$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json) Hash identifier: dCMUAguDMa6SMu9igHrhu5z3LWRvs+3ZaQX6zA4/38c= Subject key identifier: 72:0E:EE:AC:A3:67:31:FE:CC:9E:9B:5A:EC:88:72:D5:3C:B3:6E:DC Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft Manifest number: 07 Signing time: Fri 17 Oct 2025 11:56:40 +0000 Manifest this update: Fri 17 Oct 2025 11:56:39 +0000 Manifest next update: Fri 24 Oct 2025 11:56:39 +0000 Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: m9HLNKgTXyPCkoDchbQZhE2oTAfY1lLSiC8VQHZIRzQ=) 2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: 4+Fz/s7urhRbpWxiqcwm2WW31Se8f+bopMU0fcrID14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Validity Not Before: Oct 17 11:56:39 2025 GMT Not After : Oct 24 11:56:39 2025 GMT Subject: CN=68f22ef8-49a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:41:57:c8:ae:c4:b0:87:ee:ca:af:49:11: 40:23:cc:d7:b0:5b:1f:68:80:18:93:fe:5a:cb:23: af:95:fe:3c:e0:0f:a8:b9:60:05:44:d3:c5:f0:9c: 22:a0:d8:71:d9:70:1b:a6:7d:31:1f:4f:26:7f:9b: 94:7d:6a:dd:c2:23:26:76:9b:2f:dd:17:98:9f:17: dc:f8:80:dd:0b:86:a4:f1:e5:9d:21:c6:1b:bf:04: 17:dc:0d:8c:dd:ae:83:a3:52:0c:a8:9c:8d:cd:a8: b5:7c:fa:18:33:95:ea:4a:0d:23:76:d2:08:bf:dc: dd:92:4b:28:b1:f3:a0:e7:59:b1:5b:c7:f2:9b:ba: 44:55:d8:66:cf:0e:08:28:c3:38:40:05:a4:b0:9b: 94:0f:1e:9a:b2:a1:da:cd:62:6a:56:d0:b2:fe:e3: 7f:63:7f:45:dc:15:bb:45:e7:58:6c:10:28:82:eb: fb:db:39:3b:87:c5:31:15:8c:51:be:67:01:ff:b4: ca:a3:35:65:88:7f:35:eb:c5:b3:15:8b:a4:ca:26: 20:f4:54:2b:86:da:5a:e3:55:99:b2:23:5d:8e:48: d2:ac:a1:1a:e5:68:98:4a:fd:76:bc:37:8b:ff:e4: 5a:41:99:c2:e9:ac:08:a5:25:1c:20:6c:82:49:56: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0E:EE:AC:A3:67:31:FE:CC:9E:9B:5A:EC:88:72:D5:3C:B3:6E:DC X509v3 Authority Key Identifier: keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:dc:a1:ea:1a:04:c9:6e:3b:2e:94:ec:5d:6c:06:a1:98:83: a9:15:b5:5d:df:91:50:18:f8:7b:7d:5d:94:f2:96:db:61:05: f0:14:29:25:37:82:57:a5:d0:6c:7f:ad:b2:39:f5:1d:46:93: 1a:8f:53:82:67:c0:f5:ec:20:b0:c1:6e:06:0f:fa:b8:97:0e: e5:79:ad:22:22:1f:01:32:f2:af:93:87:dd:2a:15:33:d0:f3: 3a:ad:46:dc:8b:99:cb:b3:e2:da:5d:7d:35:d5:1b:ce:b3:ea: 19:9b:44:4e:14:34:06:9f:3b:45:3c:08:8b:4b:e4:94:ae:c8: 84:17:e1:4f:7b:50:27:05:61:7f:06:e5:db:22:09:c1:8f:1f: 77:d1:51:f2:b4:2b:f3:d0:08:26:ec:50:c3:50:5c:af:84:54: f7:82:66:10:9f:60:5f:da:4e:41:d7:f9:86:f6:ab:e5:0a:a1: 5a:40:5a:44:ff:8d:16:a6:c1:ce:6e:af:31:3e:6f:82:a2:8b: 9d:74:f1:fd:72:0d:3a:40:af:6c:3b:41:0e:61:11:f1:d7:ca: af:b8:80:77:dd:b5:2d:23:98:cf:13:20:e7:c5:c6:30:40:cc: 7c:3e:22:ea:3c:de:72:48:ab:b3:5a:fc:7b:fb:c2:54:a7:a6: 05:14:67:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw NTEyM0EyNDAeFw0yNTEwMTcxMTU2MzlaFw0yNTEwMjQxMTU2MzlaMBgxFjAUBgNV BAMTDTY4ZjIyZWY4LTQ5YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCNUFXyK7EsIfuyq9JEUAjzNewWx9ogBiT/lrLI6+V/jzgD6i5YAVE08XwnCKg 2HHZcBumfTEfTyZ/m5R9at3CIyZ2my/dF5ifF9z4gN0LhqTx5Z0hxhu/BBfcDYzd roOjUgyonI3NqLV8+hgzlepKDSN20gi/3N2SSyix86DnWbFbx/KbukRV2GbPDggo wzhABaSwm5QPHpqyodrNYmpW0LL+439jf0XcFbtF51hsECiC6/vbOTuHxTEVjFG+ ZwH/tMqjNWWIfzXrxbMVi6TKJiD0VCuG2lrjVZmyI12OSNKsoRrlaJhK/Xa8N4v/ 5FpBmcLprAilJRwgbIJJVqi9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcg7urKNn Mf7Mnpta7Ihy1TyzbtwwHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl TTQyLUgtVTVfY1FVU09pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXcoeoaBMluOy6U7F1sBqGYg6kVtV3fkVAY+Ht9XZTyltthBfAUKSU3 glel0Gx/rbI59R1GkxqPU4JnwPXsILDBbgYP+riXDuV5rSIiHwEy8q+Th90qFTPQ 8zqtRtyLmcuz4tpdfTXVG86z6hmbRE4UNAafO0U8CItL5JSuyIQX4U97UCcFYX8G 5dsiCcGPH3fRUfK0K/PQCCbsUMNQXK+EVPeCZhCfYF/aTkHX+Yb2q+UKoVpAWkT/ jRamwc5urzE+b4Kii5108f1yDTpAr2w7QQ5hEfHXyq+4gHfdtS0jmM8TIOfFxjBA zHw+Iuo83nJIq7Na/Hv7wlSnpgUUZ+w= -----END CERTIFICATE-----Generated at Sat Oct 18 23:29:07 2025 by rpki-client