$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json) Hash identifier: KG7OJO4kJi5M9VN65x0V64G0coS6W4thveD1k/yn5eE= Subject key identifier: FA:BB:E4:35:BB:4E:E9:86:71:7E:8E:6F:C2:2B:67:4F:3B:45:CC:E6 Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft Manifest number: 04D1 Signing time: Sun 02 Nov 2025 23:46:33 +0000 Manifest this update: Sun 02 Nov 2025 23:46:32 +0000 Manifest next update: Sun 09 Nov 2025 23:46:32 +0000 Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: F+AsVK4olPM/Lh6l7PWSV6H0hg+Dickh5vSYMCi/yqg=) 2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Validity Not Before: Nov 2 23:46:32 2025 GMT Not After : Nov 9 23:46:32 2025 GMT Subject: CN=6907ed58-2a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:43:7a:9a:d8:27:4a:cf:e4:3a:1d:16:97: 69:eb:19:31:2a:3a:9b:d5:85:98:95:3a:1f:6d:07: 84:8c:8a:61:92:23:29:96:4f:4f:3f:e8:3b:17:8f: 4b:97:0c:ab:8e:5d:87:d4:81:a1:5c:ec:29:c6:2e: 18:27:92:39:67:65:d6:1d:09:41:05:9a:b8:4e:f6: 81:b3:dd:41:b5:a6:6e:50:3b:f4:bf:e8:b5:03:37: 54:48:cd:57:e6:9d:9e:05:8f:98:6c:a8:68:97:6b: 8c:40:b5:69:70:4d:c9:84:03:3f:1c:c5:e7:b3:2c: 4c:cf:37:db:4e:80:04:73:4f:2f:82:70:ab:f6:37: be:bc:5c:1e:0e:8d:90:62:cc:40:b9:95:a6:54:4d: 10:34:8a:f4:2c:b8:c8:17:20:eb:64:68:3b:0b:90: b9:dc:af:8f:07:88:c3:d4:9d:43:f3:fa:67:29:e6: 9c:48:bb:0c:99:7d:26:3a:3f:0d:09:1c:af:e6:d2: 47:ce:4b:cf:4d:34:5c:ff:25:1e:20:43:5e:52:a8: 4a:a6:47:b7:c1:11:00:d6:2a:ca:da:83:b3:8f:b3: 1e:c1:05:04:73:4b:9c:e5:e6:e6:23:5a:02:06:e0: 3c:a9:f8:a9:b3:72:7c:10:93:11:72:05:30:b3:b3: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:E4:35:BB:4E:E9:86:71:7E:8E:6F:C2:2B:67:4F:3B:45:CC:E6 X509v3 Authority Key Identifier: keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:43:d8:cb:41:a8:7a:a1:ef:67:57:7a:cc:04:e6:14:d4:9f: cd:1b:f5:0a:08:90:be:26:7d:20:b9:e6:af:a7:d1:0a:5e:da: c8:62:6b:ca:ed:60:64:a8:a8:02:5b:a8:a6:b4:c5:71:1a:82: 33:83:a6:23:fb:fa:65:4f:98:07:4e:a9:80:14:d3:f6:a2:fd: 78:0f:9a:91:0f:b0:8b:71:98:82:15:cd:6d:f7:7b:bd:7f:23: cf:0c:37:3b:06:f9:11:18:b6:40:f9:d0:50:8a:e8:0d:6e:12: a4:50:40:59:7a:41:b0:d4:40:22:e2:8c:67:6b:9e:2c:ea:6b: 13:32:cd:cf:96:c6:85:60:3f:cf:86:30:01:26:69:f5:c7:e5: 1e:a9:c6:14:fb:56:04:cc:d1:af:73:06:bc:4a:80:d4:f2:c6: 9e:02:f9:7e:89:ae:ef:32:ef:ee:4e:a3:12:62:98:f6:4f:c8: 03:22:fd:32:24:da:4d:bd:e8:3e:84:3c:0a:97:3f:a7:8a:2a: e7:77:c0:9d:f3:7a:0f:e7:cd:64:ba:73:69:9a:05:1b:da:f7: 8d:cd:b8:06:dc:03:e9:84:c4:d6:b7:29:19:48:2d:f0:f9:7c: 61:33:37:34:00:d4:7b:63:16:09:54:90:4c:50:a7:3b:47:9d: e9:a5:ef:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF Qjk4RTFCNUQwHhcNMjUxMTAyMjM0NjMyWhcNMjUxMTA5MjM0NjMyWjAYMRYwFAYD VQQDEw02OTA3ZWQ1OC0yYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUxDeprYJ0rP5DodFpdp6xkxKjqb1YWYlTofbQeEjIphkiMplk9PP+g7F49L lwyrjl2H1IGhXOwpxi4YJ5I5Z2XWHQlBBZq4TvaBs91BtaZuUDv0v+i1AzdUSM1X 5p2eBY+YbKhol2uMQLVpcE3JhAM/HMXnsyxMzzfbToAEc08vgnCr9je+vFweDo2Q YsxAuZWmVE0QNIr0LLjIFyDrZGg7C5C53K+PB4jD1J1D8/pnKeacSLsMmX0mOj8N CRyv5tJHzkvPTTRc/yUeIENeUqhKpke3wREA1irK2oOzj7MewQUEc0uc5ebmI1oC BuA8qfips3J8EJMRcgUws7N55wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPq75DW7 TumGcX6Ob8IrZ087RczmMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2 Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABQ9jLQah6oe9nV3rMBOYU1J/NG/UKCJC+Jn0gueavp9EKXtrIYmvK 7WBkqKgCW6imtMVxGoIzg6Yj+/plT5gHTqmAFNP2ov14D5qRD7CLcZiCFc1t93u9 fyPPDDc7BvkRGLZA+dBQiugNbhKkUEBZekGw1EAi4oxna54s6msTMs3PlsaFYD/P hjABJmn1x+UeqcYU+1YEzNGvcwa8SoDU8saeAvl+ia7vMu/uTqMSYpj2T8gDIv0y JNpNveg+hDwKlz+niirnd8Cd83oP581kunNpmgUb2veNzbgG3APphMTWtykZSC3w +XxhMzc0ANR7YxYJVJBMUKc7R53ppe+G -----END CERTIFICATE-----Generated at Mon Nov 3 16:02:49 2025 by rpki-client