$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: bsnE/kfd66sWzL1C+2ozniHlY1GI0I8q0V18sPRnrvs= Subject key identifier: DF:0E:B5:02:26:4C:27:F8:A3:F2:E1:42:9A:FD:78:6C:B9:F5:29:1E Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 3C Signing time: Mon 03 Nov 2025 07:30:04 +0000 Manifest this update: Mon 03 Nov 2025 07:30:04 +0000 Manifest next update: Mon 10 Nov 2025 07:30:04 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: sqHnBcxHqNPeWimdLedmg4fqQ37irZEg9o1RVKG2aUU=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Nov 3 07:30:04 2025 GMT Not After : Nov 10 07:30:04 2025 GMT Subject: CN=690859fc-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:5c:b1:93:f0:f5:c1:09:9f:31:64:2a:4c: f8:13:31:35:e8:3a:ce:b7:19:57:22:22:d2:31:c0: 54:7d:e5:c9:87:20:08:9a:52:0d:1c:7c:87:d2:9c: 2f:0d:3b:a4:f4:31:c1:6a:54:4c:14:94:6c:33:71: 06:cf:16:bf:8d:9e:b2:d5:7f:06:07:d3:02:15:98: a3:f0:29:dd:f5:28:cf:a3:71:28:c0:59:c6:7f:3b: 1f:88:5f:9d:97:7e:46:8f:ec:58:44:c0:83:0f:ab: 2d:3c:b1:bb:be:e2:5d:69:05:16:07:a4:49:14:dd: e4:9c:07:16:5e:4e:a8:64:14:7f:90:c9:72:91:62: 5a:4a:bc:8b:fb:e2:32:b1:13:5b:77:12:76:9b:d5: d3:f6:cf:4e:d8:a4:03:63:de:e0:7d:40:dc:e9:04: bb:3a:f2:c4:94:e2:b4:46:b5:15:9b:4b:d0:99:07: 87:fc:f9:ac:7d:b6:52:a7:76:5f:71:c5:e0:93:95: 03:11:6c:8a:89:f1:ad:d1:e5:24:b0:06:42:ef:35: 25:96:00:12:54:f8:aa:f3:b3:51:e3:47:b9:73:c4: 48:f9:7e:63:2c:5b:d9:16:4b:ab:eb:5d:b3:fb:0a: 0b:34:a0:10:7f:a8:ae:57:9f:4e:44:12:d1:ee:6d: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0E:B5:02:26:4C:27:F8:A3:F2:E1:42:9A:FD:78:6C:B9:F5:29:1E X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:79:4b:f9:08:38:7d:a1:ce:a2:10:bc:5b:c2:be:2e:7c: 07:44:e9:91:c9:2a:cb:be:ee:e9:07:cf:df:41:fa:e9:c5:a5: db:17:43:eb:fe:28:d5:c9:5d:78:4f:74:0f:40:d9:f5:63:ee: e6:a0:78:df:7c:a6:16:89:bb:09:a7:6a:9b:51:d0:f5:30:8b: 5d:19:db:d7:95:5f:7f:2d:f3:84:02:e4:08:bd:df:1c:af:1d: 02:7e:67:61:15:c7:37:c2:ad:f1:98:c5:b2:fd:af:b0:20:62: 40:8d:90:f8:56:d0:ca:9d:0b:66:7f:20:1d:8f:1d:fb:8e:89: 84:33:2c:96:51:16:5c:e8:ed:26:ac:6f:ff:ba:76:c7:61:ab: e5:e9:1b:70:15:34:e7:4c:67:b4:59:05:74:f9:67:8a:9c:7a: 0f:e6:fd:58:fc:00:96:e7:36:c8:ae:7e:e8:2a:a4:8d:10:2c: 62:44:12:99:29:a8:3e:a0:b3:1f:dc:c3:fd:81:fc:b1:f6:48: 4d:36:10:17:17:79:55:93:f4:f9:be:dc:16:e3:99:eb:91:64: 03:c6:36:0c:f2:22:5d:06:c4:44:39:66:6f:e2:73:61:c2:29: 2a:31:d3:09:8f:69:9b:d7:50:03:21:1f:0c:8f:44:1b:96:16: f0:a9:c0:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTExMDMwNzMwMDRaFw0yNTExMTAwNzMwMDRaMBgxFjAUBgNV BAMTDTY5MDg1OWZjLTljOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRkVyxk/D1wQmfMWQqTPgTMTXoOs63GVciItIxwFR95cmHIAiaUg0cfIfSnC8N O6T0McFqVEwUlGwzcQbPFr+NnrLVfwYH0wIVmKPwKd31KM+jcSjAWcZ/Ox+IX52X fkaP7FhEwIMPqy08sbu+4l1pBRYHpEkU3eScBxZeTqhkFH+QyXKRYlpKvIv74jKx E1t3Enab1dP2z07YpANj3uB9QNzpBLs68sSU4rRGtRWbS9CZB4f8+ax9tlKndl9x xeCTlQMRbIqJ8a3R5SSwBkLvNSWWABJU+Krzs1HjR7lzxEj5fmMsW9kWS6vrXbP7 Cgs0oBB/qK5Xn05EEtHubXmLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3w61AiZM J/ij8uFCmv14bLn1KR4wHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJseUv5CDh9oc6iELxbwr4ufAdE6ZHJKsu+7ukHz99B+unFpdsXQ+v+ KNXJXXhPdA9A2fVj7uageN98phaJuwmnaptR0PUwi10Z29eVX38t84QC5Ai93xyv HQJ+Z2EVxzfCrfGYxbL9r7AgYkCNkPhW0MqdC2Z/IB2PHfuOiYQzLJZRFlzo7Sas b/+6dsdhq+XpG3AVNOdMZ7RZBXT5Z4qceg/m/Vj8AJbnNsiufugqpI0QLGJEEpkp qD6gsx/cw/2B/LH2SE02EBcXeVWT9Pm+3BbjmeuRZAPGNgzyIl0GxEQ5Zm/ic2HC KSox0wmPaZvXUAMhHwyPRBuWFvCpwDY= -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:34 2025 by rpki-client