$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: bh6aMlYKq/L25Rr2+XNxX5fYBochUYwcpTxyCfjHfuA= Subject key identifier: 13:6B:A5:81:5F:01:67:ED:3C:17:CF:15:A9:A3:BE:15:20:8B:0F:84 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0CD3 Signing time: Tue 04 Nov 2025 18:17:23 +0000 Manifest this update: Tue 04 Nov 2025 18:17:22 +0000 Manifest next update: Tue 11 Nov 2025 18:17:22 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: 2plgtaUPqlxjzi6XnNZgkpWCctG+gjj7dTAp6m3JqMw=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Nov 4 18:17:22 2025 GMT Not After : Nov 11 18:17:22 2025 GMT Subject: CN=690a4332-a9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:8e:cb:80:34:ca:75:9e:e1:d6:1b:93:41: d3:00:77:de:cb:20:7d:b3:24:9b:b6:9a:0a:50:9f: 27:8b:60:b0:fb:bc:50:9e:d7:b3:25:e5:d8:d5:67: c4:df:80:0d:25:86:c7:f2:65:23:e6:83:59:75:12: 6d:de:5e:32:12:4d:b3:e0:d3:e3:13:40:ff:25:72: 84:fe:50:b1:3f:d7:b3:2b:66:5b:be:9c:8f:f4:dd: 6d:ea:16:58:75:dc:34:31:29:5c:7e:2c:5f:fb:9b: a2:d8:d9:dd:62:2e:3a:29:d1:0c:44:dc:c3:02:66: 48:cc:34:f6:20:77:03:6e:65:e2:31:39:a8:b3:95: 10:9b:96:a7:53:06:7d:ad:5a:5d:e5:5d:cd:a5:7b: 2c:e5:98:78:f3:3f:d2:ee:35:4d:e5:35:a0:d2:5c: da:ef:2c:30:de:e0:7f:a2:5f:67:61:12:29:c8:17: a1:3d:8c:af:eb:4c:a2:b7:40:41:be:6a:42:6b:01: c0:69:36:e2:4c:15:46:95:35:fe:5d:18:85:58:35: ed:83:3d:5b:78:d8:b5:82:54:21:9c:63:af:c4:c3: 97:d4:34:71:ca:a1:fc:e2:1e:07:06:25:7c:9a:d7: 31:74:b4:ba:5e:2e:ea:72:73:eb:7b:98:40:72:15: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6B:A5:81:5F:01:67:ED:3C:17:CF:15:A9:A3:BE:15:20:8B:0F:84 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cb:98:52:58:1a:4b:1b:67:9b:c6:b3:c0:de:5f:f8:62:1a: ea:20:b0:a5:18:71:db:62:f5:b6:8e:1d:e1:69:c8:0f:8b:c3: 65:1e:11:ea:b0:35:38:85:46:7c:ba:cd:12:50:a6:ea:f2:ba: 81:11:44:5f:64:61:bf:44:2c:b1:f8:ec:bb:32:16:de:e2:5c: f2:74:5f:80:0f:59:bc:0e:ad:7c:52:d4:28:51:34:b4:b8:1f: 70:f8:21:0b:bd:a7:4c:22:bb:07:74:a6:38:f9:3c:d9:8b:20: e1:ba:8e:c8:52:4a:2d:ec:40:95:f8:22:5e:07:32:ae:57:d7: ee:20:88:b4:bf:10:b1:da:ae:2b:28:58:b9:ff:57:09:0a:3c: 5b:7a:23:cc:56:47:c7:55:b8:72:d8:a9:7e:4c:21:59:60:8a: a6:ba:fc:82:6a:08:12:da:5d:76:5b:bb:04:f3:7a:93:3d:22: b1:41:2c:8d:00:c9:0b:4f:4d:f5:af:89:51:a2:dc:2b:f2:55: 0c:17:b4:cd:5c:e6:da:d9:37:ed:46:b1:5a:00:44:45:8d:9a: 87:fc:0e:a9:19:39:c3:74:c9:f7:9f:b9:5e:44:e4:d2:69:9e: e7:95:f7:d7:c5:e1:c6:cf:34:b3:9e:2c:ab:d1:52:d4:7b:ad: e5:93:83:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUxMTA0MTgxNzIyWhcNMjUxMTExMTgxNzIyWjAYMRYwFAYD VQQDEw02OTBhNDMzMi1hOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsViOy4A0ynWe4dYbk0HTAHfeyyB9sySbtpoKUJ8ni2Cw+7xQntezJeXY1WfE 34ANJYbH8mUj5oNZdRJt3l4yEk2z4NPjE0D/JXKE/lCxP9ezK2ZbvpyP9N1t6hZY ddw0MSlcfixf+5ui2NndYi46KdEMRNzDAmZIzDT2IHcDbmXiMTmos5UQm5anUwZ9 rVpd5V3NpXss5Zh48z/S7jVN5TWg0lza7yww3uB/ol9nYRIpyBehPYyv60yit0BB vmpCawHAaTbiTBVGlTX+XRiFWDXtgz1beNi1glQhnGOvxMOX1DRxyqH84h4HBiV8 mtcxdLS6Xi7qcnPre5hAchVfewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNrpYFf AWftPBfPFamjvhUgiw+EMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACy5hSWBpLG2ebxrPA3l/4YhrqILClGHHbYvW2jh3hacgPi8NlHhHq sDU4hUZ8us0SUKbq8rqBEURfZGG/RCyx+Oy7Mhbe4lzydF+AD1m8Dq18UtQoUTS0 uB9w+CELvadMIrsHdKY4+TzZiyDhuo7IUkot7ECV+CJeBzKuV9fuIIi0vxCx2q4r KFi5/1cJCjxbeiPMVkfHVbhy2Kl+TCFZYIqmuvyCaggS2l12W7sE83qTPSKxQSyN AMkLT031r4lRotwr8lUMF7TNXOba2TftRrFaAERFjZqH/A6pGTnDdMn3n7leROTS aZ7nlffXxeHGzzSzniyr0VLUe63lk4On -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:17 2025 by rpki-client