$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: h0li/3rKaaSpSvd8/B9aG83XOtNj+bCZnSYDjCIXwZE= Subject key identifier: 81:C4:E9:CB:66:59:9C:39:80:99:57:91:C3:F6:50:12:EC:F8:BC:5D Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 0689 Signing time: Sun 02 Nov 2025 22:25:16 +0000 Manifest this update: Sun 02 Nov 2025 22:25:15 +0000 Manifest next update: Sun 09 Nov 2025 22:25:15 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: tM7kFEWw9l5RQgeMGDZvrWzKwzl6YFQDWOzKguqRHL8=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: DxARsL+2J5rkvhwXm2iR36A3nQFpWBmz2UuZUXtaoP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: Nov 2 22:25:15 2025 GMT Not After : Nov 9 22:25:15 2025 GMT Subject: CN=6907da4c-28f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:b5:09:ad:ce:2c:1f:bc:d0:a8:4f:d0:af: 4f:f4:36:64:6a:d5:b3:84:e5:68:40:68:06:4a:e0: 18:6b:a7:3b:ec:ac:57:d1:7a:20:5b:20:c1:db:fa: 90:3c:57:01:3b:fd:4e:8d:d2:9c:f1:ce:c6:5b:96: b7:81:ef:d5:11:0d:c9:3e:49:b7:81:e3:90:47:47: 6f:12:47:9d:7a:c5:eb:2d:10:65:fb:22:b8:5a:be: 19:df:cc:f4:14:f9:84:b1:30:a6:c5:f8:76:97:bb: 91:b7:b3:6f:1c:72:e8:6f:c5:7e:f0:bb:cd:50:e5: dd:d6:bf:08:97:a4:6a:7a:24:af:74:6b:f0:f4:66: 02:35:18:0f:3d:a3:db:b3:00:21:ea:38:4c:ac:76: 85:a6:77:bb:f8:b4:cb:92:00:cc:e0:ee:81:c2:02: 39:37:b9:74:22:3b:d5:cc:4e:a6:6d:a2:cd:ab:47: 07:25:52:f9:40:37:df:91:cf:83:8a:11:7c:82:c6: 7c:91:76:5f:2a:ad:a7:8f:37:3e:f8:d1:91:51:8d: e3:68:07:40:0e:3f:b6:95:a5:ba:b5:4c:85:03:ee: 25:1c:d6:16:88:82:c0:41:c6:10:1c:11:b3:5e:3c: ce:de:ee:4b:27:c3:4b:94:36:3c:cc:d8:7e:22:62: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C4:E9:CB:66:59:9C:39:80:99:57:91:C3:F6:50:12:EC:F8:BC:5D X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:17:8c:03:7b:c4:96:b4:65:fa:bc:8d:5b:a2:16:1e:24:23: 68:94:6b:53:58:d1:cb:51:2f:f2:d0:5e:59:f4:17:07:d9:77: de:7d:e2:6b:f8:00:5c:57:93:68:50:05:bb:4f:73:47:29:ba: 18:13:13:2d:2e:f3:ad:e8:c1:0b:e2:7f:68:57:8b:a9:fd:48: 44:2c:88:70:bc:d3:ad:f0:8e:42:b4:c7:ba:17:4a:ac:30:22: 1e:b4:de:19:35:3e:57:f9:6e:f6:91:98:0c:20:fe:e5:62:bf: 8a:ed:f8:ad:e1:6e:74:2a:ea:8a:ce:3d:d7:7b:d1:b8:a9:e9: 82:12:01:a9:7d:9a:ba:93:f4:25:5d:73:d0:1a:d4:51:6f:3d: 83:fc:b3:cd:0a:48:f4:95:cd:3b:d9:fc:c0:d2:18:00:2f:3a: 63:30:d2:22:27:e4:7c:07:1c:e8:e7:c8:a5:c8:4f:e2:e4:61: 19:39:99:c4:91:46:5b:34:3b:6e:f9:ab:3c:f1:61:bf:78:b9: b1:d3:5f:cb:af:07:56:be:b6:a5:1b:7c:71:d6:8a:d4:c0:88: 62:55:5f:63:7c:26:f6:d5:b9:07:6f:09:18:14:bf:bb:18:9f: ea:48:70:30:1c:bf:7b:23:b4:26:bc:b9:7d:38:dc:e0:cd:41: 23:39:81:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjUxMTAyMjIyNTE1WhcNMjUxMTA5MjIyNTE1WjAYMRYwFAYD VQQDEw02OTA3ZGE0Yy0yOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXq1Ca3OLB+80KhP0K9P9DZkatWzhOVoQGgGSuAYa6c77KxX0XogWyDB2/qQ PFcBO/1OjdKc8c7GW5a3ge/VEQ3JPkm3geOQR0dvEkedesXrLRBl+yK4Wr4Z38z0 FPmEsTCmxfh2l7uRt7NvHHLob8V+8LvNUOXd1r8Il6RqeiSvdGvw9GYCNRgPPaPb swAh6jhMrHaFpne7+LTLkgDM4O6BwgI5N7l0IjvVzE6mbaLNq0cHJVL5QDffkc+D ihF8gsZ8kXZfKq2njzc++NGRUY3jaAdADj+2laW6tUyFA+4lHNYWiILAQcYQHBGz XjzO3u5LJ8NLlDY8zNh+ImJKKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHE6ctm WZw5gJlXkcP2UBLs+LxdMB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMF4wDe8SWtGX6vI1bohYeJCNolGtTWNHLUS/y0F5Z9BcH2XfefeJr +ABcV5NoUAW7T3NHKboYExMtLvOt6MEL4n9oV4up/UhELIhwvNOt8I5CtMe6F0qs MCIetN4ZNT5X+W72kZgMIP7lYr+K7fit4W50KuqKzj3Xe9G4qemCEgGpfZq6k/Ql XXPQGtRRbz2D/LPNCkj0lc072fzA0hgALzpjMNIiJ+R8Bxzo58ilyE/i5GEZOZnE kUZbNDtu+as88WG/eLmx01/LrwdWvralG3xx1orUwIhiVV9jfCb21bkHbwkYFL+7 GJ/qSHAwHL97I7QmvLl9ONzgzUEjOYG/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:29 2025 by rpki-client