$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: W/wtS14k5Bvbz+HZT4JDjzycWOs/MHlZnE08u0WpLxs= Subject key identifier: E9:2C:13:FF:2B:28:F5:12:FB:B9:27:FA:A8:4D:3F:68:58:4B:2A:4A Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 24F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 24DA Signing time: Sun 02 Nov 2025 15:47:02 +0000 Manifest this update: Sun 02 Nov 2025 15:47:01 +0000 Manifest next update: Sun 09 Nov 2025 15:47:01 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: kRSf7koNqeuj+Le7H2fJCdhJu3VXwPTMec8YtJd2MwQ=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9460 (0x24f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Nov 2 15:47:01 2025 GMT Not After : Nov 9 15:47:01 2025 GMT Subject: CN=69077cf6-10fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:50:6b:02:63:d3:a2:fa:8a:1f:b6:4e:1e: 4a:0c:8c:a6:64:9f:5e:d6:4c:1f:73:e8:64:32:3a: 3c:98:80:32:52:a7:98:5c:a2:72:8a:93:34:3c:bf: 4b:6f:9d:de:3a:c4:14:98:bc:c6:fb:4e:05:c3:9d: 5d:ab:f6:1b:6e:28:a7:a2:77:08:0d:1c:44:fa:40: e4:fd:f3:11:68:09:e9:5e:e0:74:f9:2a:3f:3d:40: bd:b9:b9:d0:39:b7:88:71:87:af:1b:e2:55:06:b5: 21:42:f8:ef:11:88:18:28:84:b0:2a:50:44:f7:14: 7a:fe:63:40:41:05:cb:f4:94:b5:c6:d6:e7:e9:1e: b7:3e:d9:48:8b:44:f8:83:23:97:85:b4:9b:40:ed: f1:69:67:9f:cf:fe:71:56:75:96:c1:82:ed:bd:43: 67:70:2e:dc:81:19:57:16:2b:f3:df:c9:ca:ab:57: 25:c1:38:f5:e8:45:82:bd:a8:a2:1f:c0:27:b9:35: 07:a1:54:e4:f3:3e:b1:94:c0:21:b0:3c:f8:68:1a: 6a:21:51:7a:9d:71:70:db:9a:d2:b3:66:68:5c:31: 3e:bc:7e:39:7e:2d:17:f5:a1:b9:80:12:1d:72:c7: 73:1c:83:09:5a:40:c1:bd:e4:af:25:25:43:d9:30: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:13:FF:2B:28:F5:12:FB:B9:27:FA:A8:4D:3F:68:58:4B:2A:4A X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:bc:54:5b:29:02:7c:5a:86:90:7d:0d:2e:2c:28:06:3e:a7: 82:4e:93:eb:e7:af:39:b5:bf:57:c7:3f:40:c0:72:5b:0c:c1: d8:bb:df:8e:7b:5d:95:eb:32:38:a8:db:f8:bb:2e:2a:a7:3a: 17:44:3b:be:14:3a:d4:8f:04:4b:bc:a7:df:3a:f1:d4:60:a0: f5:4a:2f:15:2b:f0:94:c1:86:46:11:27:de:35:b9:3a:9a:8a: 36:70:a5:e0:82:52:fd:04:7e:97:53:d4:13:ec:de:d9:8a:d8: fe:67:14:48:12:ee:97:ae:81:11:b1:f6:37:64:1b:d8:bf:1c: a2:b9:cd:66:c0:e3:74:89:1e:05:ef:49:08:c5:1c:c7:b0:32: 83:f3:20:e0:b7:00:84:2f:68:28:30:7f:c6:dc:8c:19:73:f5: a1:03:cd:86:b8:cf:34:94:12:5c:c8:d1:8b:50:06:82:fb:4c: e0:c7:c0:db:06:f1:fd:c4:7a:3e:46:f7:32:e0:dc:86:a4:de: 0e:4c:c8:02:88:b8:2c:44:74:3a:cc:32:27:54:e3:ed:1f:af: 59:20:b3:72:df:f9:04:87:38:a3:19:7a:72:53:bd:1c:1f:c2: e4:2e:45:f6:90:2d:45:7c:a5:fe:de:1d:35:5d:93:4a:c1:19: c1:ef:09:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUxMTAyMTU0NzAxWhcNMjUxMTA5MTU0NzAxWjAYMRYwFAYD VQQDEw02OTA3N2NmNi0xMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqVQawJj06L6ih+2Th5KDIymZJ9e1kwfc+hkMjo8mIAyUqeYXKJyipM0PL9L b53eOsQUmLzG+04Fw51dq/YbbiinoncIDRxE+kDk/fMRaAnpXuB0+So/PUC9ubnQ ObeIcYevG+JVBrUhQvjvEYgYKISwKlBE9xR6/mNAQQXL9JS1xtbn6R63PtlIi0T4 gyOXhbSbQO3xaWefz/5xVnWWwYLtvUNncC7cgRlXFivz38nKq1clwTj16EWCvaii H8AnuTUHoVTk8z6xlMAhsDz4aBpqIVF6nXFw25rSs2ZoXDE+vH45fi0X9aG5gBId csdzHIMJWkDBveSvJSVD2TBZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOksE/8r KPUS+7kn+qhNP2hYSypKMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAvFRbKQJ8WoaQfQ0uLCgGPqeCTpPr5685tb9Xxz9AwHJbDMHYu9+O e12V6zI4qNv4uy4qpzoXRDu+FDrUjwRLvKffOvHUYKD1Si8VK/CUwYZGESfeNbk6 moo2cKXgglL9BH6XU9QT7N7Zitj+ZxRIEu6XroERsfY3ZBvYvxyiuc1mwON0iR4F 70kIxRzHsDKD8yDgtwCEL2goMH/G3IwZc/WhA82GuM80lBJcyNGLUAaC+0zgx8Db BvH9xHo+Rvcy4NyGpN4OTMgCiLgsRHQ6zDInVOPtH69ZILNy3/kEhzijGXpyU70c H8LkLkX2kC1FfKX+3h01XZNKwRnB7wkW -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:44 2025 by rpki-client