$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: szTJgVJzxQUytno6AvVmW35rrhPoUuUCZC3zpC9TFgw= Subject key identifier: 38:3C:AA:B3:03:65:E9:BC:11:98:1A:78:A9:57:CB:56:28:60:F7:D7 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 070D Signing time: Tue 04 Nov 2025 22:23:18 +0000 Manifest this update: Tue 04 Nov 2025 22:23:17 +0000 Manifest next update: Tue 11 Nov 2025 22:23:17 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: kPz+wv0ZwAGV4lHRDIB8/RBQ8HJDxQjgwACAlZ0bVbY=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) 4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 5: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Nov 4 22:23:17 2025 GMT Not After : Nov 11 22:23:17 2025 GMT Subject: CN=690a7cd5-8976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:0b:64:a2:4e:ca:8c:00:d0:a0:27:2a:2f: 88:a5:61:a9:4a:bd:76:f1:76:61:87:74:18:1d:fe: 4f:0b:50:4a:7f:b8:66:1c:5e:f8:88:d0:8d:7b:50: 40:64:3f:58:65:25:d8:95:1c:4a:ab:87:28:33:b6: 12:68:8d:72:0a:81:00:5b:d2:de:96:66:19:43:d6: 8a:0e:a8:7f:04:01:35:76:d9:b7:18:fe:dd:ad:6a: 64:8b:56:84:31:ff:f3:4a:56:ec:30:69:38:e8:d2: 27:7f:46:ae:4b:6f:0a:d9:a7:2c:f1:59:d6:90:03: dc:39:1e:e9:75:2f:07:ee:01:01:f8:08:70:c0:80: 0e:eb:02:ae:b2:a6:8b:d6:47:40:cf:34:98:27:8c: a9:03:80:90:e9:c3:0f:43:2e:5d:a7:7f:aa:4b:ad: 1c:7d:64:84:20:cf:cd:e5:6f:99:fa:2d:38:3a:f7: c1:7c:dc:e6:f0:5c:1e:63:4c:ba:65:96:72:ba:8b: 32:fc:9d:ee:fb:30:18:0f:85:a0:72:db:0a:50:fb: f1:35:b7:f4:60:a1:d8:a3:2b:04:e5:2a:6a:82:9c: 2d:b8:4a:44:aa:92:fc:d6:1f:c8:e4:8a:4f:07:ee: eb:e5:05:28:7e:a6:87:8e:32:ca:6d:ae:87:28:c4: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3C:AA:B3:03:65:E9:BC:11:98:1A:78:A9:57:CB:56:28:60:F7:D7 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:22:52:f3:94:86:50:76:a6:82:da:c4:30:ad:bb:98:70:0f: c0:c7:8d:5a:1f:8f:59:e4:18:38:68:3a:84:31:dc:97:78:c5: 39:89:b0:c1:cd:82:6a:b4:36:da:81:30:3e:4e:33:bf:bb:66: 85:05:50:d1:6d:86:88:9d:e1:c2:6f:2f:2f:84:fe:8d:d5:b1: 67:e2:1a:b3:85:a1:86:ed:30:6b:1c:68:15:75:98:83:2c:69: a2:fa:30:f5:17:bd:65:49:64:0a:2a:3a:75:05:32:10:53:90: a0:4f:50:ac:ae:9a:75:49:6b:d6:33:1f:cd:4a:2e:da:ee:78: b9:cd:2f:c1:fc:13:4e:7a:c0:44:70:c3:9c:15:09:9b:11:92: bf:1b:23:25:d5:f2:0f:e1:45:ac:8e:7a:c0:47:ae:3e:0f:10: 49:d5:3b:a4:03:95:e6:96:e6:4c:a8:a7:a1:b5:c0:8e:fc:0b: 1c:85:97:db:3e:1b:2f:77:1a:10:da:d0:7e:0d:b3:71:80:81: 98:25:ae:fe:b3:5f:8a:a3:bd:75:2f:0f:9f:42:1b:8f:62:b8: 27:da:f5:70:99:13:c6:f1:16:08:82:ba:01:15:a8:54:c5:d4: 0c:7a:8f:59:13:d6:ba:42:e1:5d:9e:95:94:c1:23:59:b1:e4: 9f:58:e1:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUxMTA0MjIyMzE3WhcNMjUxMTExMjIyMzE3WjAYMRYwFAYD VQQDEw02OTBhN2NkNS04OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjALZKJOyowA0KAnKi+IpWGpSr128XZhh3QYHf5PC1BKf7hmHF74iNCNe1BA ZD9YZSXYlRxKq4coM7YSaI1yCoEAW9LelmYZQ9aKDqh/BAE1dtm3GP7drWpki1aE Mf/zSlbsMGk46NInf0auS28K2acs8VnWkAPcOR7pdS8H7gEB+AhwwIAO6wKusqaL 1kdAzzSYJ4ypA4CQ6cMPQy5dp3+qS60cfWSEIM/N5W+Z+i04OvfBfNzm8FweY0y6 ZZZyuosy/J3u+zAYD4WgctsKUPvxNbf0YKHYoysE5SpqgpwtuEpEqpL81h/I5IpP B+7r5QUofqaHjjLKba6HKMTY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg8qrMD Zem8EZgaeKlXy1YoYPfXMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9IlLzlIZQdqaC2sQwrbuYcA/Ax41aH49Z5Bg4aDqEMdyXeMU5ibDB zYJqtDbagTA+TjO/u2aFBVDRbYaIneHCby8vhP6N1bFn4hqzhaGG7TBrHGgVdZiD LGmi+jD1F71lSWQKKjp1BTIQU5CgT1Csrpp1SWvWMx/NSi7a7ni5zS/B/BNOesBE cMOcFQmbEZK/GyMl1fIP4UWsjnrAR64+DxBJ1TukA5XmluZMqKehtcCO/AschZfb PhsvdxoQ2tB+DbNxgIGYJa7+s1+Ko711Lw+fQhuPYrgn2vVwmRPG8RYIgroBFahU xdQMeo9ZE9a6QuFdnpWUwSNZseSfWOHo -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:36 2025 by rpki-client