$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: Go5+EHZ+cLTogTDiMShQOQcZXDQKvYve0Xzv868vhlk= Subject key identifier: 48:9E:FD:F6:4B:28:90:85:50:15:65:10:83:0B:48:3E:50:13:86:77 Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2AA9 Signing time: Tue 04 Nov 2025 17:02:03 +0000 Manifest this update: Tue 04 Nov 2025 17:02:02 +0000 Manifest next update: Tue 11 Nov 2025 17:02:02 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: 6Nfv+NtIYIQ8R0UW6p1mgr+H8hH5fMU5nK4zo8aUFn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3727 (0xe8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Nov 4 17:02:02 2025 GMT Not After : Nov 11 17:02:02 2025 GMT Subject: CN=690a318b-1a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:58:42:12:f6:5b:b5:8e:1c:ce:b0:35:0a: 7c:0c:c4:84:ec:ae:62:3c:ae:78:e0:14:d1:4b:01: 32:ec:bf:64:d9:c4:e9:39:c4:ee:8d:d5:0c:2d:6d: de:61:51:3e:aa:29:99:ba:fd:2e:1e:5d:51:97:2c: af:f4:92:43:00:03:ff:6b:25:2b:ba:da:11:b8:11: 68:f0:ad:74:0b:bb:ba:32:13:3f:f1:f2:87:8c:87: a5:8e:b5:b0:86:61:97:26:f1:0b:9b:df:fe:72:14: 3e:05:ea:83:86:db:a8:58:77:e9:ec:12:23:6c:97: 04:6a:78:4b:93:f9:94:f4:88:fd:07:94:5e:13:4a: e0:4e:d0:8c:fa:4a:cd:d4:70:b5:d5:9e:4b:73:5f: 49:91:a0:aa:5a:e8:b2:71:82:82:31:09:5c:43:da: 7f:60:05:3f:0d:93:8d:1d:ea:ef:eb:66:e9:2c:4c: 7f:fb:b9:a6:bc:1f:7b:ed:b9:e5:67:b1:a8:99:b3: 20:6d:3c:96:e7:05:bd:fb:5b:c8:f2:fb:86:75:75: 83:6c:03:4a:15:39:44:b9:0a:2d:a6:42:30:ae:6a: 1c:7b:a5:38:ca:36:47:54:40:da:a6:d9:2b:98:90: 65:38:cb:f9:11:19:21:5a:dd:e4:c2:68:cb:33:29: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9E:FD:F6:4B:28:90:85:50:15:65:10:83:0B:48:3E:50:13:86:77 X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:49:74:da:ed:ae:81:08:e1:35:ea:26:15:14:e6:62:57:4a: 2c:fc:0c:15:68:6a:d7:9b:1c:ce:53:e5:ca:5d:fc:5e:85:93: 93:db:e4:28:eb:97:5a:de:88:80:a3:69:0f:70:c1:7a:22:1a: 6d:bb:5f:0f:4b:6e:9c:55:3e:16:a6:b5:69:2e:fd:fb:e1:d2: f5:b3:9b:12:fd:e8:b6:f8:88:a7:bc:12:b4:cf:50:f5:05:88: 56:55:86:99:f0:d9:4e:7c:9b:a7:8d:cd:f8:57:d0:d9:f0:cc: 83:0d:93:3f:e8:76:5e:f6:13:d0:f1:d5:aa:ec:18:e1:f9:26: 47:0b:dc:5a:4a:4e:be:12:05:12:41:14:7c:24:2e:78:3a:ad: bd:a9:22:81:b2:9a:78:31:86:69:e0:ac:e0:f6:9f:c4:14:fa: b3:26:5a:39:e4:da:91:c5:fb:47:ee:07:22:8d:c0:85:e2:17: 70:be:ee:e8:9a:42:4f:2f:c9:1c:c7:60:fe:db:3b:3e:22:1f: 3d:e1:c0:bc:34:a4:7d:df:a8:1b:51:c0:af:1c:f1:ea:35:7b: 22:95:fb:90:9a:b9:e2:83:3c:59:24:7c:af:42:47:a0:3c:22: 48:3a:a8:75:91:db:4c:bf:d2:8b:ae:22:24:c1:11:3f:bc:cd: 06:a5:9c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUxMTA0MTcwMjAyWhcNMjUxMTExMTcwMjAyWjAYMRYwFAYD VQQDEw02OTBhMzE4Yi0xYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwv1YQhL2W7WOHM6wNQp8DMSE7K5iPK544BTRSwEy7L9k2cTpOcTujdUMLW3e YVE+qimZuv0uHl1Rlyyv9JJDAAP/ayUrutoRuBFo8K10C7u6MhM/8fKHjIeljrWw hmGXJvELm9/+chQ+BeqDhtuoWHfp7BIjbJcEanhLk/mU9Ij9B5ReE0rgTtCM+krN 1HC11Z5Lc19JkaCqWuiycYKCMQlcQ9p/YAU/DZONHerv62bpLEx/+7mmvB977bnl Z7GombMgbTyW5wW9+1vI8vuGdXWDbANKFTlEuQotpkIwrmoce6U4yjZHVEDaptkr mJBlOMv5ERkhWt3kwmjLMykidQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEie/fZL KJCFUBVlEIMLSD5QE4Z3MB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArSXTa7a6BCOE16iYVFOZiV0os/AwVaGrXmxzOU+XKXfxehZOT2+Qo 65da3oiAo2kPcMF6Ihptu18PS26cVT4WprVpLv374dL1s5sS/ei2+IinvBK0z1D1 BYhWVYaZ8NlOfJunjc34V9DZ8MyDDZM/6HZe9hPQ8dWq7Bjh+SZHC9xaSk6+EgUS QRR8JC54Oq29qSKBspp4MYZp4Kzg9p/EFPqzJlo55NqRxftH7gcijcCF4hdwvu7o mkJPL8kcx2D+2zs+Ih894cC8NKR936gbUcCvHPHqNXsilfuQmrnigzxZJHyvQkeg PCJIOqh1kdtMv9KLriIkwRE/vM0GpZwK -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:13 2025 by rpki-client