$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json) Hash identifier: y1qM1MWN49hXulDtHOaFquGRiH1opNr3Sw2ctW1knmI= Subject key identifier: 1C:C7:9D:A1:AF:57:D8:D6:38:0E:F8:20:95:9F:6A:35:6E:CD:74:60 Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft Manifest number: 19 Signing time: Mon 03 Nov 2025 07:52:46 +0000 Manifest this update: Mon 03 Nov 2025 07:52:46 +0000 Manifest next update: Mon 10 Nov 2025 07:52:46 +0000 Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: T4NLE+IH3K1AXuDK7DFISdgYai0gJ9FUhIicM+RDud8=) 2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: H0Iwpph5C0NznDpgp/Qg/LJo8mI5O7HMAwbb7Y6vKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Nov 3 07:52:46 2025 GMT Not After : Nov 10 07:52:46 2025 GMT Subject: CN=69085f4e-8f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:e7:54:bb:00:b5:c3:b5:b9:d9:08:d3:63: a4:e5:a7:97:7d:9a:ff:eb:dd:42:c3:31:3e:b9:21: 98:e8:a1:61:60:b6:d1:b9:18:32:82:6b:d6:43:37: 03:bf:18:ec:d6:9a:22:82:ab:22:86:29:03:20:df: c9:78:d8:bd:b7:a9:a6:a6:5a:dc:cc:a3:8f:f5:35: bf:f2:f8:c7:8a:14:b7:a9:97:8c:d3:d9:cb:76:56: af:9b:d5:65:7d:ff:ac:a8:69:8f:ab:15:69:bb:90: b3:ce:35:b7:92:cc:98:99:f0:da:55:0e:05:9a:48: fd:83:12:b3:ae:34:fe:fb:5f:4c:e1:08:b0:2e:49: d5:50:0d:16:ed:28:d0:75:04:31:b0:ea:be:21:46: 9d:db:87:49:f1:5f:9b:b4:97:35:47:a2:28:8a:43: d8:ed:6f:b5:2d:77:7f:5e:8a:8a:8e:f6:b6:07:ef: 87:ea:b6:d7:3f:7e:97:07:16:9d:95:7b:00:d7:0b: ca:70:ce:f9:1f:2a:23:3b:9e:0e:2c:7d:34:a6:50: 1a:f5:a5:5f:89:21:13:d9:71:00:c5:b7:5e:21:8d: fd:67:db:5b:ab:f6:35:2b:bf:7a:da:20:c6:41:e2: e9:61:e8:1b:29:95:78:e9:0d:2c:72:be:2e:b4:83: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:9D:A1:AF:57:D8:D6:38:0E:F8:20:95:9F:6A:35:6E:CD:74:60 X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:c0:02:88:c1:12:57:6e:9c:f5:1a:1a:1c:1f:b2:2f:dc: 38:43:72:19:50:83:44:e4:d7:38:73:a6:3d:0a:62:90:01:bc: 77:d6:20:9f:69:80:a9:c7:2f:15:6b:a3:ce:fa:90:24:6f:d5: d9:69:77:b1:96:7b:f3:c1:5d:91:c8:d5:16:b6:65:e5:46:fb: 09:31:47:19:88:65:dd:00:87:7d:8e:2f:9e:87:5e:1b:8a:f5: 00:a6:79:c4:91:d3:f2:63:23:ff:fc:d5:2f:d0:b3:a8:17:73: 06:25:64:05:f9:c9:dd:a5:d0:6e:48:70:58:28:da:25:ef:e7: a2:3e:40:63:b8:6b:f1:cf:29:3f:c9:e7:e5:19:f8:4e:7e:f6: 30:5c:f2:6b:4d:c2:2e:99:90:9e:ad:ab:af:b9:1c:e2:98:fe: fd:09:05:4b:4b:f3:74:d4:7d:29:a4:11:68:d5:ab:60:54:6c: 28:43:1e:b6:b3:ce:d0:7a:83:57:27:8b:88:f2:8b:2a:e4:24: 7b:f2:04:42:29:c1:bd:29:a5:38:0f:bc:d4:b4:87:ef:99:ab: ae:9e:6d:c0:99:6c:e2:e7:67:d3:3f:04:7e:bc:62:69:b9:1e: a8:68:58:c0:c4:e9:f5:68:38:55:b8:0b:3d:4c:73:bf:38:49: b6:24:35:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4 MUQzRTgwRjAeFw0yNTExMDMwNzUyNDZaFw0yNTExMTAwNzUyNDZaMBgxFjAUBgNV BAMTDTY5MDg1ZjRlLThmOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/yudUuwC1w7W52QjTY6Tlp5d9mv/r3ULDMT65IZjooWFgttG5GDKCa9ZDNwO/ GOzWmiKCqyKGKQMg38l42L23qaamWtzMo4/1Nb/y+MeKFLepl4zT2ct2Vq+b1WV9 /6yoaY+rFWm7kLPONbeSzJiZ8NpVDgWaSP2DErOuNP77X0zhCLAuSdVQDRbtKNB1 BDGw6r4hRp3bh0nxX5u0lzVHoiiKQ9jtb7Utd39eioqO9rYH74fqttc/fpcHFp2V ewDXC8pwzvkfKiM7ng4sfTSmUBr1pV+JIRPZcQDFt14hjf1n21ur9jUrv3raIMZB 4ulh6BsplXjpDSxyvi60g+fDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHMedoa9X 2NY4DvgglZ9qNW7NdGAwHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QTk0LzZDRDAwREQyOThDQjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZ bEUtOUh1TzQ0aVlIVDZBOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrdwAKIwRJXbpz1GhocH7Iv3DhDchlQg0Tk1zhzpj0KYpABvHfWIJ9p gKnHLxVro876kCRv1dlpd7GWe/PBXZHI1Ra2ZeVG+wkxRxmIZd0Ah32OL56HXhuK 9QCmecSR0/JjI//81S/Qs6gXcwYlZAX5yd2l0G5IcFgo2iXv56I+QGO4a/HPKT/J 5+UZ+E5+9jBc8mtNwi6ZkJ6tq6+5HOKY/v0JBUtL83TUfSmkEWjVq2BUbChDHraz ztB6g1cni4jyiyrkJHvyBEIpwb0ppTgPvNS0h++Zq66ebcCZbOLnZ9M/BH68Ymm5 HqhoWMDE6fVoOFW4Cz1Mc784SbYkNdg= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:45 2025 by rpki-client