$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: 1sYpnpcWsf0PaaPVZh0di59/KwatnGszpm4v7wjJtCA= Subject key identifier: B9:1B:67:18:BB:1F:E7:64:9A:DD:D2:C0:F0:01:81:D4:99:DB:7A:48 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C89 Signing time: Sun 02 Nov 2025 18:23:52 +0000 Manifest this update: Sun 02 Nov 2025 18:23:51 +0000 Manifest next update: Sun 09 Nov 2025 18:23:51 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: LGQdiNE/Mzz5LQgD4aXRls8ilrsGYVnaYMJLjYQM0l4=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Nov 2 18:23:51 2025 GMT Not After : Nov 9 18:23:51 2025 GMT Subject: CN=6907a1b7-0b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:33:35:3d:26:e6:7d:78:4f:cc:1c:ca:93: 50:7f:ad:b9:33:cd:0f:ed:9c:98:13:6d:66:6d:50: 02:25:91:23:c3:c9:87:29:70:d4:91:71:1f:1e:5a: c4:e2:79:cb:2f:53:94:9b:d2:17:e3:1d:e0:b9:ec: 9a:40:ab:fb:bf:de:bb:50:aa:4b:71:a7:c6:5c:7a: fa:73:a3:22:fc:d1:ea:74:69:43:a1:30:2b:68:8b: 97:96:8a:6c:c8:c0:64:b8:a2:1a:4c:86:c6:f1:98: 56:db:6d:4b:e2:9a:10:b0:6a:d5:8c:ab:8e:b4:d0: 07:2c:cd:9a:fc:e9:9a:7c:e3:8a:b8:7a:1d:b5:c4: ab:8f:b0:98:9d:23:9d:9f:4c:4c:19:26:98:b3:94: 5a:0d:81:6d:28:e5:fa:b4:f5:e2:21:f4:ed:04:13: 20:b8:c3:c8:fc:39:33:f4:e4:4b:cd:44:f1:24:8d: ca:ed:d4:a2:cc:94:ea:65:0e:2f:2a:ad:9e:cc:3b: ad:9b:66:62:70:ae:e4:f5:6e:05:f4:36:9c:c7:2a: f1:e8:86:ed:e3:4f:17:4d:e8:d7:44:ef:8c:04:92: 3d:4f:8e:37:f6:a1:ff:8f:59:cc:90:af:d3:46:a5: 8b:b0:2f:9b:47:0b:bd:b1:0d:ac:6d:4a:47:c0:e9: 4b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1B:67:18:BB:1F:E7:64:9A:DD:D2:C0:F0:01:81:D4:99:DB:7A:48 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ef:95:c6:4b:27:85:56:82:69:b4:15:5b:8f:93:d9:5b:7e: cf:29:2f:71:40:69:7f:67:86:85:14:b2:a3:ee:c4:5b:44:a3: 41:e7:20:4f:6e:2d:3c:bb:af:39:57:48:72:ba:53:fc:c4:bb: fd:f7:8a:61:e9:98:d9:ae:e6:3c:9f:52:b6:9a:18:a3:79:28: 3e:6e:6b:ff:fc:99:32:00:fb:e6:87:5e:68:71:94:1f:20:2e: 40:a7:ce:91:4a:f8:27:55:7d:2d:24:a2:58:f3:df:5b:cc:3b: b3:07:a9:db:45:6b:86:a5:88:5b:9a:a6:04:71:1a:29:3d:2c: 57:60:eb:c7:b4:68:b8:1d:d8:f1:2b:76:40:2b:dc:44:3b:eb: 53:52:04:9f:d7:f9:de:31:11:ec:db:cd:a3:dd:1f:4e:15:60: 1c:c8:aa:e7:44:e3:f9:69:f5:74:2f:f5:76:0f:0a:b7:3e:66: 4a:ff:27:13:0e:e6:06:10:fd:62:61:93:12:88:1f:59:5a:be: 71:8c:1b:16:63:c2:e2:6b:b5:81:a2:e4:81:84:67:37:23:e3: 02:36:5c:5d:ac:15:e0:ea:f5:b0:9b:8d:e8:7c:16:b3:55:d5: bb:3a:75:07:93:9c:5d:68:f6:aa:5d:3c:cd:ce:e1:0c:8b:64: dd:d5:9e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUxMTAyMTgyMzUxWhcNMjUxMTA5MTgyMzUxWjAYMRYwFAYD VQQDEw02OTA3YTFiNy0wYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQIzNT0m5n14T8wcypNQf625M80P7ZyYE21mbVACJZEjw8mHKXDUkXEfHlrE 4nnLL1OUm9IX4x3gueyaQKv7v967UKpLcafGXHr6c6Mi/NHqdGlDoTAraIuXlops yMBkuKIaTIbG8ZhW221L4poQsGrVjKuOtNAHLM2a/OmafOOKuHodtcSrj7CYnSOd n0xMGSaYs5RaDYFtKOX6tPXiIfTtBBMguMPI/Dkz9ORLzUTxJI3K7dSizJTqZQ4v Kq2ezDutm2ZicK7k9W4F9Dacxyrx6Ibt408XTejXRO+MBJI9T4439qH/j1nMkK/T RqWLsC+bRwu9sQ2sbUpHwOlLawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkbZxi7 H+dkmt3SwPABgdSZ23pIMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+75XGSyeFVoJptBVbj5PZW37PKS9xQGl/Z4aFFLKj7sRbRKNB5yBP bi08u685V0hyulP8xLv994ph6ZjZruY8n1K2mhijeSg+bmv//JkyAPvmh15ocZQf IC5Ap86RSvgnVX0tJKJY899bzDuzB6nbRWuGpYhbmqYEcRopPSxXYOvHtGi4Hdjx K3ZAK9xEO+tTUgSf1/neMRHs282j3R9OFWAcyKrnROP5afV0L/V2Dwq3PmZK/ycT DuYGEP1iYZMSiB9ZWr5xjBsWY8Lia7WBouSBhGc3I+MCNlxdrBXg6vWwm43ofBaz VdW7OnUHk5xdaPaqXTzNzuEMi2Td1Z58 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:06 2025 by rpki-client