$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: q+CjctkdRdJygmpIHRAdfgzOLIhJS7rMP1RgaOo0RSA= Subject key identifier: CB:F4:AE:DF:FD:DA:69:40:AC:C2:DA:CF:E5:29:1B:A4:8B:3C:11:3C Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 38 Signing time: Wed 05 Nov 2025 07:45:49 +0000 Manifest this update: Wed 05 Nov 2025 07:45:49 +0000 Manifest next update: Wed 12 Nov 2025 07:45:49 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: C6MytPHEK/aVRiU/wLPyhXhp6ZiXg3DjMIVuRiFY3fg=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: 2Z7ZXOjsrVXv6QpvLW3sNTYWE2LGQXJRgdUTVxtlGsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Nov 5 07:45:49 2025 GMT Not After : Nov 12 07:45:49 2025 GMT Subject: CN=690b00ad-7266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:b8:e2:a5:e8:87:b1:b3:b9:9b:a8:39:4e: c6:d5:dc:85:d1:10:68:90:12:5b:8c:52:4d:c4:53: 67:3b:e7:9e:c1:bf:58:36:a6:c7:9a:48:4d:14:fc: 9f:53:ab:a8:e6:be:de:09:e7:a3:64:f9:5c:cc:39: f3:9c:7b:7a:9a:9c:94:44:8f:f1:9c:7d:28:d5:8e: 4e:4f:de:30:a7:e3:17:cf:63:05:e0:72:dd:4b:cd: 6b:84:68:54:0d:98:d8:d2:7c:af:3b:f9:1f:c2:d6: 57:f0:f8:37:a0:f1:09:16:2a:95:0e:be:f3:75:d8: 3f:fa:1f:00:b2:8a:fd:33:7b:3c:2c:13:d3:2a:ef: 97:2a:27:2a:6c:05:a5:49:15:5f:60:83:c5:01:60: 6f:44:62:24:eb:55:8e:0e:3b:99:0a:b3:5b:2b:e8: 23:92:f1:c6:9b:26:78:a0:8c:b2:bf:83:86:9b:c5: c5:ad:8b:26:78:27:42:0e:e4:af:1c:e3:39:73:bf: 1b:df:32:eb:78:48:81:7d:37:76:2c:bd:d7:d4:71: 8a:41:da:ef:45:61:bf:84:f6:75:f9:25:b6:21:7b: 49:37:c5:00:40:48:38:fa:75:ea:e0:54:08:eb:11: d2:25:3b:53:5c:c7:ca:38:d6:9f:3c:8b:d7:09:94: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:AE:DF:FD:DA:69:40:AC:C2:DA:CF:E5:29:1B:A4:8B:3C:11:3C X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:5e:32:bb:87:8e:b6:b3:59:60:97:c2:d4:3d:f0:51:03:49: 0a:a7:eb:08:c3:21:37:fa:ca:8d:7d:ba:55:1f:4a:2f:35:2a: 99:f4:ba:7c:6d:f6:db:d3:a9:e6:18:72:f2:e0:df:b5:e3:b8: 26:35:c7:65:cb:94:01:d5:5f:53:5e:ae:8b:0c:b3:b6:9f:08: c4:fd:94:41:cf:92:c6:93:a3:e1:0f:3e:16:03:d4:50:f0:c8: 60:28:43:24:4e:3f:04:c3:93:bb:21:5d:f0:48:7f:5d:ef:e0: a8:d5:44:3b:a5:82:c8:c7:89:71:68:92:9f:db:86:95:6f:2d: 00:23:1b:64:ee:48:4e:c8:1f:3d:38:27:e9:6b:fc:9b:a3:49: 23:41:18:18:31:c5:2f:09:94:17:cd:5c:9c:aa:df:1e:15:88: d0:85:6d:6b:1e:1c:b1:55:23:1f:48:4f:52:bf:ee:3d:6e:cf: 97:bb:b5:2d:41:f8:97:52:ae:43:10:f6:5e:6c:9c:26:8b:bf: 12:d5:34:bf:e8:2b:1c:4a:c4:28:3d:b5:6c:b6:aa:ec:ff:76: b3:e1:96:af:83:d5:37:0a:28:7e:1a:2c:08:83:2d:63:84:b7: 44:15:83:ea:f1:0b:e8:9c:d0:9a:92:3a:dc:37:1e:e6:77:d2: dd:e9:1d:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUVENTExMC8GA1UEBRMoNjY3ODE3OUE1REE4RTVFOTFFN0Q5RERGQzlGRjVCMzU0 M0VENEQ3NDAeFw0yNTExMDUwNzQ1NDlaFw0yNTExMTIwNzQ1NDlaMBgxFjAUBgNV BAMTDTY5MGIwMGFkLTcyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9O7jipeiHsbO5m6g5TsbV3IXREGiQEluMUk3EU2c7557Bv1g2pseaSE0U/J9T q6jmvt4J56Nk+VzMOfOce3qanJREj/GcfSjVjk5P3jCn4xfPYwXgct1LzWuEaFQN mNjSfK87+R/C1lfw+Deg8QkWKpUOvvN12D/6HwCyiv0zezwsE9Mq75cqJypsBaVJ FV9gg8UBYG9EYiTrVY4OO5kKs1sr6COS8cabJnigjLK/g4abxcWtiyZ4J0IO5K8c 4zlzvxvfMut4SIF9N3YsvdfUcYpB2u9FYb+E9nX5JbYhe0k3xQBASDj6dergVAjr EdIlO1Ncx8o41p88i9cJlGl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy/Su3/3a aUCswtrP5SkbpIs8ETwwHwYDVR0jBBgwFoAUZngXml2o5ekefZ3fyf9bNUPtTXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRUQ1L0FGQTQ2NDY0Njcy RjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5nWG1sMm81ZWtlZlozZnlmOWJOVVB0VFhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RUQ1L0FGQTQ2NDY0NjcyRjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVr ZWZaM2Z5ZjliTlVQdFRYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANheMruHjrazWWCXwtQ98FEDSQqn6wjDITf6yo19ulUfSi81Kpn0unxt 9tvTqeYYcvLg37XjuCY1x2XLlAHVX1NerosMs7afCMT9lEHPksaTo+EPPhYD1FDw yGAoQyROPwTDk7shXfBIf13v4KjVRDulgsjHiXFokp/bhpVvLQAjG2TuSE7IHz04 J+lr/JujSSNBGBgxxS8JlBfNXJyq3x4ViNCFbWseHLFVIx9IT1K/7j1uz5e7tS1B +JdSrkMQ9l5snCaLvxLVNL/oKxxKxCg9tWy2quz/drPhlq+D1TcKKH4aLAiDLWOE t0QVg+rxC+ic0JqSOtw3HuZ30t3pHU4= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:03 2025 by rpki-client