$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: DkT5j1FYt38G3OUybXeC6GxnhEvssAk+0VpZCIkIWLE= Subject key identifier: 10:8A:81:D3:10:20:C4:50:2C:59:87:48:09:6D:73:31:06:DA:D2:F0 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 0211 Signing time: Mon 03 Nov 2025 02:13:08 +0000 Manifest this update: Mon 03 Nov 2025 02:13:07 +0000 Manifest next update: Mon 10 Nov 2025 02:13:07 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: 3GiU3h/95hr44L3mSteABTl7ovW8iFGOZjNuIS/LoxE=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: 4hy1f5KhPhwHVnBrwdKHHsp/qGx5VbOvDT16foHwuRM=) 3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: l3pw7Z4d1Nkw0APH0xp6K2791IsFOtCcx1C4farScNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Nov 3 02:13:07 2025 GMT Not After : Nov 10 02:13:07 2025 GMT Subject: CN=69080fb3-57b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:16:c7:f7:23:be:f2:f4:b8:35:e8:d3:00:dc: 71:42:25:e6:23:d6:ef:60:d4:be:64:8c:fa:bf:66: de:19:ad:00:72:bb:3d:48:89:17:21:90:cd:ad:6d: 47:47:11:54:2c:f9:84:26:5f:f1:e5:93:1f:6c:15: a8:77:f6:f2:e1:dc:5e:fd:5e:d7:bd:17:33:0c:9b: e7:ec:b9:a7:2b:03:22:7a:3c:c3:89:1c:59:cb:d5: 43:65:97:7a:70:27:1c:3a:a9:37:76:2b:47:10:25: 74:b1:de:b8:3f:85:50:ed:db:16:96:0c:0b:94:2e: 0e:b7:8d:11:a8:7b:2c:fd:8e:b9:86:b9:3d:c0:80: 69:0a:f4:a5:b6:4f:ee:c6:ab:8b:08:ac:34:f0:20: a6:dd:fc:e9:13:81:f9:d0:7f:31:ad:a7:03:0e:98: db:9a:fe:f1:10:b7:36:ad:1e:05:c9:12:8f:03:c4: 14:65:21:6a:2b:06:25:07:80:a4:ef:3e:ec:d8:0c: c5:e3:a4:f1:f6:b3:d4:ba:c2:6f:28:da:b9:00:06: 8f:0d:cf:43:3c:26:fc:0c:96:71:aa:f3:41:96:e7: d6:03:3b:59:e7:ea:7e:c9:c0:c7:1d:32:20:b5:ac: 5d:a5:c0:2b:fe:90:94:7c:b7:d8:a3:a8:74:9e:bc: 2b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8A:81:D3:10:20:C4:50:2C:59:87:48:09:6D:73:31:06:DA:D2:F0 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:4c:71:43:91:c0:2b:f2:8a:02:43:74:61:60:f3:3e:29:b6: af:6d:b0:56:9d:f4:be:ce:7f:6e:54:06:c1:45:02:d3:a7:b8: 1f:b7:7b:84:d4:15:23:61:c7:f6:98:21:31:e5:23:44:ad:7b: c8:14:e5:3d:ea:d7:e3:b7:29:16:78:60:9a:31:ae:8a:d1:d6: 6f:5b:8e:ec:c3:9e:88:73:42:f6:31:1b:51:84:d8:a4:f2:3e: 8e:0b:a8:f2:92:c7:63:f7:82:99:12:81:5c:b0:9f:45:79:9b: 01:90:2d:af:1e:e5:12:0f:6e:ff:81:9d:3c:e7:42:20:17:7c: 28:d7:30:0d:92:2c:cc:fd:4a:d8:d4:7d:51:5c:3b:9d:11:72: 46:72:6f:1a:36:67:9f:19:db:87:d3:6e:f6:0a:81:81:85:ab: 3b:bc:18:a9:31:c6:16:e4:a5:77:9f:e1:fd:13:2f:0c:da:38: 08:03:15:35:ef:6a:d1:bc:af:92:c9:3c:75:49:22:d5:80:ae: 9a:db:83:1b:34:cb:06:02:e7:41:ad:0b:64:b7:13:34:f3:1c: ae:9e:3c:95:bc:9a:1c:ed:54:1c:a9:e2:a5:41:40:db:d4:3f: 8e:21:fa:98:60:77:0f:2e:7f:dd:3b:ba:75:c4:b7:35:51:0f: 30:6b:4f:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUxMTAzMDIxMzA3WhcNMjUxMTEwMDIxMzA3WjAYMRYwFAYD VQQDEw02OTA4MGZiMy01N2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+RbH9yO+8vS4NejTANxxQiXmI9bvYNS+ZIz6v2beGa0Acrs9SIkXIZDNrW1H RxFULPmEJl/x5ZMfbBWod/by4dxe/V7XvRczDJvn7LmnKwMiejzDiRxZy9VDZZd6 cCccOqk3ditHECV0sd64P4VQ7dsWlgwLlC4Ot40RqHss/Y65hrk9wIBpCvSltk/u xquLCKw08CCm3fzpE4H50H8xracDDpjbmv7xELc2rR4FyRKPA8QUZSFqKwYlB4Ck 7z7s2AzF46Tx9rPUusJvKNq5AAaPDc9DPCb8DJZxqvNBlufWAztZ5+p+ycDHHTIg taxdpcAr/pCUfLfYo6h0nrwrtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCKgdMQ IMRQLFmHSAltczEG2tLwMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBTHFDkcAr8ooCQ3RhYPM+KbavbbBWnfS+zn9uVAbBRQLTp7gft3uE 1BUjYcf2mCEx5SNErXvIFOU96tfjtykWeGCaMa6K0dZvW47sw56Ic0L2MRtRhNik 8j6OC6jyksdj94KZEoFcsJ9FeZsBkC2vHuUSD27/gZ0850IgF3wo1zANkizM/UrY 1H1RXDudEXJGcm8aNmefGduH0272CoGBhas7vBipMcYW5KV3n+H9Ey8M2jgIAxU1 72rRvK+SyTx1SSLVgK6a24MbNMsGAudBrQtktxM08xyunjyVvJoc7VQcqeKlQUDb 1D+OIfqYYHcPLn/dO7p1xLc1UQ8wa0+e -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:57 2025 by rpki-client