$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: g03K1F99MpKvT8/PS9faKZMbaB3yyby7vr5bgZE33B0= Subject key identifier: 57:86:06:FE:99:3F:92:A4:40:87:D0:29:6A:CC:18:BF:EE:14:5D:6C Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 2C Signing time: Mon 03 Nov 2025 07:40:22 +0000 Manifest this update: Mon 03 Nov 2025 07:40:22 +0000 Manifest next update: Mon 10 Nov 2025 07:40:22 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: ADfAZFt+9rZdxCOcECHBZDbbR6RRv1oQzVxqBhJTmXE=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: 4nT2yihpsRgIGDl3UtBaxjdfAfsQlqp6s85lRI5En8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Nov 3 07:40:22 2025 GMT Not After : Nov 10 07:40:22 2025 GMT Subject: CN=69085c66-2b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bd:d6:ec:8a:20:27:3f:b8:a6:a2:9b:60:0f: 62:86:c0:77:11:75:5b:ee:86:75:7d:02:6f:7b:c2: 43:a0:89:2e:96:52:11:d5:b4:a4:fb:65:ee:87:74: ef:7f:04:9a:ed:67:10:1d:1d:ba:c4:0a:46:08:d5: 57:12:5e:eb:01:8c:b0:bd:5a:ae:89:bf:0f:05:ac: 72:79:09:34:49:57:15:09:db:f9:c0:e2:82:2c:51: 45:ba:c5:2e:e7:cc:32:81:69:04:8e:a4:43:94:14: c8:22:02:b4:5a:0d:45:3b:d1:f5:0e:58:8a:07:cc: 0a:76:6f:fb:04:d2:e4:81:19:92:0c:a3:49:8a:f6: 50:1d:49:b9:ec:23:fb:19:ca:b1:4e:d0:92:83:58: f7:4c:ee:5d:cf:39:b2:0d:bf:0b:0e:67:7f:37:68: 44:55:7e:a0:7e:06:11:4c:e2:e2:73:ea:92:61:61: f1:0c:e0:da:91:25:04:0f:64:32:c4:94:1a:b5:f9: 38:24:15:16:38:b8:0e:8e:84:eb:19:a5:1c:bb:88: e3:50:df:5c:33:0a:03:f6:5b:81:97:fe:ba:d5:b4: bb:d4:7b:63:ce:ef:f9:0f:b7:2f:82:8b:ff:bf:45: 28:c6:1d:b9:07:6a:1c:89:fc:b3:66:7d:0c:b7:82: 21:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:86:06:FE:99:3F:92:A4:40:87:D0:29:6A:CC:18:BF:EE:14:5D:6C X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:b5:2f:95:69:70:d0:5d:27:66:a7:d6:38:fa:2a:f0:de: 82:0e:cc:be:36:ed:de:7f:7f:58:7e:5f:8e:e6:e2:b1:7a:16: c7:2b:58:2c:f5:62:a9:1a:00:7c:b0:72:67:80:79:a6:90:af: da:e2:a2:e1:12:3c:bc:a0:7d:0a:e9:d6:c1:3b:1b:f2:04:b6: d0:3c:c7:38:40:d4:33:3b:f7:69:a0:98:3f:0c:91:dd:9f:9d: a1:25:2e:bd:8f:df:6b:20:94:5a:93:e0:bd:82:c2:8c:54:b8: 7f:00:a9:d8:15:e8:0c:0c:d6:14:46:6f:a3:ce:ea:82:b9:bf: 60:89:6e:95:66:ce:34:af:00:66:ce:97:f3:27:96:b0:4a:9a: a2:e4:35:bf:89:fe:12:c9:8d:b9:db:14:f0:ff:24:f3:e5:cf: bd:a4:eb:7b:ef:62:8e:98:5b:1d:89:bb:d9:70:21:11:c5:f5: cf:d1:42:61:a2:29:9b:3f:84:82:a1:08:86:76:00:8c:08:69: 50:8a:1d:80:dd:87:af:a7:76:54:d9:43:09:c0:ed:73:fb:98: c7:d7:77:b2:95:20:19:4f:29:28:f4:85:fe:9e:0f:8d:cc:3e: e2:b1:f0:9a:81:8c:85:b5:41:e5:f7:38:53:95:cf:1c:94:5e: c6:a7:0b:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoNjc3RjBDRDY0QTVERTJDMUIwMjhFRDAwM0M1Njg3NEI0 OEZBMkUyMTAeFw0yNTExMDMwNzQwMjJaFw0yNTExMTAwNzQwMjJaMBgxFjAUBgNV BAMTDTY5MDg1YzY2LTJiOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2vdbsiiAnP7imoptgD2KGwHcRdVvuhnV9Am97wkOgiS6WUhHVtKT7Ze6HdO9/ BJrtZxAdHbrECkYI1VcSXusBjLC9Wq6Jvw8FrHJ5CTRJVxUJ2/nA4oIsUUW6xS7n zDKBaQSOpEOUFMgiArRaDUU70fUOWIoHzAp2b/sE0uSBGZIMo0mK9lAdSbnsI/sZ yrFO0JKDWPdM7l3PObINvwsOZ383aERVfqB+BhFM4uJz6pJhYfEM4NqRJQQPZDLE lBq1+TgkFRY4uA6OhOsZpRy7iONQ31wzCgP2W4GX/rrVtLvUe2PO7/kPty+Ci/+/ RSjGHbkHahyJ/LNmfQy3giH5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV4YG/pk/ kqRAh9ApaswYv+4UXWwwHwYDVR0jBBgwFoAUZ38M1kpd4sGwKO0APFaHS0j6LiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzU1OEM2MDk4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxp RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWjM4TTFrcGQ0c0d3S08wQVBGYUhTMGo2TGlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzU1OEM2MDk4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNH d0tPMEFQRmFIUzBqNkxpRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAq6tS+VaXDQXSdmp9Y4+irw3oIOzL427d5/f1h+X47m4rF6FscrWCz1 YqkaAHywcmeAeaaQr9riouESPLygfQrp1sE7G/IEttA8xzhA1DM792mgmD8Mkd2f naElLr2P32sglFqT4L2CwoxUuH8AqdgV6AwM1hRGb6PO6oK5v2CJbpVmzjSvAGbO l/MnlrBKmqLkNb+J/hLJjbnbFPD/JPPlz72k63vvYo6YWx2Ju9lwIRHF9c/RQmGi KZs/hIKhCIZ2AIwIaVCKHYDdh6+ndlTZQwnA7XP7mMfXd7KVIBlPKSj0hf6eD43M PuKx8JqBjIW1QeX3OFOVzxyUXsanC5Q= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:28 2025 by rpki-client