$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: p/HmzsVX7xhNOby5VbtolNBGb4mQxzmpXRueY66Qjt4= Subject key identifier: 4D:34:8B:D8:53:C7:D6:B2:BD:4B:F4:C3:67:57:8D:E1:F9:EB:4F:C4 Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 08:00:47 +0000 Manifest this update: Mon 03 Nov 2025 08:00:46 +0000 Manifest next update: Mon 10 Nov 2025 08:00:46 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: q9c+W2xk+kuz44Cdhm2ooGV9YYQ1tVfGvObMYLknAG0=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: 5k0XibRJRAi1MAo51wXtFTLJ6nvUXfkdSDCq/B/6+Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Nov 3 08:00:46 2025 GMT Not After : Nov 10 08:00:46 2025 GMT Subject: CN=6908612e-c8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:22:5d:d6:1b:dc:92:16:e1:a3:cd:09:b0: 91:04:24:2d:21:98:94:d0:eb:c3:bf:1e:9d:1a:76: 82:ec:1a:5e:fe:10:05:16:d0:7b:f0:d5:6a:d7:cf: 20:a8:5b:59:56:77:49:4f:bf:ab:8f:fe:57:05:c2: 48:c7:3a:58:0e:1c:e1:15:3b:74:0f:67:ab:4b:b2: 33:57:75:e6:aa:13:d4:17:44:68:5f:14:b6:ae:21: d3:81:ed:0d:80:fc:86:3e:66:9a:b5:9d:34:5c:75: 52:f4:41:74:c8:a8:fc:32:11:16:a4:51:0a:19:ee: d9:d3:dd:44:b2:c3:b7:93:8b:89:86:63:77:3e:a5: 94:3a:c7:3e:58:9f:ac:97:2a:91:ee:10:fb:50:ac: ff:dc:3e:d0:c6:e2:c7:2c:00:d4:e3:5c:86:98:9d: b6:8d:cb:ab:37:71:f1:b4:a5:d2:5b:e5:40:0b:ea: 64:a1:13:ff:f0:c3:86:6c:54:0a:1f:2d:32:45:e0: 85:4b:a0:17:a2:ee:f8:7e:fd:1f:c6:ea:a5:25:14: 5f:ba:28:9f:e9:7e:6e:a8:6e:8a:0d:c7:76:cb:31: ea:65:e9:74:a3:95:26:2c:9a:f3:9e:b6:36:a1:fb: 55:a0:b0:50:e1:87:78:c1:03:5c:1d:89:89:d8:47: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:34:8B:D8:53:C7:D6:B2:BD:4B:F4:C3:67:57:8D:E1:F9:EB:4F:C4 X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ad:df:fe:d8:64:21:be:08:c2:cf:fe:80:52:23:20:dc:7d: 2f:78:51:67:53:c5:e0:3e:43:68:4b:55:67:d4:99:f9:56:be: 4f:d5:48:e0:a1:58:4d:b2:6a:68:25:96:b0:96:c9:14:c5:af: c7:c2:f1:a9:b9:3a:33:63:67:85:65:cc:04:7d:ca:8e:0f:8d: 65:17:09:ac:9f:81:4a:f4:ec:fb:85:7f:72:c3:ab:80:8b:4e: ba:cc:2c:ab:1c:5e:7a:e1:5c:9a:f5:7e:11:a2:ac:d7:8c:ac: ec:bd:f4:bb:47:f1:40:7b:49:00:8f:be:78:7d:9c:91:cd:6f: a3:f4:58:2c:44:ce:f1:97:71:71:6f:7f:1d:30:aa:32:fc:fb: 53:ad:4e:83:28:1d:ba:f7:52:1e:6b:7e:93:37:23:f9:1b:b9: 47:17:c2:a9:44:e2:69:29:8c:56:4e:30:7e:e8:94:0c:8e:bb: 6c:c5:1b:7c:37:79:ee:9a:0c:e0:42:68:36:bf:b4:20:af:5c: 21:76:02:1e:c9:65:73:32:3f:b2:1b:22:15:3f:f6:fc:e5:27: 53:3c:c5:92:27:5d:86:9c:01:5d:c5:f7:2f:c5:25:7e:d7:b9: 6b:1f:2c:cc:30:0e:3f:73:e2:62:d4:02:2c:ac:b4:08:15:be: c7:c8:55:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDAyRDExMC8GA1UEBRMoNjU0RTAyMDEyNUMxQjc1MDc4MjZGMDVGRERBOTI0QjUy ODc0MDhGOTAeFw0yNTExMDMwODAwNDZaFw0yNTExMTAwODAwNDZaMBgxFjAUBgNV BAMTDTY5MDg2MTJlLWM4ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0JCJd1hvckhbho80JsJEEJC0hmJTQ68O/Hp0adoLsGl7+EAUW0Hvw1WrXzyCo W1lWd0lPv6uP/lcFwkjHOlgOHOEVO3QPZ6tLsjNXdeaqE9QXRGhfFLauIdOB7Q2A /IY+Zpq1nTRcdVL0QXTIqPwyERakUQoZ7tnT3USyw7eTi4mGY3c+pZQ6xz5Yn6yX KpHuEPtQrP/cPtDG4scsANTjXIaYnbaNy6s3cfG0pdJb5UAL6mShE//ww4ZsVAof LTJF4IVLoBei7vh+/R/G6qUlFF+6KJ/pfm6obooNx3bLMepl6XSjlSYsmvOetjah +1WgsFDhh3jBA1wdiYnYR7I7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTTSL2FPH 1rK9S/TDZ1eN4fnrT8QwHwYDVR0jBBgwFoAUZU4CASXBt1B4JvBf3akktSh0CPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMDJELzE0OUQ1QjUyQURB NjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlU0Q0FTWEJ0MUI0SnZCZjNha2t0U2gwQ1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MDJELzE0OUQ1QjUyQURBNjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFC NEp2QmYzYWtrdFNoMENQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABut3/7YZCG+CMLP/oBSIyDcfS94UWdTxeA+Q2hLVWfUmflWvk/VSOCh WE2yamgllrCWyRTFr8fC8am5OjNjZ4VlzAR9yo4PjWUXCayfgUr07PuFf3LDq4CL TrrMLKscXnrhXJr1fhGirNeMrOy99LtH8UB7SQCPvnh9nJHNb6P0WCxEzvGXcXFv fx0wqjL8+1OtToMoHbr3Uh5rfpM3I/kbuUcXwqlE4mkpjFZOMH7olAyOu2zFG3w3 ee6aDOBCaDa/tCCvXCF2Ah7JZXMyP7IbIhU/9vzlJ1M8xZInXYacAV3F9y/FJX7X uWsfLMwwDj9z4mLUAiystAgVvsfIVfY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:52 2025 by rpki-client