$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: Kih8kb/hm7umPZHIMf2Keg9YKVMGQgbL9/L/UmH18ec= Subject key identifier: 43:06:E1:99:52:16:5C:0D:BD:FB:76:F6:8D:76:ED:C4:41:10:91:01 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 093A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 092B Signing time: Sun 02 Nov 2025 20:11:54 +0000 Manifest this update: Sun 02 Nov 2025 20:11:53 +0000 Manifest next update: Sun 09 Nov 2025 20:11:53 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: MEct1J0CFB2MIHBFsFiuxp0MAaXFbv/+MeeFXFVqO6Y=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: /n6JoBCxKb39xofyDRMG1k20W82UdWlbULQ4CPVAgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2362 (0x93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Nov 2 20:11:53 2025 GMT Not After : Nov 9 20:11:53 2025 GMT Subject: CN=6907bb09-4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:f7:4d:1c:9c:8b:f6:f2:95:48:73:46:fe: c7:bf:ea:89:fb:43:69:20:c0:c2:8e:b9:43:46:47: 4c:76:61:a8:95:70:c4:8e:44:66:a9:95:fd:9a:30: ba:8f:c8:64:b4:c1:dc:d4:5d:bc:34:f8:18:ad:e4: a9:82:3d:bf:71:a8:3e:68:94:03:54:b1:c4:c0:55: 46:12:f2:91:98:fe:a1:c7:b4:a4:2a:96:70:9f:80: 30:d8:ed:18:52:41:a1:ef:63:c3:9e:e2:33:c9:bf: 49:58:27:4d:44:b1:f8:4c:71:9a:c9:bb:d5:80:9e: 29:39:ff:38:05:ff:dd:4e:7a:a9:d0:73:aa:80:0c: 21:84:0f:dd:2e:b8:bb:fd:2e:1d:ef:2b:92:06:b9: 23:bd:4b:71:56:24:06:8f:2e:bb:21:7a:e0:f2:21: 71:76:b4:de:32:54:a4:85:6c:dd:91:a3:ee:8a:fe: d9:36:50:09:0f:83:b6:7e:33:76:8a:64:cb:13:d5: cf:fe:38:5e:b4:08:a7:91:d5:5d:38:24:ac:ba:cd: 02:28:e0:19:84:4f:aa:12:8f:cc:ce:19:7c:23:df: 01:3e:51:72:63:98:e4:89:97:24:51:d3:cd:64:2c: f0:36:a6:ed:57:4c:26:ee:f2:5d:14:7f:fd:99:c4: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:E1:99:52:16:5C:0D:BD:FB:76:F6:8D:76:ED:C4:41:10:91:01 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c6:b2:8c:8c:13:21:c0:9c:aa:1b:0b:d9:3d:df:6c:31:58: 2a:da:86:ae:30:94:a4:60:c7:a0:e0:a7:3c:d5:7a:56:c7:b3: 2a:ea:2f:38:64:48:d4:77:ec:76:17:60:11:a7:15:ec:c0:f1: f1:1d:a2:c2:60:47:71:e4:a9:fb:0f:d3:48:57:56:b6:2f:ee: c6:ff:9c:23:89:d8:fa:48:dc:09:b4:ea:7b:27:d6:bf:b2:b4: 31:e8:02:8c:e9:1a:1e:75:ec:7f:fa:54:89:e7:72:4b:02:df: 67:f7:dd:b3:2e:bf:27:bd:fa:8c:8b:48:8d:24:00:d5:44:0b: a1:54:13:a9:e7:87:e9:fd:fa:82:c5:73:11:f1:d9:da:bf:dc: 99:39:67:30:44:5d:45:b8:5b:e7:79:f4:6d:b5:6f:e3:8d:9c: df:39:f5:7e:cd:f4:04:8e:6a:ae:5c:3e:de:95:bd:ab:25:40: 50:ae:06:94:6e:8b:de:d0:88:b4:d8:c5:8d:3c:c4:c6:13:7e: ad:16:2c:c3:94:ee:97:2d:cc:ce:1b:a8:4b:02:9b:03:db:d8: 48:1f:e5:45:8b:cd:fa:85:64:aa:3d:5b:55:39:c9:db:15:25: 69:75:37:ce:5d:28:f8:48:26:b7:54:6e:25:0b:c6:bc:49:12: 1e:d3:93:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMTAyMjAxMTUzWhcNMjUxMTA5MjAxMTUzWjAYMRYwFAYD VQQDEw02OTA3YmIwOS00Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25/3TRyci/bylUhzRv7Hv+qJ+0NpIMDCjrlDRkdMdmGolXDEjkRmqZX9mjC6 j8hktMHc1F28NPgYreSpgj2/cag+aJQDVLHEwFVGEvKRmP6hx7SkKpZwn4Aw2O0Y UkGh72PDnuIzyb9JWCdNRLH4THGaybvVgJ4pOf84Bf/dTnqp0HOqgAwhhA/dLri7 /S4d7yuSBrkjvUtxViQGjy67IXrg8iFxdrTeMlSkhWzdkaPuiv7ZNlAJD4O2fjN2 imTLE9XP/jhetAinkdVdOCSsus0CKOAZhE+qEo/Mzhl8I98BPlFyY5jkiZckUdPN ZCzwNqbtV0wm7vJdFH/9mcRX6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMG4ZlS FlwNvft29o127cRBEJEBMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjxrKMjBMhwJyqGwvZPd9sMVgq2oauMJSkYMeg4Kc81XpWx7Mq6i84 ZEjUd+x2F2ARpxXswPHxHaLCYEdx5Kn7D9NIV1a2L+7G/5wjidj6SNwJtOp7J9a/ srQx6AKM6Roedex/+lSJ53JLAt9n992zLr8nvfqMi0iNJADVRAuhVBOp54fp/fqC xXMR8dnav9yZOWcwRF1FuFvnefRttW/jjZzfOfV+zfQEjmquXD7elb2rJUBQrgaU bove0Ii02MWNPMTGE36tFizDlO6XLczOG6hLApsD29hIH+VFi836hWSqPVtVOcnb FSVpdTfOXSj4SCa3VG4lC8a8SRIe05MH -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:22 2025 by rpki-client