$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: ma0jIdLuWsZTcqImeknjQTYkm0dlbgPMI9ENt0P/kqc= Subject key identifier: 0A:FE:AA:48:10:F2:C8:84:9E:4F:A0:90:F0:5D:45:B6:5F:0C:C3:6D Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 015D Signing time: Mon 03 Nov 2025 04:12:15 +0000 Manifest this update: Mon 03 Nov 2025 04:12:14 +0000 Manifest next update: Mon 10 Nov 2025 04:12:14 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: sBS0hLPCfify0+mOoJSlxNWDPsJVR99f17zGXBTfqNc=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Nov 3 04:12:14 2025 GMT Not After : Nov 10 04:12:14 2025 GMT Subject: CN=69082b9e-b13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:08:55:bf:21:05:b8:95:3f:38:74:a5:6e: 48:78:70:a6:08:9e:17:06:cd:62:4f:2a:12:ae:3f: 1c:d6:88:12:19:66:a5:a4:03:6d:29:3c:d9:85:94: 0b:67:71:00:5b:5f:ce:23:46:53:f8:56:22:6b:5e: bf:28:78:29:db:88:3a:8f:14:9d:17:e8:a8:b4:5f: 98:4c:cf:64:28:60:b5:92:d2:3b:a8:d1:97:4f:cc: 0c:59:c7:ff:73:78:3f:b8:d4:e4:8b:81:1c:c3:19: b0:14:5b:00:9f:7d:72:79:e5:91:1a:82:89:94:46: 50:83:64:70:91:8d:c3:53:84:5b:15:49:11:bb:c0: b9:8f:fe:bd:55:2a:e2:c1:55:38:52:e6:5b:88:6d: d1:de:4e:da:48:f9:78:0a:ea:4c:d0:72:7e:1d:bf: b7:30:c3:73:c3:d7:71:0f:36:3c:41:da:51:ce:23: f5:66:35:e9:c9:b2:ac:ed:6c:9a:64:e2:59:52:59: 13:6e:c6:4e:49:9a:b4:ce:0d:83:ca:52:b9:6e:45: eb:42:82:43:b0:93:ec:80:ab:39:47:f3:6c:5b:3d: 15:82:4f:bb:c1:db:2c:3c:a8:0f:2e:fc:b9:b9:36: dd:5b:7c:61:24:8d:32:ae:83:0f:6b:6d:62:c9:fc: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FE:AA:48:10:F2:C8:84:9E:4F:A0:90:F0:5D:45:B6:5F:0C:C3:6D X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3a:a9:02:16:c1:cd:d4:aa:1d:ee:49:4f:07:e9:b2:8d:8e: dc:79:c8:5b:6d:a7:e3:7d:0c:cb:cf:48:bd:d5:5f:79:2c:cf: a5:8b:63:ea:f7:23:69:9f:b1:f7:ec:93:fb:1a:90:38:6c:aa: 16:a1:8a:d4:22:33:5b:60:26:5d:fe:54:46:37:bf:45:1e:d4: 40:af:bc:5c:80:c3:c5:b6:ac:24:2e:2c:e8:84:5b:77:0f:94: fd:5a:e0:11:df:7b:d4:03:80:c0:35:9b:9e:9d:7e:23:e8:3c: 5e:4f:88:cd:c3:dc:43:7d:3d:08:3b:49:5b:26:04:63:4e:93: d4:02:22:5a:ec:a8:87:6d:ec:f4:b0:3a:e2:66:58:62:4c:d8: df:85:14:16:01:cb:64:d6:4c:0f:3f:48:71:2c:a8:f8:e5:26: 06:6c:b0:46:ce:1f:f9:99:91:6f:96:20:b0:bc:a7:5a:9e:72: 2d:5a:45:dc:4e:5e:d0:61:5d:ae:32:0a:22:4d:56:78:d1:a2: 25:28:6b:a6:0a:33:c4:0a:34:61:ec:8a:d9:3a:55:cc:c2:b2: 16:1c:f7:f0:92:c6:e0:42:f3:1d:3c:c6:dd:7b:84:49:54:d2: d3:89:d3:92:a6:c2:28:71:c0:db:10:49:e4:f7:ef:16:37:f3: ca:40:c8:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUxMTAzMDQxMjE0WhcNMjUxMTEwMDQxMjE0WjAYMRYwFAYD VQQDEw02OTA4MmI5ZS1iMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKEIVb8hBbiVPzh0pW5IeHCmCJ4XBs1iTyoSrj8c1ogSGWalpANtKTzZhZQL Z3EAW1/OI0ZT+FYia16/KHgp24g6jxSdF+iotF+YTM9kKGC1ktI7qNGXT8wMWcf/ c3g/uNTki4EcwxmwFFsAn31yeeWRGoKJlEZQg2RwkY3DU4RbFUkRu8C5j/69VSri wVU4UuZbiG3R3k7aSPl4CupM0HJ+Hb+3MMNzw9dxDzY8QdpRziP1ZjXpybKs7Wya ZOJZUlkTbsZOSZq0zg2DylK5bkXrQoJDsJPsgKs5R/NsWz0Vgk+7wdssPKgPLvy5 uTbdW3xhJI0yroMPa21iyfz3CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr+qkgQ 8siEnk+gkPBdRbZfDMNtMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSOqkCFsHN1Kod7klPB+myjY7cechbbafjfQzLz0i91V95LM+li2Pq 9yNpn7H37JP7GpA4bKoWoYrUIjNbYCZd/lRGN79FHtRAr7xcgMPFtqwkLizohFt3 D5T9WuAR33vUA4DANZuenX4j6DxeT4jNw9xDfT0IO0lbJgRjTpPUAiJa7KiHbez0 sDriZlhiTNjfhRQWActk1kwPP0hxLKj45SYGbLBGzh/5mZFvliCwvKdannItWkXc Tl7QYV2uMgoiTVZ40aIlKGumCjPECjRh7IrZOlXMwrIWHPfwksbgQvMdPMbde4RJ VNLTidOSpsIoccDbEEnk9+8WN/PKQMhH -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:17 2025 by rpki-client