$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: p8bX3zip8MqMoERtKiihNmZ5Jlim8Ibcv9y+2Z4M4Rw= Subject key identifier: 79:87:52:69:03:BB:27:89:AE:FE:92:1C:D3:0F:2D:63:43:83:7B:6F Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0CA4 Signing time: Sun 26 Oct 2025 18:38:16 +0000 Manifest this update: Sun 26 Oct 2025 18:38:15 +0000 Manifest next update: Sun 02 Nov 2025 18:38:15 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: UUQg3UTdexBlMk63j+U6q9dNq5o298IYJcPFd0K19f8=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: 9FmnWb9pui6Pv8KaY3QdF38c9SeSZeT0GfsxD7+8mfg=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: bcKs3JCB0Pnfj/bjvQqBTGxWS9Rxr52rn9mWhFguD3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Oct 26 18:38:15 2025 GMT Not After : Nov 2 18:38:15 2025 GMT Subject: CN=68fe6a98-fabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:d4:c5:dc:71:9a:d9:36:89:45:ef:c6:d9: 44:3b:5e:2c:f3:b8:ee:73:80:1e:07:96:11:7a:cc: 3e:79:61:4c:4c:d7:3f:09:18:a5:7b:53:3f:0e:9f: 7c:37:3f:66:f5:4b:66:5a:9c:8b:ba:e8:ad:77:c1: 07:5c:e1:b4:06:b1:c4:cc:11:83:37:e1:0c:64:64: e9:f9:75:f9:cb:12:3e:07:49:ee:b3:c3:6a:8f:3c: 05:66:38:b7:2b:a5:7d:fb:14:32:e3:64:63:c7:8c: 74:f3:ca:8d:ad:da:9a:78:02:88:1e:a7:aa:74:09: 12:a7:4e:d0:bf:b6:de:8b:21:0f:64:5c:d8:1f:bc: 6e:d5:9b:5d:87:82:39:c9:ea:5c:d4:18:09:ce:85: 5c:80:28:39:49:04:1f:a8:ce:00:47:75:77:e6:40: 85:87:50:3c:13:4b:6f:9f:d8:2a:65:66:2b:70:0d: 54:b3:35:fe:18:f1:dc:bc:ce:17:18:d6:31:60:6f: 4a:5b:65:d2:ca:5a:16:01:5f:82:36:3e:5b:f9:00: f3:6e:76:6d:9d:cf:7e:9f:b4:51:01:6f:c2:e0:a7: 8c:a3:09:53:5b:af:8f:89:37:a2:ac:91:4c:9e:0e: 5e:fe:2d:5a:9b:26:52:c2:49:26:ff:d7:e7:35:f1: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:87:52:69:03:BB:27:89:AE:FE:92:1C:D3:0F:2D:63:43:83:7B:6F X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:b8:c9:f8:86:be:14:21:1f:f7:c6:95:25:aa:71:62:71: c4:cc:88:ea:0b:19:26:9a:04:7b:30:54:11:10:58:28:e2:f4: 34:69:a7:9f:42:fd:3a:d6:db:e8:96:8f:02:6b:d7:e4:ce:70: 04:7f:25:f5:0d:21:60:0c:8f:43:ca:59:26:49:1b:1c:93:3b: ac:f5:2b:45:54:94:e3:e4:31:c3:6f:24:37:e2:8a:b2:a3:e7: ee:12:6e:9f:18:89:64:1c:eb:ea:c1:62:a1:9c:9b:16:3d:c1: 16:4e:a3:ce:69:b6:35:c6:06:f9:b2:8b:cd:7a:8a:83:16:1d: be:74:4e:dd:fd:19:bd:39:c5:76:bc:5c:43:d1:9e:a0:8f:64: 10:93:5a:8b:7d:6a:28:c5:20:7b:cc:59:e5:fc:9e:18:91:5a: 1f:fe:b8:99:6b:89:17:00:a5:8b:45:4d:cb:08:24:6d:0d:9b: 65:f4:8b:63:3d:5f:e9:09:0b:42:0f:c1:38:5d:6d:a9:ae:93: 2a:6d:1c:00:a4:e7:5b:05:8b:bd:45:bd:11:d7:4f:28:f2:f9: c8:1a:31:9c:11:a2:0e:04:6a:14:8e:dc:8e:19:ca:d7:69:c1: 4b:41:ca:d4:e9:0b:0f:f9:44:2c:f8:58:ad:c4:25:47:4c:e2: 0d:9c:81:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUxMDI2MTgzODE1WhcNMjUxMTAyMTgzODE1WjAYMRYwFAYD VQQDEw02OGZlNmE5OC1mYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthLUxdxxmtk2iUXvxtlEO14s87juc4AeB5YResw+eWFMTNc/CRile1M/Dp98 Nz9m9UtmWpyLuuitd8EHXOG0BrHEzBGDN+EMZGTp+XX5yxI+B0nus8NqjzwFZji3 K6V9+xQy42Rjx4x088qNrdqaeAKIHqeqdAkSp07Qv7beiyEPZFzYH7xu1Ztdh4I5 yepc1BgJzoVcgCg5SQQfqM4AR3V35kCFh1A8E0tvn9gqZWYrcA1UszX+GPHcvM4X GNYxYG9KW2XSyloWAV+CNj5b+QDzbnZtnc9+n7RRAW/C4KeMowlTW6+PiTeirJFM ng5e/i1amyZSwkkm/9fnNfHkLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmHUmkD uyeJrv6SHNMPLWNDg3tvMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA24LjJ+Ia+FCEf98aVJapxYnHEzIjqCxkmmgR7MFQREFgo4vQ0aaef Qv061tvolo8Ca9fkznAEfyX1DSFgDI9DylkmSRsckzus9StFVJTj5DHDbyQ34oqy o+fuEm6fGIlkHOvqwWKhnJsWPcEWTqPOabY1xgb5sovNeoqDFh2+dE7d/Rm9OcV2 vFxD0Z6gj2QQk1qLfWooxSB7zFnl/J4YkVof/riZa4kXAKWLRU3LCCRtDZtl9Itj PV/pCQtCD8E4XW2prpMqbRwApOdbBYu9Rb0R108o8vnIGjGcEaIOBGoUjtyOGcrX acFLQcrU6QsP+UQs+FitxCVHTOINnIFr -----END CERTIFICATE-----Generated at Tue Oct 28 13:43:18 2025 by rpki-client