$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: +OhujtTWioxF1+dO65bI8GhbGkfBHI4UiCxhlrJegWs= Subject key identifier: 4D:3D:40:51:D3:E8:E4:D0:69:DE:D3:C0:E8:51:74:95:7F:2B:73:26 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 0515 Signing time: Sun 02 Nov 2025 23:32:44 +0000 Manifest this update: Sun 02 Nov 2025 23:32:43 +0000 Manifest next update: Sun 09 Nov 2025 23:32:43 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: 7O7XWv7QtowzVQp8mALOSGx4wyVQ5ALMzJ34P1sxFfE=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Nov 2 23:32:43 2025 GMT Not After : Nov 9 23:32:43 2025 GMT Subject: CN=6907ea1c-6d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:98:73:95:30:cb:61:23:f8:e0:2e:fa:e9: 0b:db:7b:cc:c1:70:b4:24:5b:f3:90:ee:fb:54:69: b3:d3:19:0c:f5:0a:5e:1b:f5:ab:fb:0c:5d:b9:52: c8:38:88:64:0e:3c:a6:d4:ca:31:a3:5e:31:77:06: 05:c1:71:7b:76:8e:d9:37:db:9a:4c:1e:a0:92:33: 5a:50:8b:a7:a7:1f:b5:4b:18:78:06:20:73:60:38: 90:3e:b8:1a:c4:ab:61:0e:69:11:58:19:c7:b0:9f: 93:49:0f:50:ec:5f:95:38:ad:6c:a4:c5:16:c9:7c: 38:68:c2:12:70:63:f3:0a:46:a3:de:16:eb:17:21: ed:53:e0:c4:76:d4:6b:51:80:7d:2f:12:34:96:39: 33:48:34:2b:08:c4:3e:cf:2d:1f:06:2f:7a:6e:c6: ac:0f:ee:ed:39:d7:6d:c2:67:9c:d8:32:29:99:b1: 4d:f4:9f:d3:ea:3e:67:88:47:d7:3e:e9:8d:71:9b: df:bb:20:d5:c3:4e:aa:a6:8d:0b:8d:ea:66:80:6a: 55:e2:b3:c2:91:44:77:d1:a4:a5:6b:ca:cc:8d:77: 6d:23:81:2f:fa:29:ba:bc:de:1e:c1:2c:4f:63:e9: 7f:7f:0a:54:73:12:e8:a8:4c:61:ab:3b:b1:4a:7d: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3D:40:51:D3:E8:E4:D0:69:DE:D3:C0:E8:51:74:95:7F:2B:73:26 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d7:d8:11:c4:a2:ad:a7:b4:80:70:92:98:5e:10:bd:e7:78: 5e:7b:be:7d:9e:ec:82:57:af:f1:08:b0:e8:d8:c5:0d:7e:ef: 29:3c:49:4e:2a:f7:a3:30:75:ea:52:f2:4c:ff:63:cc:d5:27: 6c:83:c7:89:10:ae:9a:a0:a6:3b:85:6a:28:74:60:3d:08:af: 61:d2:28:d1:1a:4a:9b:7a:3b:ca:1e:53:74:ee:4f:0b:c4:52: ea:c6:ee:e1:19:4e:ce:00:e0:f7:59:5f:96:9a:60:8e:80:14: 7e:0b:bc:a9:33:1c:73:06:f3:b0:a0:c5:5b:9b:1f:65:56:27: de:62:ac:9b:3d:5b:4f:1e:49:c6:42:60:dd:d5:9b:9c:51:6c: 33:7e:d0:7d:85:06:f0:5b:b3:bc:cb:98:62:e6:1f:d9:aa:b9: 65:04:0f:9f:22:b0:9b:1f:d0:e5:1e:0d:e1:2c:7d:74:ae:39: 5f:9d:4c:af:9c:75:43:d5:4a:93:a7:5d:cf:dd:6f:f4:03:ca: 5d:08:90:65:0f:03:f7:c7:72:4e:dd:5d:ca:1b:71:f4:4a:fa: a7:02:f0:7f:cf:f7:fc:ea:62:44:2b:65:55:cc:58:2a:1b:5b: 07:53:02:ab:cc:49:44:31:2f:c6:86:59:f3:25:fe:70:9d:e7: 81:ea:11:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUxMTAyMjMzMjQzWhcNMjUxMTA5MjMzMjQzWjAYMRYwFAYD VQQDEw02OTA3ZWExYy02ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI+Yc5Uwy2Ej+OAu+ukL23vMwXC0JFvzkO77VGmz0xkM9QpeG/Wr+wxduVLI OIhkDjym1Moxo14xdwYFwXF7do7ZN9uaTB6gkjNaUIunpx+1Sxh4BiBzYDiQPrga xKthDmkRWBnHsJ+TSQ9Q7F+VOK1spMUWyXw4aMIScGPzCkaj3hbrFyHtU+DEdtRr UYB9LxI0ljkzSDQrCMQ+zy0fBi96bsasD+7tOddtwmec2DIpmbFN9J/T6j5niEfX PumNcZvfuyDVw06qpo0LjepmgGpV4rPCkUR30aSla8rMjXdtI4Ev+im6vN4ewSxP Y+l/fwpUcxLoqExhqzuxSn10MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE09QFHT 6OTQad7TwOhRdJV/K3MmMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC319gRxKKtp7SAcJKYXhC953hee759nuyCV6/xCLDo2MUNfu8pPElO KvejMHXqUvJM/2PM1Sdsg8eJEK6aoKY7hWoodGA9CK9h0ijRGkqbejvKHlN07k8L xFLqxu7hGU7OAOD3WV+WmmCOgBR+C7ypMxxzBvOwoMVbmx9lVifeYqybPVtPHknG QmDd1ZucUWwzftB9hQbwW7O8y5hi5h/ZqrllBA+fIrCbH9DlHg3hLH10rjlfnUyv nHVD1UqTp13P3W/0A8pdCJBlDwP3x3JO3V3KG3H0SvqnAvB/z/f86mJEK2VVzFgq G1sHUwKrzElEMS/GhlnzJf5wneeB6hEg -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:36 2025 by rpki-client