wed 05 Nov 2025 06:25:30 +0000 Manifest next update: Wed 12 Nov 2025 06:25:30 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: VNW6/uFvLb1sz5bSLP3UIqGzCe843MZ6cFfHbrGfEx0=) 2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: WZhBMu7Q96yyexU6/LjhPKv/Y/5r7dFEd8P6eg0tmKI=) 3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: EaTt3iw3MzXPWI97iilJv7Qv6QDIZy/BFYmUeT7y7BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Nov 5 06:25:30 2025 GMT Not After : Nov 12 06:25:30 2025 GMT Subject: CN=690aedda-5c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:6d:a2:72:9d:72:f7:c4:2f:ee:24:21:0a: b9:b4:ed:86:bb:c1:da:55:3f:dc:41:84:5c:79:47: 9c:fc:d2:60:6d:86:f4:f8:23:eb:30:bd:c2:fb:24: 22:fa:1f:5d:76:41:99:d6:0c:88:ac:7d:8e:ad:d9: ac:d6:d9:ba:ec:08:46:0d:29:dc:d9:8b:b3:3f:bc: 88:48:fd:0d:21:c6:d1:18:3e:95:23:16:df:32:4d: ce:12:7a:c8:ac:0f:5b:f8:f2:21:53:f5:c9:3d:f8: 26:29:0f:7b:ce:ae:6e:47:f2:17:8c:67:fc:ed:92: a1:9d:be:a3:c6:a7:45:75:39:61:9d:bb:6b:cb:47: a5:3c:2c:b0:54:37:96:f8:53:4c:79:94:98:f6:cc: 30:38:b6:dd:45:25:fb:35:a9:6f:10:b3:7a:fb:14: fd:cf:7d:70:5e:c0:c7:99:91:03:57:a0:d3:b5:31: 4a:db:95:86:9d:2b:b4:25:48:1b:7c:71:29:41:ae: 1a:fb:13:2e:fe:89:e2:8e:65:ad:50:dd:e2:08:3b: 0e:1d:3f:7b:e6:69:fe:59:ea:3e:1d:c7:a4:19:c3: a0:86:ac:d7:2a:66:db:c8:a1:cf:6b:ec:20:80:f2: 6e:d3:e4:d3:60:06:39:1d:52:06:a7:5e:2d:cd:4b: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:75:68:06:9D:B9:85:8E:06:11:DB:AD:FA:FB:B8:C3:A6:59:48:7B X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a3:89:b4:0e:74:ff:30:6d:c3:f5:9f:ee:75:8f:f5:37:ad: 2d:31:a8:a4:ce:6f:10:9c:11:28:29:db:b5:1c:b7:bb:a9:0a: b5:6e:33:5c:30:7e:f0:af:7f:ce:5a:e5:a4:0e:ee:b2:df:f8: 35:e1:1d:6c:37:19:9b:6e:d4:c1:fb:d0:58:2b:d7:d2:d5:e9: 3f:25:03:46:20:f9:e4:96:d6:2c:8c:a1:d9:d2:87:2f:a9:5d: 83:3d:8a:99:93:b3:e6:56:bb:ad:f7:64:36:9e:1d:e8:43:be: fc:02:4e:ad:b5:8a:c1:5d:aa:12:2e:36:1f:21:2f:9f:9b:e5: df:5e:17:15:c8:af:58:6b:df:4f:3c:cb:db:6b:0b:d9:1f:56: 6d:9c:17:d7:0e:45:66:5e:97:25:d9:a3:24:b4:d9:00:5b:62: 47:0c:c6:94:cd:00:f4:c7:0d:bd:9e:c1:14:e6:e5:fa:37:50: 93:f7:f6:d7:e8:73:01:43:7e:1c:a9:62:ba:eb:c4:3c:41:40: 44:ef:4c:d8:ce:05:bd:7e:85:40:c8:14:a3:d4:a9:09:68:35: 69:ab:5f:32:8a:14:c5:a6:ee:51:1b:e1:73:26:a9:41:ba:1d: ae:50:30:3a:69:f7:c1:ad:8f:b9:3c:a2:8e:12:32:c1:8d:b5: ab:e6:df:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMEExMTAvBgNVBAUTKDY3MEUzQTA2NzIxNjg0QUI0NzNCQkJFNUNDMjJDRjA1 RDAyNEJGNkQwHhcNMjUxMTA1MDYyNTMwWhcNMjUxMTEyMDYyNTMwWjAYMRYwFAYD VQQDEw02OTBhZWRkYS01YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqJtonKdcvfEL+4kIQq5tO2Gu8HaVT/cQYRceUec/NJgbYb0+CPrML3C+yQi +h9ddkGZ1gyIrH2Ordms1tm67AhGDSnc2YuzP7yISP0NIcbRGD6VIxbfMk3OEnrI rA9b+PIhU/XJPfgmKQ97zq5uR/IXjGf87ZKhnb6jxqdFdTlhnbtry0elPCywVDeW +FNMeZSY9swwOLbdRSX7NalvELN6+xT9z31wXsDHmZEDV6DTtTFK25WGnSu0JUgb fHEpQa4a+xMu/onijmWtUN3iCDsOHT975mn+Weo+HcekGcOghqzXKmbbyKHPa+wg gPJu0+TTYAY5HVIGp14tzUsUMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx1aAad uYWOBhHbrfr7uMOmWUh7MB8GA1UdIwQYMBaAFGcOOgZyFoSrRzu75cwizwXQJL9t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9EQUY2RDczNkI3 MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hLdEhPN3ZsekNMUEJkQWt2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3YyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUwQS9EQUY2RDczNkI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hL dEhPN3ZsekNMUEJkQWt2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWo4m0DnT/MG3D9Z/udY/1N60tMaikzm8QnBEoKdu1HLe7qQq1bjNc MH7wr3/OWuWkDu6y3/g14R1sNxmbbtTB+9BYK9fS1ek/JQNGIPnkltYsjKHZ0ocv qV2DPYqZk7PmVrut92Q2nh3oQ778Ak6ttYrBXaoSLjYfIS+fm+XfXhcVyK9Ya99P PMvbawvZH1ZtnBfXDkVmXpcl2aMktNkAW2JHDMaUzQD0xw29nsEU5uX6N1CT9/bX 6HMBQ34cqWK668Q8QUBE70zYzgW9foVAyBSj1KkJaDVpq18yihTFpu5RG+FzJqlB uh2uUDA6affBrY+5PKKOEjLBjbWr5t+c -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:42 2025 by rpki-client