$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: 2I90QeWeYriki+VZQplcjC6plNuVAj23O3hImwS0FF4= Subject key identifier: 76:08:C5:A2:74:D0:CD:3A:31:E8:6A:DD:28:A3:12:53:46:C1:67:D1 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 0904 Signing time: Sun 02 Nov 2025 20:16:50 +0000 Manifest this update: Sun 02 Nov 2025 20:16:50 +0000 Manifest next update: Sun 09 Nov 2025 20:16:50 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: Hr4WELnHr2hCCJjwA4eiJHO+HhQ59xIAaJXm0G4W/zc=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: gGLM1HQ1iS7fd20ceMBraz36fZdGiyHwpUVermAbtmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Nov 2 20:16:50 2025 GMT Not After : Nov 9 20:16:50 2025 GMT Subject: CN=6907bc32-68b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:28:2b:4d:dc:24:25:1e:09:11:9a:58:54: 7f:36:aa:03:b9:0d:88:ae:80:38:e5:a0:c9:fb:19: 43:6b:61:fb:76:f7:60:ed:06:94:34:e0:4e:dc:b9: e1:89:d3:89:e1:5b:a2:0b:2a:6b:0c:ef:fc:72:4b: 12:5d:88:52:56:48:84:c5:e1:1c:f7:d6:76:df:7d: 80:12:ca:06:76:da:43:c8:a1:d5:a3:8b:27:8e:3d: 27:6a:4f:81:e6:fd:b9:1f:1d:b4:28:da:f7:45:8b: 90:af:23:91:d5:32:95:d3:2e:ef:84:66:89:7f:3b: a9:24:c0:8a:0b:7d:23:11:bc:f1:33:97:8a:a2:d6: 63:25:00:01:e6:b9:4b:b7:a8:a4:b8:51:3b:1c:c0: 8b:54:b0:10:8c:fb:3c:d3:a3:a9:ee:95:2f:06:68: b3:5d:2a:57:40:d1:32:e7:32:83:24:42:24:56:53: aa:64:1d:2f:28:86:0e:27:34:0d:84:fd:03:dc:b7: c4:3f:16:4d:d7:30:c2:cc:17:c9:5c:b4:1e:e6:92: 59:2b:e6:7b:a3:7c:10:f6:b3:00:08:83:a0:7d:ed: 29:68:d3:d8:f0:63:25:b8:68:88:eb:b5:7d:32:9a: a2:9f:9d:ea:db:af:95:ec:c0:ba:0d:4e:f7:50:aa: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:C5:A2:74:D0:CD:3A:31:E8:6A:DD:28:A3:12:53:46:C1:67:D1 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3e:08:cd:6e:a8:a2:ce:32:1f:df:e8:b6:75:82:d5:6f:9a: 5e:75:b9:c0:71:48:29:00:68:06:0a:be:9b:26:7a:7c:4a:99: 97:50:c0:1b:61:70:7b:0c:26:d1:ea:7c:dc:c5:05:2e:cb:d7: aa:7f:ce:3d:89:ae:13:42:7d:59:2e:d0:32:a9:0a:38:f2:57: 05:f4:aa:a8:41:90:79:46:13:82:db:15:20:55:8e:d0:e2:81: a6:10:30:a3:03:32:bf:9e:e9:29:45:58:4b:d6:97:e0:72:bb: 3b:1d:61:59:ab:2e:b9:8c:79:f9:1f:83:32:8e:23:01:36:42: ac:51:e2:52:79:50:9c:0e:81:67:cc:66:36:56:5d:ff:f4:e7: e7:0c:2b:43:c0:34:cc:e9:fc:a8:28:38:1f:85:b9:dc:8b:e0: f0:96:cd:a3:e5:17:57:28:ce:30:b6:4d:98:6a:00:5b:08:13: 65:71:b6:58:bd:31:da:af:99:63:12:3b:af:7d:cf:86:1f:bf: bd:81:be:a3:a1:af:dc:e2:3f:fa:8e:2b:3f:2a:ba:9f:61:72: 21:7c:62:1e:e8:4f:bb:fe:9e:69:37:ca:26:46:60:6f:79:f0: 01:40:5c:61:d7:43:15:df:95:96:76:8b:6d:64:d5:cf:c1:65: 3f:05:36:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUxMTAyMjAxNjUwWhcNMjUxMTA5MjAxNjUwWjAYMRYwFAYD VQQDEw02OTA3YmMzMi02OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGgoK03cJCUeCRGaWFR/NqoDuQ2IroA45aDJ+xlDa2H7dvdg7QaUNOBO3Lnh idOJ4VuiCyprDO/8cksSXYhSVkiExeEc99Z2332AEsoGdtpDyKHVo4snjj0nak+B 5v25Hx20KNr3RYuQryOR1TKV0y7vhGaJfzupJMCKC30jEbzxM5eKotZjJQAB5rlL t6ikuFE7HMCLVLAQjPs806Op7pUvBmizXSpXQNEy5zKDJEIkVlOqZB0vKIYOJzQN hP0D3LfEPxZN1zDCzBfJXLQe5pJZK+Z7o3wQ9rMACIOgfe0paNPY8GMluGiI67V9 Mpqin53q26+V7MC6DU73UKqGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYIxaJ0 0M06Mehq3SijElNGwWfRMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3PgjNbqiizjIf3+i2dYLVb5pedbnAcUgpAGgGCr6bJnp8SpmXUMAb YXB7DCbR6nzcxQUuy9eqf849ia4TQn1ZLtAyqQo48lcF9KqoQZB5RhOC2xUgVY7Q 4oGmEDCjAzK/nukpRVhL1pfgcrs7HWFZqy65jHn5H4MyjiMBNkKsUeJSeVCcDoFn zGY2Vl3/9OfnDCtDwDTM6fyoKDgfhbnci+Dwls2j5RdXKM4wtk2YagBbCBNlcbZY vTHar5ljEjuvfc+GH7+9gb6joa/c4j/6jis/KrqfYXIhfGIe6E+7/p5pN8omRmBv efABQFxh10MV35WWdottZNXPwWU/BTYb -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:54 2025 by rpki-client