$ rpki-client -vvf rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft File: Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft (raw, json) Hash identifier: jcCA98CCY/0uFbHbr1rKaVYpf/AxTNY0ndcKP5zyy/s= Subject key identifier: 96:F8:EC:36:2C:CD:1F:B6:5B:84:2D:EF:6E:BC:7D:32:8A:41:CF:AC Authority key identifier: 67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 Certificate issuer: /CN=A91180E8/serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft Manifest number: 87 Signing time: Mon 03 Nov 2025 06:36:21 +0000 Manifest this update: Mon 03 Nov 2025 06:36:21 +0000 Manifest next update: Mon 10 Nov 2025 06:36:21 +0000 Files and hashes: 1: Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl (hash: x7NfWrj0pAAumAiv0dMJC7pAI0UJYAgyGmi+8HX4pdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91180E8, serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Validity Not Before: Nov 3 06:36:21 2025 GMT Not After : Nov 10 06:36:21 2025 GMT Subject: CN=69084d65-b5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:c8:1c:ad:8c:4a:ae:80:3b:35:e7:ed:ce: 6c:f9:92:da:fc:ed:24:b2:2b:c8:23:c5:84:eb:75: b5:9e:d2:27:44:fe:74:c5:b3:8e:8c:28:fe:1d:f8: 32:53:7a:a7:bf:6a:de:88:05:35:15:0c:fc:e3:9f: 9e:a5:33:67:bd:c8:dd:f5:fa:6b:48:3e:15:47:e4: b3:be:4e:2b:7f:ad:1c:d2:d3:d9:8a:28:23:4c:9b: 2a:ac:ae:c1:e0:15:75:98:6e:08:9c:bc:1e:3b:dc: bd:01:46:2f:fc:d8:bb:85:8b:ea:7c:f4:e1:1b:ea: 4f:e8:87:62:83:65:57:7f:5c:95:aa:d7:bd:74:02: f6:06:bc:46:66:b5:e6:f3:42:24:46:b3:0d:31:f6: 1c:c7:5d:fd:75:26:0b:e1:5c:3e:60:a2:85:a0:e9: f3:96:d8:e8:ad:c8:c8:cc:1f:db:3d:8a:a4:03:cc: a3:93:c3:ea:7f:a6:c9:4d:cf:66:3a:3c:cc:5b:6c: a3:a9:f8:03:6a:00:6b:74:aa:c7:5c:fb:02:0d:51: 57:24:24:76:82:60:a8:16:fe:fa:04:fe:17:e9:e6: 27:86:74:f0:ac:86:69:d7:c5:9f:85:74:0b:a9:90: 2a:2b:f5:73:29:cc:c1:4d:b8:ec:94:65:f9:56:ee: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F8:EC:36:2C:CD:1F:B6:5B:84:2D:EF:6E:BC:7D:32:8A:41:CF:AC X509v3 Authority Key Identifier: keyid:67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ca:4f:75:ff:dc:80:7b:2c:a0:61:41:d5:3f:b7:c7:4d:4e: 23:4a:35:03:fb:c0:83:8a:8b:c3:1e:8d:3c:00:6b:1c:a9:b5: 5a:99:11:0f:e9:1a:01:77:e5:27:85:65:20:0e:45:04:0b:44: 36:81:d9:ac:26:d8:23:26:3a:22:48:cf:e1:32:c0:94:c2:5f: d2:f6:c7:d8:24:2b:49:47:94:fe:0c:88:c3:cd:29:81:5c:8d: ba:67:0c:85:f5:dc:0d:ce:fb:74:f0:a6:4b:55:54:fd:2a:d3: 18:f1:9f:66:b5:e8:5e:2c:13:a1:bc:51:99:fb:9f:1c:6c:c9: ee:e2:3c:b7:ef:a6:8b:02:54:be:9a:c8:93:16:85:dd:20:f5: cb:fe:2b:e6:87:b0:9f:0d:70:e9:2c:64:5f:e3:39:57:9a:ba: a1:33:7a:81:56:9f:36:f2:39:f3:31:64:55:dd:0a:14:b5:91: 6f:7e:6f:ac:43:d4:86:13:6d:35:09:39:f0:8c:9b:62:89:9b: fe:2b:e7:39:bb:15:bc:c5:35:bf:6f:f0:9f:0b:9e:f3:5a:c3: 6d:7e:e8:ed:bc:59:af:49:51:93:49:26:7c:a0:7a:46:5a:fd: 9a:4d:57:97:ac:17:ef:d4:21:08:e1:e6:46:ae:e6:22:48:44: 17:53:ce:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwRTgxMTAvBgNVBAUTKDY3RjI5QjM1QTg5NDJBQTZCN0Y0MUFFRkIzNEEwNjc2 RkQ2OTUwOTcwHhcNMjUxMTAzMDYzNjIxWhcNMjUxMTEwMDYzNjIxWjAYMRYwFAYD VQQDEw02OTA4NGQ2NS1iNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oHIHK2MSq6AOzXn7c5s+ZLa/O0ksivII8WE63W1ntInRP50xbOOjCj+Hfgy U3qnv2reiAU1FQz845+epTNnvcjd9fprSD4VR+Szvk4rf60c0tPZiigjTJsqrK7B 4BV1mG4InLweO9y9AUYv/Ni7hYvqfPThG+pP6Idig2VXf1yVqte9dAL2BrxGZrXm 80IkRrMNMfYcx139dSYL4Vw+YKKFoOnzltjorcjIzB/bPYqkA8yjk8Pqf6bJTc9m OjzMW2yjqfgDagBrdKrHXPsCDVFXJCR2gmCoFv76BP4X6eYnhnTwrIZp18WfhXQL qZAqK/VzKczBTbjslGX5Vu6HvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb47DYs zR+2W4Qt7268fTKKQc+sMB8GA1UdIwQYMBaAFGfymzWolCqmt/Qa77NKBnb9aVCX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODBFOC8zQTlGQUM1NEU5 RDYxMUVGOEQwNEI2NzdDNEY5QUUwMi9aX0tiTmFpVUtxYTM5QnJ2czBvR2R2MXBV SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfS2JOYWlVS3FhMzlCcnZzMG9HZHYxcFVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODBFOC8zQTlGQUM1NEU5RDYxMUVGOEQwNEI2NzdDNEY5QUUwMi9aX0tiTmFpVUtx YTM5QnJ2czBvR2R2MXBVSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzyk91/9yAeyygYUHVP7fHTU4jSjUD+8CDiovDHo08AGscqbVamREP 6RoBd+UnhWUgDkUEC0Q2gdmsJtgjJjoiSM/hMsCUwl/S9sfYJCtJR5T+DIjDzSmB XI26ZwyF9dwNzvt08KZLVVT9KtMY8Z9mteheLBOhvFGZ+58cbMnu4jy376aLAlS+ msiTFoXdIPXL/ivmh7CfDXDpLGRf4zlXmrqhM3qBVp828jnzMWRV3QoUtZFvfm+s Q9SGE201CTnwjJtiiZv+K+c5uxW8xTW/b/CfC57zWsNtfujtvFmvSVGTSSZ8oHpG Wv2aTVeXrBfv1CEI4eZGruYiSEQXU878 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:36 2025 by rpki-client