$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: WgzTPa/oJ9bb4U6oQxykxm5qKgkzXXX+WY7j6u6wWLQ= Subject key identifier: DE:42:C5:DC:84:26:9D:05:A2:A8:2F:0A:75:5A:D0:22:3C:39:1D:16 Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: 0128 Signing time: Mon 03 Nov 2025 04:38:37 +0000 Manifest this update: Mon 03 Nov 2025 04:38:37 +0000 Manifest next update: Mon 10 Nov 2025 04:38:37 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: nvH+7adqKmZdazpvQQsdbdkjp77bL/n4mncT3WogEAg=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E, serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Nov 3 04:38:37 2025 GMT Not After : Nov 10 04:38:37 2025 GMT Subject: CN=690831cd-ed47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:2a:75:94:02:39:44:6d:1c:b2:a3:23:b2: af:8f:9b:59:c3:9c:bd:87:e0:8e:6b:79:03:bf:70: e9:b6:03:9f:68:28:52:70:99:a5:c7:07:1f:83:e2: 07:5b:0f:9d:c0:b1:51:0f:3f:c9:3d:a4:50:53:52: e6:51:1b:aa:fa:2a:81:bd:9d:b3:e0:06:08:1b:31: 69:9d:ed:ad:3a:6f:cc:30:6d:40:ea:9d:70:de:5f: 13:f8:42:d5:aa:f3:14:e2:ad:e1:f5:e3:a6:52:4f: 94:37:ce:99:18:85:08:91:7b:d1:c3:1c:a4:7b:48: 52:d6:e1:bb:fa:0f:12:5b:c7:43:45:69:e0:f1:d9: 06:54:e1:cb:07:4f:95:71:8d:98:57:99:1b:fd:f4: c3:57:ae:3d:92:e1:9c:89:e1:6d:83:fe:be:d8:4e: c1:fa:4b:eb:16:f6:fb:85:2d:1f:e1:98:0d:6a:a6: d1:1e:28:10:e2:9c:65:6a:66:56:d2:4a:47:b6:eb: f3:49:05:b2:bb:6f:63:c1:df:ce:9e:76:09:70:a2: c9:87:d3:83:a7:e5:fa:05:28:7a:07:3e:a5:81:09: 0c:23:0d:ef:8a:29:50:54:8a:7b:1f:ae:63:ee:85: 59:7e:ce:11:92:63:f3:12:09:7e:07:5e:34:0b:e5: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:C5:DC:84:26:9D:05:A2:A8:2F:0A:75:5A:D0:22:3C:39:1D:16 X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:49:6a:90:a2:42:4d:9e:14:0d:cf:69:b6:fa:6d:df:be:d9: c3:fa:a6:88:40:2f:96:eb:97:5b:6b:a4:df:55:d2:48:c9:9c: c7:50:74:3f:f1:1a:1c:67:03:08:00:a2:47:96:dd:b1:45:20: 85:e0:1a:e0:0d:31:79:37:05:54:30:08:70:af:4c:5b:f3:50: 8e:9b:f9:e5:5b:03:02:c2:a2:02:d4:b2:64:d4:ce:96:56:2e: e1:52:d6:b7:2c:b4:65:30:84:27:13:72:66:70:17:2b:eb:e9: bb:81:35:4c:e0:04:1c:5b:83:d9:6b:20:01:9c:02:c1:20:40: 0a:b6:70:2f:8a:14:45:73:70:d2:44:f4:7d:45:5b:5d:a2:3b: fc:d7:21:ab:91:64:c3:06:e0:a3:cd:fd:e2:fb:7c:12:df:c1: 1a:61:83:68:e6:5b:53:e3:fc:ab:29:0b:6b:36:9a:36:48:7f: c5:19:8f:75:ac:d3:f4:1a:29:54:e6:95:92:fb:9f:ef:5b:90: f3:bc:0c:ec:2e:d9:5e:e9:34:e4:63:b1:6b:06:c8:43:9d:d2: 03:d7:39:40:8c:f4:a9:cd:bb:63:cd:e3:a6:c4:54:3b:45:83: 07:f5:29:bc:62:71:ba:3a:ca:a9:e6:8b:bf:57:f8:69:63:5f: 69:a5:24:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUxMTAzMDQzODM3WhcNMjUxMTEwMDQzODM3WjAYMRYwFAYD VQQDEw02OTA4MzFjZC1lZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5soqdZQCOURtHLKjI7Kvj5tZw5y9h+COa3kDv3DptgOfaChScJmlxwcfg+IH Ww+dwLFRDz/JPaRQU1LmURuq+iqBvZ2z4AYIGzFpne2tOm/MMG1A6p1w3l8T+ELV qvMU4q3h9eOmUk+UN86ZGIUIkXvRwxyke0hS1uG7+g8SW8dDRWng8dkGVOHLB0+V cY2YV5kb/fTDV649kuGcieFtg/6+2E7B+kvrFvb7hS0f4ZgNaqbRHigQ4pxlamZW 0kpHtuvzSQWyu29jwd/OnnYJcKLJh9ODp+X6BSh6Bz6lgQkMIw3viilQVIp7H65j 7oVZfs4RkmPzEgl+B140C+XzPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5CxdyE Jp0FoqgvCnVa0CI8OR0WMB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSWqQokJNnhQNz2m2+m3fvtnD+qaIQC+W65dba6TfVdJIyZzHUHQ/ 8RocZwMIAKJHlt2xRSCF4BrgDTF5NwVUMAhwr0xb81COm/nlWwMCwqIC1LJk1M6W Vi7hUta3LLRlMIQnE3JmcBcr6+m7gTVM4AQcW4PZayABnALBIEAKtnAvihRFc3DS RPR9RVtdojv81yGrkWTDBuCjzf3i+3wS38EaYYNo5ltT4/yrKQtrNpo2SH/FGY91 rNP0GilU5pWS+5/vW5DzvAzsLtle6TTkY7FrBshDndID1zlAjPSpzbtjzeOmxFQ7 RYMH9Sm8YnG6Osqp5ou/V/hpY19ppSSO -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:59 2025 by rpki-client