$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: 2M4C/dR3q6hfRNayzFFjqMMxWX2cWykvPUkdxL98MHc= Subject key identifier: 7B:70:28:80:25:AC:2F:EE:C4:7E:87:2C:09:11:76:B1:63:13:5E:F7 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 22 Signing time: Mon 03 Nov 2025 07:46:32 +0000 Manifest this update: Mon 03 Nov 2025 07:46:32 +0000 Manifest next update: Mon 10 Nov 2025 07:46:32 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: ec8rAM+/Qq9DShhI9p5ya5Hhm6dYN52QvBzr5VoAZEI=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Nov 3 07:46:32 2025 GMT Not After : Nov 10 07:46:32 2025 GMT Subject: CN=69085dd8-d95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:14:ba:b4:c0:f5:e9:b3:80:bd:10:5a:f2: e1:a1:02:7a:7a:7a:5f:3e:c2:c4:80:3e:43:f1:09: dc:b8:ca:46:a9:bd:4c:14:57:2c:e5:1a:a6:c5:da: c3:10:ff:73:9c:44:cd:ba:2d:07:91:9c:7e:e0:ef: af:f4:0f:fc:71:c5:63:97:97:aa:ab:4e:bf:ce:d4: fe:cd:3e:80:f8:8b:b9:cd:51:74:6d:29:34:a3:35: 38:fd:75:88:94:02:a0:24:d6:82:c2:0e:fd:7f:2c: 7a:ce:18:f1:d2:d6:d1:77:ab:a9:cb:b6:e2:ae:41: b7:c4:e1:9e:b4:0d:b3:ed:70:fc:68:99:e2:ab:20: e2:61:1d:c7:41:dd:8c:e3:31:cf:4a:2e:2a:52:fe: 89:c7:c0:9f:a2:66:e3:9f:0e:78:ee:ff:8b:15:9d: c0:57:19:2c:43:52:9a:c3:51:9c:b5:57:56:d4:10: 2a:b8:4b:90:18:13:d7:63:be:0c:92:6f:eb:8a:b2: 09:4f:c6:33:1c:c6:ef:4b:0b:2a:51:04:3f:2c:3d: d0:e4:14:23:ec:23:b4:cd:19:31:73:7c:ff:5c:70: 41:43:c4:cd:17:b7:f7:f3:37:dc:1d:f0:de:cb:8a: 57:dc:17:a4:c4:c5:86:f4:90:b3:ee:41:19:4d:fd: f5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:70:28:80:25:AC:2F:EE:C4:7E:87:2C:09:11:76:B1:63:13:5E:F7 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0f:a3:ca:06:fe:c3:3a:36:67:28:02:11:0b:99:1c:66:36: 0d:3e:15:7b:00:6e:60:78:c1:6d:f6:1c:3a:92:c9:a2:52:1d: 94:6e:03:0b:b9:6e:94:ca:cc:7f:45:ac:ae:f4:7e:ec:c2:b3: 44:3a:5c:15:42:3b:84:3a:13:1a:c4:59:82:22:f1:81:3d:c3: a3:03:1c:0b:60:98:15:0d:f5:1e:94:dc:fe:ec:1d:3f:3e:2a: 4c:76:8a:b7:ca:f5:95:94:2a:21:c8:aa:29:e9:f4:8f:be:f5: 8c:2d:5e:c5:c2:d3:84:ae:bd:d0:ed:dc:cf:92:09:73:bd:10: 67:27:48:b0:b4:eb:2a:52:83:cf:97:db:f3:d6:9e:6a:ff:1f: 34:04:ac:b2:2a:df:98:16:78:f0:c3:e3:16:7a:a5:c7:e5:31: cb:81:3a:f8:0a:d1:4d:44:34:37:fd:f6:7e:5f:2a:39:2f:a6: 35:b6:76:2e:b2:ad:2a:b3:37:d0:1c:61:94:ef:ca:81:55:c6: a7:6c:4d:75:91:8a:f2:b1:4a:fb:ca:a5:90:1c:3a:f8:3e:f5: 65:a9:86:d8:9b:83:0a:e9:64:97:aa:ef:16:21:6d:40:96:52: 3e:51:54:01:9f:ec:d0:f8:0e:e8:fd:9e:05:23:6d:73:1c:27: 1a:e0:c4:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNTExMDMwNzQ2MzJaFw0yNTExMTAwNzQ2MzJaMBgxFjAUBgNV BAMTDTY5MDg1ZGQ4LWQ5NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrFxS6tMD16bOAvRBa8uGhAnp6el8+wsSAPkPxCdy4ykapvUwUVyzlGqbF2sMQ /3OcRM26LQeRnH7g76/0D/xxxWOXl6qrTr/O1P7NPoD4i7nNUXRtKTSjNTj9dYiU AqAk1oLCDv1/LHrOGPHS1tF3q6nLtuKuQbfE4Z60DbPtcPxomeKrIOJhHcdB3Yzj Mc9KLipS/onHwJ+iZuOfDnju/4sVncBXGSxDUprDUZy1V1bUECq4S5AYE9djvgyS b+uKsglPxjMcxu9LCypRBD8sPdDkFCPsI7TNGTFzfP9ccEFDxM0Xt/fzN9wd8N7L ilfcF6TExYb0kLPuQRlN/fUxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe3AogCWs L+7EfocsCRF2sWMTXvcwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsPo8oG/sM6NmcoAhELmRxmNg0+FXsAbmB4wW32HDqSyaJSHZRuAwu5 bpTKzH9FrK70fuzCs0Q6XBVCO4Q6ExrEWYIi8YE9w6MDHAtgmBUN9R6U3P7sHT8+ Kkx2irfK9ZWUKiHIqinp9I++9YwtXsXC04SuvdDt3M+SCXO9EGcnSLC06ypSg8+X 2/PWnmr/HzQErLIq35gWePDD4xZ6pcflMcuBOvgK0U1ENDf99n5fKjkvpjW2di6y rSqzN9AcYZTvyoFVxqdsTXWRivKxSvvKpZAcOvg+9WWphtibgwrpZJeq7xYhbUCW Uj5RVAGf7ND4Duj9ngUjbXMcJxrgxGg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:40 2025 by rpki-client