$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: X2VLAAXcfar8dxK2vMPl0PibzUsPIKlu3MBLMYafD2g= Subject key identifier: 1B:AC:19:AC:F5:4E:E7:6C:80:CA:F8:20:B3:83:A9:B6:BA:79:48:D1 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 23A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 2393 Signing time: Wed 22 Oct 2025 16:00:53 +0000 Manifest this update: Wed 22 Oct 2025 16:00:52 +0000 Manifest next update: Wed 29 Oct 2025 16:00:52 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: avVEYAiLnPVHjRf0gB4B3C5vih4+8deMRa3d8Qab6cs=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9124 (0x23a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Oct 22 16:00:52 2025 GMT Not After : Oct 29 16:00:52 2025 GMT Subject: CN=68f8ffb5-2a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:f4:97:a7:84:dc:e9:a2:ac:d7:07:26:39: 42:e0:c0:57:13:8b:ca:3f:a6:45:d2:58:1b:2c:2b: 5b:dc:1c:e8:5a:cf:e7:e7:02:26:5b:e7:c7:7c:61: e2:5d:a4:a4:e4:63:03:04:bf:9d:17:f9:4b:d2:7f: 20:de:ba:b4:d0:23:cd:31:4d:ba:b3:2a:cb:06:37: 5c:a5:e6:ae:2a:f5:84:c6:4f:70:80:4a:94:24:e8: fa:98:ef:3c:6c:4d:56:bf:95:84:12:6a:7e:60:17: 85:94:b7:fe:00:af:18:dc:cd:77:65:5d:f5:98:84: 95:25:c3:ae:a8:9b:41:3b:68:c4:56:df:47:20:e4: 34:7a:21:02:36:0b:67:63:1c:7c:c8:d7:32:b7:fc: 14:f8:f3:99:40:99:09:24:37:23:61:19:2e:88:e3: d8:6d:af:8b:c1:c7:5a:52:2e:38:a2:b0:45:23:5d: bd:87:2a:8c:e8:22:92:37:3e:ea:01:6b:93:bc:59: 99:7b:97:38:b0:30:26:3d:86:bb:fb:89:34:a3:57: a7:28:33:16:25:ff:14:d4:05:22:cd:65:af:81:96: 13:94:af:0c:4b:54:97:48:eb:83:b4:94:c2:25:7f: 38:74:28:ac:45:05:e7:9f:6e:84:bc:5a:44:ad:66: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AC:19:AC:F5:4E:E7:6C:80:CA:F8:20:B3:83:A9:B6:BA:79:48:D1 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:dd:ac:3c:b7:80:4e:36:ac:17:0c:34:06:4b:60:8c:e9: b9:7b:13:4b:3c:c3:a1:2c:6b:cf:2d:62:6a:50:c6:b2:2d:6d: 7d:6a:35:a7:53:8a:37:a6:89:56:6e:db:dd:ed:58:e3:66:2e: 10:33:8a:5b:84:70:c4:69:2e:2f:b1:18:36:c2:12:3b:51:30: 09:54:c1:d7:4c:d1:90:65:59:f6:c3:ac:2d:3e:11:b7:97:67: b8:cd:80:94:17:cd:a6:1b:c0:f4:1f:05:b0:96:04:6d:c8:3d: dd:07:0e:dc:bd:1c:e7:1f:aa:26:4d:ca:c2:4f:df:71:43:88: 0c:fc:a3:59:2e:b5:f3:56:aa:61:a9:af:11:a7:17:2e:7b:38: 97:15:09:78:74:11:f7:09:ae:09:42:87:23:38:02:bb:fa:ca: db:51:3b:40:78:c5:4f:48:8f:3f:32:de:82:d6:f1:2b:49:b4: c9:6d:8e:52:c2:4e:33:e7:a2:f8:f9:c1:f4:2a:58:99:3d:20: f0:bc:d9:6b:86:48:cc:44:8e:45:d2:d7:58:32:c0:d8:1a:ed: bf:04:65:da:74:fb:22:49:87:60:db:71:73:ad:57:30:96:11: d2:85:5c:9f:f5:61:aa:a7:d5:1a:f2:1c:35:5d:8e:29:65:b0: 40:a6:e6:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUxMDIyMTYwMDUyWhcNMjUxMDI5MTYwMDUyWjAYMRYwFAYD VQQDEw02OGY4ZmZiNS0yYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdT0l6eE3OmirNcHJjlC4MBXE4vKP6ZF0lgbLCtb3BzoWs/n5wImW+fHfGHi XaSk5GMDBL+dF/lL0n8g3rq00CPNMU26syrLBjdcpeauKvWExk9wgEqUJOj6mO88 bE1Wv5WEEmp+YBeFlLf+AK8Y3M13ZV31mISVJcOuqJtBO2jEVt9HIOQ0eiECNgtn Yxx8yNcyt/wU+POZQJkJJDcjYRkuiOPYba+LwcdaUi44orBFI129hyqM6CKSNz7q AWuTvFmZe5c4sDAmPYa7+4k0o1enKDMWJf8U1AUizWWvgZYTlK8MS1SXSOuDtJTC JX84dCisRQXnn26EvFpErWY8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBusGaz1 TudsgMr4ILODqba6eUjRMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rd2sPLeATjasFww0BktgjOm5exNLPMOhLGvPLWJqUMayLW19ajWn U4o3polWbtvd7VjjZi4QM4pbhHDEaS4vsRg2whI7UTAJVMHXTNGQZVn2w6wtPhG3 l2e4zYCUF82mG8D0HwWwlgRtyD3dBw7cvRznH6omTcrCT99xQ4gM/KNZLrXzVqph qa8RpxcueziXFQl4dBH3Ca4JQocjOAK7+srbUTtAeMVPSI8/Mt6C1vErSbTJbY5S wk4z56L4+cH0KliZPSDwvNlrhkjMRI5F0tdYMsDYGu2/BGXadPsiSYdg23FzrVcw lhHShVyf9WGqp9Ua8hw1XY4pZbBApub1 -----END CERTIFICATE-----Generated at Thu Oct 23 04:42:53 2025 by rpki-client