$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json) Hash identifier: YdGqOA5Lm+8sENCn3Wy7qs6MyPM6WvyVkUSAQlpIJTs= Subject key identifier: 3D:5A:B0:B4:74:E2:08:C6:3F:E6:B9:AC:50:37:23:F3:DC:E4:F5:C2 Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft Manifest number: 05AB Signing time: Tue 04 Nov 2025 23:14:59 +0000 Manifest this update: Tue 04 Nov 2025 23:14:59 +0000 Manifest next update: Tue 11 Nov 2025 23:14:59 +0000 Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: oFE7Kh4pC8zaxbwcCe5fRXZ7OiqRyC1EiEwTNs6Qxyw=) 2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: NdGdprVspyCu7ooBV/jtWTcZH1ps5ycDugcPtORVorA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Validity Not Before: Nov 4 23:14:59 2025 GMT Not After : Nov 11 23:14:59 2025 GMT Subject: CN=690a88f3-a566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:a5:73:83:d6:59:7b:66:6d:0b:65:e7:25: c9:24:6f:96:f2:86:d5:71:ab:1a:88:2e:e2:af:9b: d1:c9:1e:29:9f:ff:0d:5a:89:ff:0b:d4:2a:49:1e: 61:88:a9:af:66:f0:df:51:cf:11:b7:dd:28:ab:40: 72:a1:87:7c:2b:0b:2b:27:9e:81:94:e0:72:3f:86: 67:93:16:47:7a:d5:58:42:94:d2:2a:69:9b:8e:b3: 0c:6a:e5:f8:8e:dc:04:43:54:f9:d8:6c:6d:48:44: b0:bb:2f:02:96:8c:2a:6d:bc:0e:3b:e5:3f:b1:fd: 00:2e:ff:31:e6:38:0c:dd:92:4a:ea:47:0e:09:78: be:79:71:10:62:0a:2b:68:3a:69:a2:79:a0:9b:4b: 9b:fc:c0:c2:1d:23:d2:c4:ab:7a:42:0b:0c:86:e1: 58:3d:ff:30:52:5e:af:2a:9c:ac:94:26:a6:0f:37: 84:ee:58:0a:2e:d6:17:90:44:57:9a:e4:cd:47:5b: 53:08:f0:1d:53:b8:74:1f:64:8d:68:53:9e:2a:e2: f9:35:de:eb:52:f4:77:e3:63:7f:fd:28:1f:20:07: dd:95:33:40:05:38:34:76:48:35:96:10:a2:79:ca: ad:70:ba:9d:82:44:9b:43:72:48:84:8c:8e:34:e7: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5A:B0:B4:74:E2:08:C6:3F:E6:B9:AC:50:37:23:F3:DC:E4:F5:C2 X509v3 Authority Key Identifier: keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a5:50:93:15:e0:cb:e0:06:17:0f:b4:01:2c:0a:82:b2:01: af:4a:eb:ca:e0:2b:26:af:4b:e9:43:8b:e1:f5:16:bf:1f:25: a1:a5:49:79:73:f1:6e:e0:b4:89:06:47:93:7e:0d:4c:98:cb: 70:e2:ab:d1:41:08:f9:29:54:77:cd:b5:ba:8e:c5:53:7b:ca: 8c:0a:0f:93:68:13:f6:37:43:46:f3:4c:e3:22:92:00:79:b1: aa:08:01:c4:3b:35:a7:15:f3:a5:da:26:96:a7:54:c0:50:af: dc:e6:fc:dc:2a:93:85:91:c4:c8:af:a3:37:9b:88:0a:17:1c: 3d:47:d7:2a:e1:61:70:e5:a5:4f:95:38:36:87:6e:2e:70:06: 87:c8:e0:27:23:74:9a:31:3a:4d:b0:c2:1a:d5:a0:dd:70:97: dd:ff:ed:95:59:56:0c:cc:e0:77:ee:16:4b:ed:43:56:d1:94: 8c:7c:e3:6b:21:78:8c:78:a4:ca:cc:cd:5c:74:e3:38:5a:f4: 2d:24:bb:aa:2e:6a:64:f9:a0:4d:3b:56:fa:2e:da:48:27:df: 43:04:77:99:65:3d:59:92:fe:ca:92:b8:11:77:01:8c:ab:78: ca:51:67:67:a0:c4:d9:ba:0e:33:9d:32:29:e9:3f:c8:39:38: 78:29:90:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1 QTIzMDgwOTEwHhcNMjUxMTA0MjMxNDU5WhcNMjUxMTExMjMxNDU5WjAYMRYwFAYD VQQDEw02OTBhODhmMy1hNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLulc4PWWXtmbQtl5yXJJG+W8obVcasaiC7ir5vRyR4pn/8NWon/C9QqSR5h iKmvZvDfUc8Rt90oq0ByoYd8KwsrJ56BlOByP4ZnkxZHetVYQpTSKmmbjrMMauX4 jtwEQ1T52GxtSESwuy8ClowqbbwOO+U/sf0ALv8x5jgM3ZJK6kcOCXi+eXEQYgor aDpponmgm0ub/MDCHSPSxKt6QgsMhuFYPf8wUl6vKpyslCamDzeE7lgKLtYXkERX muTNR1tTCPAdU7h0H2SNaFOeKuL5Nd7rUvR342N//SgfIAfdlTNABTg0dkg1lhCi ecqtcLqdgkSbQ3JIhIyONOd4SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1asLR0 4gjGP+a5rFA3I/Pc5PXCMB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3 R2w1OHloUnNTSlphSXdnSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSpVCTFeDL4AYXD7QBLAqCsgGvSuvK4Csmr0vpQ4vh9Ra/HyWhpUl5 c/Fu4LSJBkeTfg1MmMtw4qvRQQj5KVR3zbW6jsVTe8qMCg+TaBP2N0NG80zjIpIA ebGqCAHEOzWnFfOl2iaWp1TAUK/c5vzcKpOFkcTIr6M3m4gKFxw9R9cq4WFw5aVP lTg2h24ucAaHyOAnI3SaMTpNsMIa1aDdcJfd/+2VWVYMzOB37hZL7UNW0ZSMfONr IXiMeKTKzM1cdOM4WvQtJLuqLmpk+aBNO1b6LtpIJ99DBHeZZT1Zkv7KkrgRdwGM q3jKUWdnoMTZug4znTIp6T/IOTh4KZAq -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:15 2025 by rpki-client