$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: qxFLoYwWwDK0Yvu3cxW92ArRjMfXYALCc5yw0IkeFYg= Subject key identifier: F7:86:2F:D2:93:AF:81:46:5B:3E:34:A5:19:16:98:91:92:D1:04:E0 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 033C Signing time: Mon 03 Nov 2025 01:00:45 +0000 Manifest this update: Mon 03 Nov 2025 01:00:45 +0000 Manifest next update: Mon 10 Nov 2025 01:00:45 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: TkJf6VeFfQ5lnVe8kyFFvvIIRsrUEGjTd/NsUiIqkbk=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: 3npwV8/+wiUK9JBAZyO0+8UedY3k/f+O7Td/WLjNjlA=) 3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Nov 3 01:00:45 2025 GMT Not After : Nov 10 01:00:45 2025 GMT Subject: CN=6907febd-2007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:ad:f6:e5:2f:60:87:49:97:18:93:d7:32: 2c:12:50:d8:df:44:75:9c:94:79:15:d2:89:d5:3d: a7:a6:17:bf:b5:8f:16:92:a6:5c:7c:e3:7b:be:72: 29:c3:bf:88:9b:8c:17:4a:fe:d4:19:4d:09:e4:3d: 28:df:52:0f:ff:a3:32:2f:ce:38:a0:bb:ee:7e:17: 9a:5d:54:7e:74:e8:8b:e5:ec:35:a6:09:7b:e8:ca: 3f:b9:8a:c8:7c:f0:f1:c6:97:9a:3d:43:60:87:f4: 40:6a:e9:10:b1:ef:bc:45:82:78:03:28:df:4d:07: 11:01:fe:50:d7:3c:01:ce:be:05:4a:0b:10:4b:e7: a2:57:aa:70:d3:c2:ab:b6:17:90:d6:c1:07:c3:61: 61:5d:d2:10:78:17:11:b6:24:5c:66:c5:4a:e5:91: f0:8a:4e:9e:ac:69:20:f2:8e:f9:0b:0a:ae:1b:9d: 81:12:c2:89:96:64:79:a5:e2:4f:11:27:80:bf:39: a2:6f:f0:ca:1f:1f:24:aa:7b:bd:ea:92:64:ef:1c: 41:6d:b0:89:dd:f5:c7:c9:0e:8d:b4:15:b5:56:1d: ff:a7:c5:f9:11:05:b6:1b:89:14:06:14:46:0b:16: a4:1a:c1:2a:6f:b6:8e:dd:bd:8e:e9:4a:4b:76:02: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:86:2F:D2:93:AF:81:46:5B:3E:34:A5:19:16:98:91:92:D1:04:E0 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:eb:d7:fd:2c:f9:7b:59:61:d1:a6:ee:36:12:89:fb:8b:31: 34:d9:b2:0f:8c:37:b0:2c:17:46:5f:6b:78:9a:de:aa:1a:b3: 17:1d:07:70:51:90:25:2e:44:77:5b:be:41:51:6e:57:ad:cd: 3e:b2:ef:f6:f2:cd:0c:31:c1:74:57:15:28:47:aa:92:94:02: d8:ca:a6:cd:3c:ee:1f:12:f1:3e:6e:fb:a4:05:8f:fe:34:65: 3c:84:07:15:26:41:12:7e:e4:21:41:3b:27:bf:1a:2c:32:59: 4b:dc:4f:93:f3:17:35:e8:ce:6f:9e:1f:1e:a8:01:a1:e5:47: e3:5c:99:de:56:e9:48:80:ee:92:e1:b9:46:e3:7e:94:6e:48: e9:f1:6e:52:f7:35:40:85:64:97:b7:0a:9c:47:62:c4:b6:11: b2:88:03:75:71:3a:c3:b5:68:f9:ed:d2:1f:34:9b:e7:97:2a: e2:29:30:97:a4:f3:3d:7b:0a:9b:18:a2:40:58:7c:f0:58:21: a5:57:18:3c:25:a7:ed:28:23:e9:e4:7b:8f:cb:37:fa:62:d1: c9:8b:e1:60:c5:64:84:20:20:82:36:fc:35:5a:3e:bc:bd:98: 61:6a:6e:b3:bc:a0:26:d2:bb:7d:83:c7:7c:6c:4e:f3:30:9a: 7a:e3:9b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUxMTAzMDEwMDQ1WhcNMjUxMTEwMDEwMDQ1WjAYMRYwFAYD VQQDEw02OTA3ZmViZC0yMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuByt9uUvYIdJlxiT1zIsElDY30R1nJR5FdKJ1T2nphe/tY8WkqZcfON7vnIp w7+Im4wXSv7UGU0J5D0o31IP/6MyL844oLvufheaXVR+dOiL5ew1pgl76Mo/uYrI fPDxxpeaPUNgh/RAaukQse+8RYJ4AyjfTQcRAf5Q1zwBzr4FSgsQS+eiV6pw08Kr theQ1sEHw2FhXdIQeBcRtiRcZsVK5ZHwik6erGkg8o75CwquG52BEsKJlmR5peJP ESeAvzmib/DKHx8kqnu96pJk7xxBbbCJ3fXHyQ6NtBW1Vh3/p8X5EQW2G4kUBhRG CxakGsEqb7aO3b2O6UpLdgLgnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeGL9KT r4FGWz40pRkWmJGS0QTgMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp69f9LPl7WWHRpu42Eon7izE02bIPjDewLBdGX2t4mt6qGrMXHQdw UZAlLkR3W75BUW5Xrc0+su/28s0MMcF0VxUoR6qSlALYyqbNPO4fEvE+bvukBY/+ NGU8hAcVJkESfuQhQTsnvxosMllL3E+T8xc16M5vnh8eqAGh5UfjXJneVulIgO6S 4blG436Ubkjp8W5S9zVAhWSXtwqcR2LEthGyiAN1cTrDtWj57dIfNJvnlyriKTCX pPM9ewqbGKJAWHzwWCGlVxg8JaftKCPp5HuPyzf6YtHJi+FgxWSEICCCNvw1Wj68 vZhham6zvKAm0rt9g8d8bE7zMJp645sB -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:33 2025 by rpki-client