$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: /5XuOV3VCxlzorcY8qEIJ5aiDaNLIZ3HWtmLIyQmVgk= Subject key identifier: CE:A0:B7:95:A5:75:FD:8F:C3:5C:B6:74:58:80:A1:A9:AD:C1:DF:39 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: AB Signing time: Wed 05 Nov 2025 06:25:06 +0000 Manifest this update: Wed 05 Nov 2025 06:25:06 +0000 Manifest next update: Wed 12 Nov 2025 06:25:06 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: EAw0X65J32LVE/ZaTkFqn4R6o/99GquztPm4JkhWqdM=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: nae7I/KEW+0m3zT4me5Qc5I3irrgd5B22dbuBfqdUCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Nov 5 06:25:06 2025 GMT Not After : Nov 12 06:25:06 2025 GMT Subject: CN=690aedc2-c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:36:37:92:69:06:77:a3:65:8d:84:02:80: 16:4e:c9:76:2f:24:04:5d:79:ca:3a:4a:ac:e5:16: 56:db:15:5b:36:99:3a:72:f3:1f:08:b9:5e:26:d0: dd:64:60:fe:8b:fb:76:52:e0:12:b0:cb:c6:73:be: 21:e8:85:46:28:fa:3f:6f:e1:f9:62:50:f4:08:15: 1b:3f:6e:f7:f9:23:1c:b4:dc:90:df:64:6a:b2:83: 88:ac:bf:36:dc:6c:66:d3:27:20:b2:73:22:93:9e: bd:05:5a:d0:c6:f8:33:e1:4b:eb:8d:01:1f:c3:0b: ee:83:ce:c7:d0:3a:fa:a3:18:3d:42:e2:1d:d8:8b: 50:f5:ec:5a:e3:51:88:dd:ba:07:f2:ab:be:1d:d4: e2:f3:99:da:02:67:fb:0c:a3:62:ba:34:b9:6e:0b: 7e:63:19:e1:f8:e6:80:b4:72:63:56:cf:a2:9d:10: 16:02:75:af:fc:bc:4b:49:6e:3d:9e:1d:fc:22:d7: a0:fc:99:0d:4c:22:a8:bc:38:d8:44:e7:6a:ca:df: 3c:3a:a6:26:e4:f9:95:72:af:b3:f9:6f:c2:e6:d5: 49:d0:bf:1c:2f:09:b3:c6:b3:9a:7f:4c:5d:d5:47: c6:3b:0b:ea:76:08:47:c8:56:a1:2d:f8:ac:8a:9a: ac:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:B7:95:A5:75:FD:8F:C3:5C:B6:74:58:80:A1:A9:AD:C1:DF:39 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c8:e1:0f:08:c8:8f:82:eb:09:b6:64:33:58:4e:30:c6:e6: ec:2f:c9:09:6c:d0:22:a7:98:34:e9:2f:42:f0:84:6d:1c:a9: 1b:86:b8:c1:33:72:4a:84:ba:c2:59:45:fc:e0:a4:20:78:de: 42:fd:a1:9d:db:11:f0:e2:3b:a4:f7:32:20:37:af:dd:b0:0d: d9:77:68:44:e0:14:59:f7:5a:81:53:c5:34:fc:66:5c:4b:38: 2f:f4:bf:f5:83:e3:3b:d4:76:3b:fd:c0:2e:ed:14:74:83:a4: d2:b2:20:15:91:7d:bf:3d:01:a1:0a:de:6a:0c:ba:07:61:73: da:1b:34:50:b1:f9:06:d9:5b:85:cf:37:09:9b:47:44:a1:6f: 54:4c:df:16:ea:65:d7:1b:2f:9f:cb:fc:bd:f7:9f:0c:14:1b: d1:ac:70:fa:e0:b3:b6:2e:f4:cf:bd:f7:8a:5e:25:be:df:f8: 10:0a:11:57:5d:46:02:55:06:cd:65:5c:c3:5e:56:57:ad:30: 03:3d:57:8d:2a:93:d2:60:71:35:8b:17:63:ce:07:1f:31:7f: 2a:12:e1:36:4b:8b:11:ba:9a:fa:be:52:f3:05:be:fa:41:cd: e7:14:78:b7:32:08:8d:e7:e4:e9:dd:59:80:f5:b7:63:35:36: c2:47:8d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjUxMTA1MDYyNTA2WhcNMjUxMTEyMDYyNTA2WjAYMRYwFAYD VQQDEw02OTBhZWRjMi1jNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sU2N5JpBnejZY2EAoAWTsl2LyQEXXnKOkqs5RZW2xVbNpk6cvMfCLleJtDd ZGD+i/t2UuASsMvGc74h6IVGKPo/b+H5YlD0CBUbP273+SMctNyQ32RqsoOIrL82 3Gxm0ycgsnMik569BVrQxvgz4UvrjQEfwwvug87H0Dr6oxg9QuId2ItQ9exa41GI 3boH8qu+HdTi85naAmf7DKNiujS5bgt+Yxnh+OaAtHJjVs+inRAWAnWv/LxLSW49 nh38Iteg/JkNTCKovDjYROdqyt88OqYm5PmVcq+z+W/C5tVJ0L8cLwmzxrOaf0xd 1UfGOwvqdghHyFahLfisipqsrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6gt5Wl df2Pw1y2dFiAoamtwd85MB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5yOEPCMiPgusJtmQzWE4wxubsL8kJbNAip5g06S9C8IRtHKkbhrjB M3JKhLrCWUX84KQgeN5C/aGd2xHw4juk9zIgN6/dsA3Zd2hE4BRZ91qBU8U0/GZc Szgv9L/1g+M71HY7/cAu7RR0g6TSsiAVkX2/PQGhCt5qDLoHYXPaGzRQsfkG2VuF zzcJm0dEoW9UTN8W6mXXGy+fy/y9958MFBvRrHD64LO2LvTPvfeKXiW+3/gQChFX XUYCVQbNZVzDXlZXrTADPVeNKpPSYHE1ixdjzgcfMX8qEuE2S4sRupr6vlLzBb76 Qc3nFHi3MgiN5+Tp3VmA9bdjNTbCR43d -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:16 2025 by rpki-client