$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: uDC7CB8fELws5ijRkVSoaSBVOxzQhpuUXtepTb7EHyo= Subject key identifier: 59:90:05:33:7B:B6:B1:CC:EE:3B:1E:38:ED:56:89:6B:2C:02:AF:9B Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 59 Signing time: Wed 05 Nov 2025 07:21:05 +0000 Manifest this update: Wed 05 Nov 2025 07:21:04 +0000 Manifest next update: Wed 12 Nov 2025 07:21:04 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: YSqN4UWQzHL22xCqfJMPkROKB/50M0GiBNqO0woKkUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Nov 5 07:21:04 2025 GMT Not After : Nov 12 07:21:04 2025 GMT Subject: CN=690afae0-773e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:27:8e:82:5e:57:8c:2a:be:ba:d2:e7:65: 80:c5:b3:6a:1a:32:ed:a1:2e:fc:7d:71:ad:dd:db: f4:73:52:fd:1a:74:f1:fe:eb:81:d7:5d:d1:6f:e8: 3b:b5:53:04:a7:51:df:39:5f:fb:f6:91:ef:3c:68: f3:4f:5f:6c:c2:53:29:0b:2f:42:16:43:e7:57:ef: 41:be:2f:1e:6c:83:e1:1d:88:3c:10:7c:ab:54:1d: 41:33:b5:c0:08:35:ce:70:7a:e3:ed:dc:fb:7d:5e: 30:11:dd:6e:c7:a3:76:00:f6:33:f6:53:7b:28:52: 3a:70:9b:42:69:2c:d0:53:cf:89:bd:db:70:d2:a1: 32:85:3a:b7:30:b4:78:14:c1:8a:c7:44:50:36:fc: ec:75:2c:12:17:c5:c0:00:f9:81:5e:83:b2:73:41: ee:01:76:6e:28:71:b8:70:9b:05:5e:55:b2:d9:b1: 1c:f5:cd:90:62:44:97:4e:f7:df:91:8d:1a:e9:5f: 1c:3a:7f:40:d0:89:13:87:5e:27:eb:2f:4d:61:a7: af:4d:81:da:fd:38:e7:ab:2b:88:19:12:be:12:58: 60:73:37:2e:af:3e:dc:fb:7f:c1:a4:d6:ec:39:63: 75:da:fb:11:0f:7d:39:91:ad:38:00:32:3d:a6:a9: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:90:05:33:7B:B6:B1:CC:EE:3B:1E:38:ED:56:89:6B:2C:02:AF:9B X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8b:22:c8:25:ca:78:76:9d:72:5c:52:2d:3b:37:f2:67:b7: df:3d:89:09:3f:3a:ac:54:b2:2c:dc:9f:47:f6:96:3d:4b:df: 43:a6:8f:c5:04:66:1c:fe:c2:15:7b:50:ba:19:1e:3e:02:09: b9:f9:3e:72:4a:cd:f2:d9:38:1a:30:0d:6c:a6:1f:be:40:18: ca:ea:2f:a1:75:ef:ff:c1:5c:f3:98:07:bc:d4:2b:13:5b:90: 08:c8:17:b4:82:4c:34:03:5f:c5:10:ea:83:90:36:7e:bf:b5: 3f:cf:13:7e:3c:fa:0e:56:a8:ba:a0:b3:3a:30:24:c2:7f:46: aa:51:de:ae:93:cf:5d:3f:fb:45:fe:f8:1b:bc:ad:71:37:e1: 7f:fc:60:1e:55:7c:4e:ce:02:39:73:f0:81:d9:bb:b9:a4:9a: 62:fe:b7:f4:4c:ea:85:b4:12:06:7c:59:1c:73:cd:fc:7e:d5: db:5a:e0:52:8a:ae:8e:6c:89:d7:50:20:b9:ad:38:63:2c:48: 69:36:85:37:9e:14:af:20:ea:7a:80:ce:82:3f:e1:e4:1e:08: b9:2c:58:13:46:a4:51:3b:db:7e:08:82:84:17:04:9f:41:00: 47:79:bb:d3:03:a0:22:40:b4:7d:45:e1:89:29:20:9a:91:77: 6b:b5:4d:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTExMDUwNzIxMDRaFw0yNTExMTIwNzIxMDRaMBgxFjAUBgNV BAMTDTY5MGFmYWUwLTc3M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChvieOgl5XjCq+utLnZYDFs2oaMu2hLvx9ca3d2/RzUv0adPH+64HXXdFv6Du1 UwSnUd85X/v2ke88aPNPX2zCUykLL0IWQ+dX70G+Lx5sg+EdiDwQfKtUHUEztcAI Nc5weuPt3Pt9XjAR3W7Ho3YA9jP2U3soUjpwm0JpLNBTz4m923DSoTKFOrcwtHgU wYrHRFA2/Ox1LBIXxcAA+YFeg7JzQe4Bdm4ocbhwmwVeVbLZsRz1zZBiRJdO99+R jRrpXxw6f0DQiROHXifrL01hp69Ngdr9OOerK4gZEr4SWGBzNy6vPtz7f8Gk1uw5 Y3Xa+xEPfTmRrTgAMj2mqeQfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWZAFM3u2 sczuOx447VaJaywCr5swHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEuLIsglynh2nXJcUi07N/Jnt989iQk/OqxUsizcn0f2lj1L30Omj8UE Zhz+whV7ULoZHj4CCbn5PnJKzfLZOBowDWymH75AGMrqL6F17//BXPOYB7zUKxNb kAjIF7SCTDQDX8UQ6oOQNn6/tT/PE348+g5WqLqgszowJMJ/RqpR3q6Tz10/+0X+ +Bu8rXE34X/8YB5VfE7OAjlz8IHZu7mkmmL+t/RM6oW0EgZ8WRxzzfx+1dta4FKK ro5siddQILmtOGMsSGk2hTeeFK8g6nqAzoI/4eQeCLksWBNGpFE7234IgoQXBJ9B AEd5u9MDoCJAtH1F4YkpIJqRd2u1TbY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:47 2025 by rpki-client