$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: R0MQ0AsgpYSaDouBB3GW7/1apahQAi3Kt8o2QImU8pg= Subject key identifier: 3F:34:7A:C4:30:D0:C5:D0:6C:05:B5:DC:86:91:0A:25:DE:7C:30:F2 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 0C Signing time: Fri 17 Oct 2025 11:51:54 +0000 Manifest this update: Fri 17 Oct 2025 11:51:53 +0000 Manifest next update: Fri 24 Oct 2025 11:51:53 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: k2VTEDEppjKdxOIWdmBj7p8zaA3amctZkr24JIvjuQE=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: qXahNWKD3ULNKbUsqqR6NoyLBXctmb1mpVL8KL1rQa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Oct 17 11:51:53 2025 GMT Not After : Oct 24 11:51:53 2025 GMT Subject: CN=68f22dda-96c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:20:48:71:c1:9d:8d:41:bf:ea:d5:84:08: 0a:1f:5c:16:c6:dd:77:ce:cc:8a:af:44:be:a5:1a: 8b:88:02:4e:86:ee:54:fc:2f:95:d5:a8:10:08:42: 1c:a1:7b:c6:f6:04:b7:cd:8e:81:79:01:fe:92:b9: 66:45:1d:e0:f4:21:cf:ee:d2:34:63:06:d0:f2:ad: a6:7e:58:3d:8b:b6:3f:66:97:ac:23:b3:0d:84:9b: cc:55:14:07:7c:6f:b3:43:51:5e:37:69:78:1d:10: 8f:e6:6d:d8:97:b1:d0:fc:8e:12:e6:f1:2c:b6:30: c9:c9:b6:a6:8d:0c:9a:ae:b7:24:f9:f9:65:a9:81: 9b:00:ed:39:f7:e2:52:af:f0:3b:ec:64:1b:8e:75: da:da:2c:47:e7:5e:4d:ef:9c:ea:1e:80:58:fc:b3: 3c:c7:e7:af:4a:79:4f:ed:20:5c:e8:2d:bb:42:88: 07:3e:9a:05:ab:d0:e6:bc:63:10:14:61:8c:fb:24: c1:79:69:81:f5:ae:e5:c8:36:ed:eb:1b:8b:08:44: 5b:d4:5f:b3:0d:c8:dd:50:bb:86:52:82:90:00:79: 82:f6:ea:62:9a:54:ee:f9:8c:d7:63:c5:04:dd:9a: de:3d:56:b3:b8:3c:4a:18:b8:f1:03:c6:d4:0a:35: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:34:7A:C4:30:D0:C5:D0:6C:05:B5:DC:86:91:0A:25:DE:7C:30:F2 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:48:47:6b:94:e7:e3:ae:7e:98:c4:7c:dc:cc:9e:99:df:64: 92:13:11:d4:2f:87:f2:f0:54:b7:e1:2f:ec:a5:33:1c:f1:9a: 99:0a:85:2b:50:0d:14:5f:d6:64:67:03:9d:93:99:4c:73:f2: 60:87:4c:67:64:d2:5f:28:e3:ad:3b:f1:3a:d9:90:62:d3:34: 42:85:aa:59:b6:c2:2d:c0:41:37:5b:cd:b1:91:b7:ed:99:f5: 65:13:1c:03:b1:c3:2c:0c:11:49:ba:fd:15:43:86:5f:6f:db: 4c:a1:b2:f4:d3:21:2c:78:ec:22:4a:a4:cb:0f:83:55:58:74: 08:ed:fb:db:89:87:1e:9b:55:e2:22:9d:72:6c:05:f8:c2:7f: 4e:73:0c:12:f1:a6:df:91:4e:15:ae:1e:5d:4d:2b:be:ae:7b: 60:36:8d:64:71:5a:32:38:05:1f:29:5c:f7:57:94:37:e0:3d: 09:3b:d0:72:1d:ee:64:42:50:e6:2d:52:86:12:86:c5:52:0f: 7b:8e:cf:37:91:00:1a:6a:2b:92:3b:c9:00:28:af:4c:8e:3f: 41:d1:9a:07:5c:7a:87:b4:93:e7:5e:04:14:5b:b6:a6:56:84: b5:0c:54:18:18:68:3e:24:83:9f:b6:a3:52:73:02:31:51:16: d8:9e:e8:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNTEwMTcxMTUxNTNaFw0yNTEwMjQxMTUxNTNaMBgxFjAUBgNV BAMTDTY4ZjIyZGRhLTk2YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN7SBIccGdjUG/6tWECAofXBbG3XfOzIqvRL6lGouIAk6G7lT8L5XVqBAIQhyh e8b2BLfNjoF5Af6SuWZFHeD0Ic/u0jRjBtDyraZ+WD2Ltj9ml6wjsw2Em8xVFAd8 b7NDUV43aXgdEI/mbdiXsdD8jhLm8Sy2MMnJtqaNDJqutyT5+WWpgZsA7Tn34lKv 8DvsZBuOddraLEfnXk3vnOoegFj8szzH569KeU/tIFzoLbtCiAc+mgWr0Oa8YxAU YYz7JMF5aYH1ruXINu3rG4sIRFvUX7MNyN1Qu4ZSgpAAeYL26mKaVO75jNdjxQTd mt49VrO4PEoYuPEDxtQKNSbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPzR6xDDQ xdBsBbXchpEKJd58MPIwHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1IR2uU5+OufpjEfNzMnpnfZJITEdQvh/LwVLfhL+ylMxzxmpkKhStQ DRRf1mRnA52TmUxz8mCHTGdk0l8o46078TrZkGLTNEKFqlm2wi3AQTdbzbGRt+2Z 9WUTHAOxwywMEUm6/RVDhl9v20yhsvTTISx47CJKpMsPg1VYdAjt+9uJhx6bVeIi nXJsBfjCf05zDBLxpt+RThWuHl1NK76ue2A2jWRxWjI4BR8pXPdXlDfgPQk70HId 7mRCUOYtUoYShsVSD3uOzzeRABpqK5I7yQAor0yOP0HRmgdceoe0k+deBBRbtqZW hLUMVBgYaD4kg5+2o1JzAjFRFtie6MY= -----END CERTIFICATE-----Generated at Sat Oct 18 23:19:32 2025 by rpki-client