$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: wulqow7oOX18ALCdPV6ayRzGXdUYqKrhE0gMRB0jql0= Subject key identifier: BA:39:6C:91:C9:F3:1D:A9:B7:EC:87:84:0E:CC:83:83:49:F2:83:4C Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E73 Signing time: Sun 26 Oct 2025 18:03:58 +0000 Manifest this update: Sun 26 Oct 2025 18:03:57 +0000 Manifest next update: Sun 02 Nov 2025 18:03:57 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: WVzkn2dw//P4VSaUFNckhbhITXK41jk247xAP7zXrQI=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3713 (0xe81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Oct 26 18:03:57 2025 GMT Not After : Nov 2 18:03:57 2025 GMT Subject: CN=68fe628e-01c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:d7:30:ac:6c:02:90:67:84:a5:04:1c:84: 27:6d:fc:6c:9b:f0:b0:2d:6a:64:74:6a:8a:d8:88: a6:cf:32:07:ae:fd:d9:35:61:c4:ee:f8:0c:a5:5c: 37:74:de:0d:6a:eb:72:a9:ae:c3:96:c7:5c:7f:5d: 64:7e:42:3e:b2:df:b8:e0:64:f1:63:85:8d:a9:13: 4b:3d:9e:a1:43:07:e8:1b:a3:6f:5a:eb:74:a3:1d: 2b:5e:bb:3d:57:7a:48:cd:7d:87:e4:34:03:22:e9: 50:ef:dd:b1:35:a3:a5:49:24:e5:2e:30:c6:07:7b: b8:b7:19:7d:eb:fc:06:6a:88:25:df:1e:be:5c:96: 5b:37:3a:68:7c:18:82:5a:c4:59:77:39:bc:11:00: 8d:34:eb:03:cb:74:2a:a5:a8:8d:65:9a:19:b3:0c: 5c:f9:15:26:80:80:9f:3b:38:8b:c2:b0:4b:cf:17: 60:37:ac:de:a1:f3:8f:7f:c9:07:50:3f:af:9a:cb: fa:73:0c:fc:69:18:68:2c:f8:45:34:47:79:14:95: 06:30:59:31:4c:e5:c5:f5:87:1e:55:69:4c:1a:8f: 1c:0f:7e:c3:20:be:60:e5:04:e9:60:9f:43:46:45: 30:8f:6a:bd:9f:58:65:8f:3a:a5:a2:0b:67:a3:60: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:39:6C:91:C9:F3:1D:A9:B7:EC:87:84:0E:CC:83:83:49:F2:83:4C X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:de:c2:de:54:9f:51:30:c9:cc:05:8c:df:10:9b:27:ce:13: 47:80:df:1a:82:52:45:5e:4f:7c:75:60:bd:09:7a:14:cf:cd: 73:aa:9c:e0:19:02:eb:1a:eb:9c:e4:ac:8b:22:09:ff:52:41: 44:cd:26:36:da:b1:f1:eb:73:01:0d:36:25:0e:fe:f9:c6:69: 23:a9:8f:a6:4b:08:26:1d:da:cd:be:c1:bf:34:4b:63:7b:ea: 87:ae:ff:7e:15:84:07:b5:f0:ca:f7:70:02:f1:05:89:c4:dc: d4:a1:4f:aa:b9:6e:b5:d2:67:d2:df:b0:3b:c5:45:c4:1f:20: e2:65:8e:f6:62:14:60:95:0c:fa:c9:b8:f6:4b:b4:bb:45:18: 8f:5a:48:16:98:06:df:13:da:a7:d8:3f:ab:08:6e:a4:78:1f: c2:31:eb:dc:46:cb:64:59:99:d2:fd:b3:8e:29:81:cc:65:73: 6d:74:42:01:19:e6:9b:81:6d:69:0b:93:d4:fb:17:f1:d0:c4: 75:a7:46:cb:9f:b5:8b:30:e5:85:73:53:17:78:0f:1b:74:2f: 4b:7e:74:9d:0e:66:f6:b3:8e:07:8c:aa:cd:50:6e:54:1c:b5: 35:f0:af:ea:25:48:34:8f:40:ba:79:5f:f0:00:07:fd:27:4c: 1a:24:07:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUxMDI2MTgwMzU3WhcNMjUxMTAyMTgwMzU3WjAYMRYwFAYD VQQDEw02OGZlNjI4ZS0wMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4DXMKxsApBnhKUEHIQnbfxsm/CwLWpkdGqK2IimzzIHrv3ZNWHE7vgMpVw3 dN4Nautyqa7Dlsdcf11kfkI+st+44GTxY4WNqRNLPZ6hQwfoG6NvWut0ox0rXrs9 V3pIzX2H5DQDIulQ792xNaOlSSTlLjDGB3u4txl96/wGaogl3x6+XJZbNzpofBiC WsRZdzm8EQCNNOsDy3QqpaiNZZoZswxc+RUmgICfOziLwrBLzxdgN6zeofOPf8kH UD+vmsv6cwz8aRhoLPhFNEd5FJUGMFkxTOXF9YceVWlMGo8cD37DIL5g5QTpYJ9D RkUwj2q9n1hljzqlogtno2BTqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo5bJHJ 8x2pt+yHhA7Mg4NJ8oNMMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV3sLeVJ9RMMnMBYzfEJsnzhNHgN8aglJFXk98dWC9CXoUz81zqpzg GQLrGuuc5KyLIgn/UkFEzSY22rHx63MBDTYlDv75xmkjqY+mSwgmHdrNvsG/NEtj e+qHrv9+FYQHtfDK93AC8QWJxNzUoU+quW610mfS37A7xUXEHyDiZY72YhRglQz6 ybj2S7S7RRiPWkgWmAbfE9qn2D+rCG6keB/CMevcRstkWZnS/bOOKYHMZXNtdEIB GeabgW1pC5PU+xfx0MR1p0bLn7WLMOWFc1MXeA8bdC9LfnSdDmb2s44HjKrNUG5U HLU18K/qJUg0j0C6eV/wAAf9J0waJAef -----END CERTIFICATE-----Generated at Tue Oct 28 06:40:31 2025 by rpki-client