$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: CPNFQXntsa+Y2rvOZIfWMFjcSHBimgGq7cPOj0WVOr0= Subject key identifier: 86:25:0E:33:21:8C:3C:F5:C5:76:81:AB:55:68:7F:BB:21:CB:85:6C Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 05D4 Signing time: Sun 02 Nov 2025 23:04:01 +0000 Manifest this update: Sun 02 Nov 2025 23:04:00 +0000 Manifest next update: Sun 09 Nov 2025 23:04:00 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: I6A2z3b39lpQyarb7N3iobQ9Smji1dXkY0WjAVyDp6U=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Nov 2 23:04:00 2025 GMT Not After : Nov 9 23:04:00 2025 GMT Subject: CN=6907e360-1805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:d6:b1:2c:44:21:17:43:34:f3:1b:59:a3: 73:0c:1f:6b:24:27:a8:e0:66:6f:76:c4:ac:6f:9f: b9:00:04:47:77:63:3b:e0:86:9f:bc:ba:0d:e0:c5: 0b:2c:98:8b:b4:95:8a:9e:c7:a5:c1:76:90:90:ea: f9:1d:c6:15:8d:23:c5:ee:ca:76:3f:b2:b6:f9:a3: 1f:0c:0d:8f:59:72:df:b7:0c:b0:ec:cf:e9:4d:c6: 34:52:db:c6:36:31:d8:51:de:b7:fa:5d:67:a2:15: 90:30:81:69:73:11:7e:49:13:9d:40:99:51:0f:4f: 92:e6:25:ca:82:fe:f3:a8:a7:c9:dd:0f:a4:6e:06: 89:48:0c:04:c4:85:f6:ac:50:9a:5e:e5:25:c4:01: 1b:ce:54:4f:a8:8b:48:a4:de:99:82:63:7f:a2:a7: 19:66:1b:17:d2:dc:ed:eb:2f:50:7c:9d:dc:4d:6a: cc:47:b5:52:09:99:89:60:f4:7f:94:0a:9e:f1:2f: 12:fc:19:cf:a0:16:ef:ba:37:35:8b:82:ac:47:ab: 4c:ca:cb:a8:05:e8:5a:92:24:a5:2d:f6:ed:1b:00: 06:9d:84:bb:d2:12:c6:47:a5:22:fc:96:af:18:7b: cd:d3:da:e4:5d:ac:68:3d:a4:92:e0:89:47:20:45: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:25:0E:33:21:8C:3C:F5:C5:76:81:AB:55:68:7F:BB:21:CB:85:6C X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:93:5e:bd:62:14:79:2d:0c:6c:7c:68:80:73:77:a3:bd:ce: 00:89:0a:88:7a:2f:2c:1b:42:5e:1b:9e:a3:dd:4c:a3:eb:d6: d4:b2:62:1c:ae:3e:6d:ac:8e:39:52:04:55:35:6d:0b:f5:a9: 7c:08:c1:97:c7:b7:7c:b4:d8:8b:22:5e:f7:9d:b4:2b:5b:82: 68:3a:21:18:fe:cf:71:6f:59:9a:c9:c4:79:fd:b3:b1:ee:4b: 16:eb:88:3b:cd:f6:f8:e2:c6:9d:a1:29:21:16:b5:45:b2:3d: 8d:9f:3a:5b:c4:66:bc:77:16:a1:c6:c7:94:50:cb:17:e8:30: b1:f8:62:f7:dd:16:70:62:99:13:fd:dc:51:60:5a:8e:63:4d: 35:e0:4e:a7:c1:f9:a1:da:c8:78:58:67:ec:19:1f:96:8d:fa: b2:7c:fc:3e:4f:3e:fe:99:2b:b6:5b:3d:29:ef:14:9e:5d:a5: 90:4d:2b:31:44:7c:dc:fb:27:55:aa:72:77:94:e1:a6:6c:13: e4:7d:5b:9d:62:8b:07:11:91:ec:db:05:bc:66:87:e2:b5:4b: e8:d0:5e:6c:8f:1a:70:1d:79:5b:d8:d4:81:86:5b:a4:1b:1c: 9c:07:ca:64:73:19:dd:e9:ca:02:52:56:11:03:83:6a:7f:14: 60:e6:c4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUxMTAyMjMwNDAwWhcNMjUxMTA5MjMwNDAwWjAYMRYwFAYD VQQDEw02OTA3ZTM2MC0xODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstPWsSxEIRdDNPMbWaNzDB9rJCeo4GZvdsSsb5+5AARHd2M74IafvLoN4MUL LJiLtJWKnselwXaQkOr5HcYVjSPF7sp2P7K2+aMfDA2PWXLftwyw7M/pTcY0UtvG NjHYUd63+l1nohWQMIFpcxF+SROdQJlRD0+S5iXKgv7zqKfJ3Q+kbgaJSAwExIX2 rFCaXuUlxAEbzlRPqItIpN6ZgmN/oqcZZhsX0tzt6y9QfJ3cTWrMR7VSCZmJYPR/ lAqe8S8S/BnPoBbvujc1i4KsR6tMysuoBehakiSlLfbtGwAGnYS70hLGR6Ui/Jav GHvN09rkXaxoPaSS4IlHIEUOSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYlDjMh jDz1xXaBq1Vof7shy4VsMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEk169YhR5LQxsfGiAc3ejvc4AiQqIei8sG0JeG56j3Uyj69bUsmIc rj5trI45UgRVNW0L9al8CMGXx7d8tNiLIl73nbQrW4JoOiEY/s9xb1maycR5/bOx 7ksW64g7zfb44sadoSkhFrVFsj2NnzpbxGa8dxahxseUUMsX6DCx+GL33RZwYpkT /dxRYFqOY0014E6nwfmh2sh4WGfsGR+WjfqyfPw+Tz7+mSu2Wz0p7xSeXaWQTSsx RHzc+ydVqnJ3lOGmbBPkfVudYosHEZHs2wW8ZofitUvo0F5sjxpwHXlb2NSBhluk GxycB8pkcxnd6coCUlYRA4NqfxRg5sTw -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:10 2025 by rpki-client