$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: CvXLqTNoLZ5HKHlCNO69OZ8FPz6z1krGN0ovB0CnRwU= Subject key identifier: F4:98:17:2E:36:B6:9C:99:33:74:79:80:EA:4C:53:FC:FA:F6:6C:F9 Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 047F Signing time: Mon 03 Nov 2025 00:05:47 +0000 Manifest this update: Mon 03 Nov 2025 00:05:46 +0000 Manifest next update: Mon 10 Nov 2025 00:05:46 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: kIgUzfYIl7jpJUlBfNgzmEUtjxz7J6SLUxzziSgW5Tk=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Nov 3 00:05:46 2025 GMT Not After : Nov 10 00:05:46 2025 GMT Subject: CN=6907f1da-63aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:56:a8:51:06:e4:d9:92:26:3e:c3:51:7a: 82:15:e6:47:31:10:06:d1:8c:7e:fb:19:71:25:03: f2:18:9b:15:99:c9:59:fc:bb:f3:12:70:fa:11:66: 15:8c:b4:de:41:fd:aa:38:80:01:b6:57:f2:31:57: 93:47:b0:85:34:03:79:f1:7e:49:1c:4b:b9:f4:40: 0c:d8:4f:83:5e:d7:7f:be:7c:fa:35:75:3a:c0:c0: e6:32:ab:d3:f9:ed:b8:a4:f8:92:07:0f:51:94:20: 0c:75:38:e6:d7:e9:e1:4d:a8:fb:e2:dd:19:22:ae: 32:58:ef:13:40:1f:49:8f:42:fe:d1:af:3f:54:14: 5c:59:e2:7e:d5:75:1b:bd:66:5f:cf:01:14:21:70: cc:be:94:95:89:54:b6:a4:a0:80:11:b2:2d:6e:91: dc:18:3b:db:01:f0:36:23:ac:63:aa:d3:7d:35:5a: 79:f5:fc:d7:34:58:19:94:f2:15:77:df:52:5e:77: d3:5a:32:0e:60:b2:3f:79:9f:fd:dd:27:16:da:c4: 5b:1c:37:4b:7d:ef:c3:c6:56:9e:04:f5:7a:1e:d8: ee:44:03:fc:55:c7:83:70:af:c1:9d:af:ed:da:98: 5d:33:69:30:12:9f:22:9c:95:df:8b:0e:5e:ba:88: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:17:2E:36:B6:9C:99:33:74:79:80:EA:4C:53:FC:FA:F6:6C:F9 X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:4a:7c:70:95:ff:44:49:17:85:15:cf:5c:b3:4d:2a:31: 15:64:81:d2:af:44:41:11:da:77:e5:15:1e:ef:3b:68:70:4e: 30:8b:9a:e1:cb:4a:79:76:44:50:f5:e5:8c:c8:92:d3:3f:47: 3a:60:90:d6:bf:b5:ca:b6:cc:9e:c4:37:26:64:c8:da:ba:90: bf:b4:f1:75:bb:ea:e9:22:06:f3:21:f4:17:d8:20:4a:c6:b0: f7:0b:1c:e4:96:73:ef:3b:98:bb:43:e1:ea:25:f4:44:1d:6e: ad:bb:a4:e5:5c:6a:72:cd:5d:55:fa:28:ee:11:af:4d:40:89: 74:cf:3c:10:09:86:8b:b1:ec:3e:b5:7e:39:e9:1d:20:26:00: e5:63:4f:82:15:cd:78:4b:3e:ae:c3:cd:b4:1b:03:e3:86:cf: 86:68:bd:e4:bc:b7:c0:0e:ae:47:61:a9:e7:54:1e:c4:fd:bd: be:e9:98:2e:f8:2f:e2:a1:cd:38:4a:1a:a7:94:5a:39:8d:ef: df:f3:7e:80:f3:a2:92:c9:91:c1:1b:61:bf:94:76:f7:52:2d: 57:64:81:e3:13:50:bf:6e:a9:c5:84:fb:3b:e2:b7:de:25:42: ee:d9:58:e6:a4:7c:86:6d:53:81:b3:25:8d:1e:4c:a7:cb:7e: f9:7b:6d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUxMTAzMDAwNTQ2WhcNMjUxMTEwMDAwNTQ2WjAYMRYwFAYD VQQDEw02OTA3ZjFkYS02M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJJWqFEG5NmSJj7DUXqCFeZHMRAG0Yx++xlxJQPyGJsVmclZ/LvzEnD6EWYV jLTeQf2qOIABtlfyMVeTR7CFNAN58X5JHEu59EAM2E+DXtd/vnz6NXU6wMDmMqvT +e24pPiSBw9RlCAMdTjm1+nhTaj74t0ZIq4yWO8TQB9Jj0L+0a8/VBRcWeJ+1XUb vWZfzwEUIXDMvpSViVS2pKCAEbItbpHcGDvbAfA2I6xjqtN9NVp59fzXNFgZlPIV d99SXnfTWjIOYLI/eZ/93ScW2sRbHDdLfe/DxlaeBPV6HtjuRAP8VceDcK/Bna/t 2phdM2kwEp8inJXfiw5euog+RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSYFy42 tpyZM3R5gOpMU/z69mz5MB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeF0p8cJX/REkXhRXPXLNNKjEVZIHSr0RBEdp35RUe7ztocE4wi5rh y0p5dkRQ9eWMyJLTP0c6YJDWv7XKtsyexDcmZMjaupC/tPF1u+rpIgbzIfQX2CBK xrD3CxzklnPvO5i7Q+HqJfREHW6tu6TlXGpyzV1V+ijuEa9NQIl0zzwQCYaLsew+ tX456R0gJgDlY0+CFc14Sz6uw820GwPjhs+GaL3kvLfADq5HYannVB7E/b2+6Zgu +C/ioc04ShqnlFo5je/f836A86KSyZHBG2G/lHb3Ui1XZIHjE1C/bqnFhPs74rfe JULu2VjmpHyGbVOBsyWNHkyny375e20y -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:56 2025 by rpki-client