$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: uwBQYQCwf7GH5ltpUK/XgkZTg8BpbhmK7z431pdsMXQ= Subject key identifier: 94:D7:D3:47:A3:94:33:C7:62:6F:4A:9A:C1:CF:85:78:56:A7:65:59 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: CE Signing time: Mon 03 Nov 2025 05:43:32 +0000 Manifest this update: Mon 03 Nov 2025 05:43:31 +0000 Manifest next update: Mon 10 Nov 2025 05:43:31 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: eNvSSxeby6nmWYt4EJoNa9YX9wsnrgq5LeP+JIaOu3w=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: iI9yotfrL9J3LQc+csF8mlXtrJJ2hdKlLEmN7bc8pzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Nov 3 05:43:31 2025 GMT Not After : Nov 10 05:43:31 2025 GMT Subject: CN=69084104-565c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:93:2b:9a:f9:4b:6a:f1:37:d5:10:1f:81: df:fc:75:45:69:5b:63:76:07:37:23:eb:72:6b:fa: 98:ca:8d:f7:81:22:5a:54:d4:00:df:88:85:47:69: dc:02:05:60:1f:65:0a:bc:f0:6a:9b:a2:8f:bc:e2: 2b:05:ba:0a:6a:2e:55:a6:8a:3d:d1:73:13:79:0a: 9f:e1:62:f3:65:12:ad:f2:86:52:a7:95:e2:da:06: 1d:dc:b3:4a:d2:35:2b:47:2e:e8:c3:eb:d4:51:b8: d5:da:67:f1:d6:05:51:1c:78:2a:eb:7e:86:ec:9c: a5:9e:98:b3:18:7f:70:86:2f:ed:ac:9c:e6:34:e9: ca:e6:e8:b1:fc:5e:5f:ee:bf:b1:6c:76:4c:ca:fc: b8:d9:6b:1c:52:13:84:b0:1d:5f:8a:a3:f9:2f:e9: 06:0a:06:11:ee:6e:ad:44:ff:10:5c:c5:00:48:45: b0:2f:3b:c1:08:45:19:c4:90:3e:a3:0d:d3:a7:c9: f4:73:34:d8:8e:80:80:fc:49:d1:55:15:9c:c4:dd: 4e:63:ea:74:2f:6f:47:00:70:72:34:b7:65:9c:d1: 88:61:11:07:70:5b:bd:5c:f1:52:71:e3:da:00:22: 24:a9:c5:ce:c5:51:ac:45:d0:8b:ba:e8:f7:08:6b: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D7:D3:47:A3:94:33:C7:62:6F:4A:9A:C1:CF:85:78:56:A7:65:59 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:1d:9a:19:53:2e:47:41:2f:37:f1:b1:e5:f9:d4:80:8a:36: b8:69:85:4f:88:dd:90:90:58:b0:b5:e2:5d:98:7b:49:61:f0: 02:ca:f5:a9:c1:15:00:01:b6:eb:8e:93:52:36:41:3b:c7:1b: 42:b7:3d:59:13:0d:b3:9a:97:0d:c5:70:e9:41:d4:fa:a2:94: 24:06:fa:e3:59:74:9d:c4:c6:7e:7d:d5:11:fc:5f:e1:5c:67: cb:11:19:25:36:59:ed:8b:6f:1b:7e:99:35:71:da:9e:dd:fb: 8d:ac:14:67:5b:aa:65:cc:3e:b2:e6:71:49:12:7f:ea:d8:e8: 7a:de:24:93:c9:23:8b:bb:da:78:a0:c8:78:76:62:b3:8d:29: 1d:91:da:d8:ea:ee:7a:d2:38:fe:0f:2d:81:80:6e:e2:b6:f8: 7a:cd:d0:c6:ba:71:42:5b:f9:01:f7:90:c8:24:78:02:fd:4a: a2:87:46:92:29:b5:a1:56:bf:a0:a7:cd:17:db:65:66:ba:a0: 2b:d8:da:3c:c3:fa:bd:a0:ee:70:e1:77:1e:04:32:63:27:5f: 9e:14:9d:0c:7c:c8:91:b6:22:ba:ed:33:46:27:ad:cd:c9:5e: 05:44:ce:d2:aa:15:20:6d:4d:2b:dd:25:74:b5:30:2e:5a:9a: 09:c8:5b:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUxMTAzMDU0MzMxWhcNMjUxMTEwMDU0MzMxWjAYMRYwFAYD VQQDEw02OTA4NDEwNC01NjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YCTK5r5S2rxN9UQH4Hf/HVFaVtjdgc3I+tya/qYyo33gSJaVNQA34iFR2nc AgVgH2UKvPBqm6KPvOIrBboKai5Vpoo90XMTeQqf4WLzZRKt8oZSp5Xi2gYd3LNK 0jUrRy7ow+vUUbjV2mfx1gVRHHgq636G7JylnpizGH9whi/trJzmNOnK5uix/F5f 7r+xbHZMyvy42WscUhOEsB1fiqP5L+kGCgYR7m6tRP8QXMUASEWwLzvBCEUZxJA+ ow3Tp8n0czTYjoCA/EnRVRWcxN1OY+p0L29HAHByNLdlnNGIYREHcFu9XPFScePa ACIkqcXOxVGsRdCLuuj3CGuVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTX00ej lDPHYm9KmsHPhXhWp2VZMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3HZoZUy5HQS838bHl+dSAija4aYVPiN2QkFiwteJdmHtJYfACyvWp wRUAAbbrjpNSNkE7xxtCtz1ZEw2zmpcNxXDpQdT6opQkBvrjWXSdxMZ+fdUR/F/h XGfLERklNlnti28bfpk1cdqe3fuNrBRnW6plzD6y5nFJEn/q2Oh63iSTySOLu9p4 oMh4dmKzjSkdkdrY6u560jj+Dy2BgG7itvh6zdDGunFCW/kB95DIJHgC/Uqih0aS KbWhVr+gp80X22VmuqAr2No8w/q9oO5w4XceBDJjJ1+eFJ0MfMiRtiK67TNGJ63N yV4FRM7SqhUgbU0r3SV0tTAuWpoJyFsw -----END CERTIFICATE-----Generated at Tue Nov 4 12:21:13 2025 by rpki-client