$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: qGyPsg2bq87eCCZut90q8FwcjoYERi/OJaQWB623WP0= Subject key identifier: 72:16:14:01:96:AA:48:0F:54:1A:21:3C:DC:BD:38:A3:1F:65:57:04 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 08DE Signing time: Sun 02 Nov 2025 20:23:10 +0000 Manifest this update: Sun 02 Nov 2025 20:23:10 +0000 Manifest next update: Sun 09 Nov 2025 20:23:10 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: IBHzoHWZcjC2KSF5WvFT0Z7ndMZ/K+UEVrPTkm39QsY=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: v0qe3Is5q3yvzdsZV9nmpFuwmP+tm+rwCc0Ad6aEiXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Nov 2 20:23:10 2025 GMT Not After : Nov 9 20:23:10 2025 GMT Subject: CN=6907bdae-a96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:0a:5e:f0:dd:49:e4:ae:fd:aa:e1:e0:c7: cc:a3:24:7a:e0:03:f6:73:e0:5e:6b:6a:d0:66:68: 55:31:81:09:71:c0:9c:97:db:f2:82:00:ea:7f:f2: 8b:5e:79:c5:1c:91:cc:45:27:b1:ec:49:34:6e:27: 8d:19:d0:3a:e7:93:cc:a3:95:b9:49:f5:3e:46:65: 46:4d:4d:a5:2a:d0:80:b2:f5:5b:8e:5f:fb:43:45: ea:ee:0d:45:5d:d7:3b:93:7c:bb:2e:91:c3:7d:be: 68:a7:e0:7b:1e:68:75:a7:13:c0:b8:1d:23:30:57: 0f:13:08:06:8c:e7:18:a8:eb:20:25:92:87:ac:22: 0e:dd:e3:b1:19:09:e1:1e:ca:7d:9d:1f:cf:db:f7: 36:6a:86:37:db:8a:b1:a3:d7:d1:e9:22:cf:b5:32: 63:a1:00:4e:20:5d:dd:1c:b8:07:8b:49:60:1f:24: 74:83:ee:a2:7c:e4:a3:d5:f6:2c:1d:cd:83:52:79: 9d:6f:43:b8:3f:aa:87:ab:f0:b1:50:cd:68:e5:e5: ca:51:58:fa:f7:82:84:c7:e7:fb:18:de:fa:ad:82: f4:82:09:51:1e:58:57:08:7a:93:74:c3:97:df:3f: fc:79:fc:a4:c9:f0:9c:be:22:f4:3d:74:9d:2e:2a: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:16:14:01:96:AA:48:0F:54:1A:21:3C:DC:BD:38:A3:1F:65:57:04 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:78:d0:a6:87:3b:e2:bc:84:3a:13:b3:32:11:32:98:6a:91: 4a:f9:d9:4e:01:5a:81:41:cf:36:db:f3:ad:47:c9:c9:45:4c: 85:d4:ce:3e:41:a0:f3:e9:42:eb:32:56:d6:78:e8:e9:24:6b: 6b:04:31:24:d9:c4:df:40:a4:e4:e0:83:b9:dd:02:43:e8:d5: fc:92:1b:5b:37:2b:dd:0a:b9:76:7d:3b:13:54:1f:fc:b8:48: da:5b:cd:dd:98:c2:b7:5c:70:b0:75:04:36:ad:91:0f:bd:0d: af:2b:b8:04:cb:3b:3f:55:de:f8:09:66:6b:5c:f1:bd:2d:a5: 91:52:d7:82:5f:56:f9:2f:fa:fd:74:d6:7d:53:7b:a0:ac:63: bf:33:f8:46:7f:bd:70:ff:2b:6f:6b:6c:b8:5f:b5:bb:81:1b: 9d:ad:d5:f4:96:1f:d3:64:ec:70:9c:61:6c:b7:c2:c1:33:2c: 4b:67:c0:8e:04:02:76:c6:e9:81:28:0e:8d:eb:8d:93:fc:7c: bc:a5:53:47:5d:6b:a4:00:b0:4c:77:d8:38:07:1a:97:d4:7b: 7b:db:27:c9:77:98:80:89:be:f5:e7:a0:7f:22:79:9e:f8:d2: fa:a5:dc:4b:01:16:f3:a6:d9:37:f4:3f:fc:fd:9e:ba:a9:64: 1f:8f:93:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNTExMDIyMDIzMTBaFw0yNTExMDkyMDIzMTBaMBgxFjAUBgNV BAMTDTY5MDdiZGFlLWE5NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGugpe8N1J5K79quHgx8yjJHrgA/Zz4F5ratBmaFUxgQlxwJyX2/KCAOp/8ote ecUckcxFJ7HsSTRuJ40Z0Drnk8yjlblJ9T5GZUZNTaUq0ICy9VuOX/tDReruDUVd 1zuTfLsukcN9vmin4HseaHWnE8C4HSMwVw8TCAaM5xio6yAlkoesIg7d47EZCeEe yn2dH8/b9zZqhjfbirGj19HpIs+1MmOhAE4gXd0cuAeLSWAfJHSD7qJ85KPV9iwd zYNSeZ1vQ7g/qoer8LFQzWjl5cpRWPr3goTH5/sY3vqtgvSCCVEeWFcIepN0w5ff P/x5/KTJ8Jy+IvQ9dJ0uKouHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUchYUAZaq SA9UGiE83L04ox9lVwQwHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIF40KaHO+K8hDoTszIRMphqkUr52U4BWoFBzzbb861HyclFTIXUzj5B oPPpQusyVtZ46Okka2sEMSTZxN9ApOTgg7ndAkPo1fySG1s3K90KuXZ9OxNUH/y4 SNpbzd2YwrdccLB1BDatkQ+9Da8ruATLOz9V3vgJZmtc8b0tpZFS14JfVvkv+v10 1n1Te6CsY78z+EZ/vXD/K29rbLhftbuBG52t1fSWH9Nk7HCcYWy3wsEzLEtnwI4E AnbG6YEoDo3rjZP8fLylU0dda6QAsEx32DgHGpfUe3vbJ8l3mICJvvXnoH8ieZ74 0vql3EsBFvOm2Tf0P/z9nrqpZB+Pk48= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:46 2025 by rpki-client