$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: NomhhgV9S62KwVauOsKDa4vL+3xAEh0OP7MhBrBaOF4= Subject key identifier: 8B:EA:64:DA:99:B5:F0:ED:F2:87:22:F6:17:E1:39:2C:0A:4A:51:7C Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11CE Signing time: Tue 04 Nov 2025 17:16:45 +0000 Manifest this update: Tue 04 Nov 2025 17:16:45 +0000 Manifest next update: Tue 11 Nov 2025 17:16:45 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: zA6oKAnfeE5ihITgUEjfkZKP4EsfGrThqsVU1xWEe7M=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4567 (0x11d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Nov 4 17:16:45 2025 GMT Not After : Nov 11 17:16:45 2025 GMT Subject: CN=690a34fd-f8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:07:d7:fa:34:90:1f:4d:bf:ed:77:29:69: fc:8f:25:8c:69:9c:49:a9:ca:7e:54:6d:4d:02:21: f0:16:8d:27:e3:40:4a:7a:76:c3:ad:f5:a2:82:97: 09:13:ca:6d:3d:2e:76:c0:8a:f7:4e:7d:b1:fc:fb: c7:47:6f:47:5b:02:ab:a4:28:c6:17:88:c4:1f:92: 36:1d:08:65:bf:6e:a5:10:fa:19:76:af:60:da:ae: 50:2c:b7:46:5b:35:40:86:4c:d5:4c:5d:80:0c:2e: 40:93:ab:83:ac:a2:be:cd:50:1b:ce:6a:ea:84:e6: 02:09:63:a3:00:29:32:76:19:ea:bd:2d:4d:e9:2e: 88:f1:fa:d7:ba:c0:e0:32:aa:bf:35:cd:ca:33:0d: 90:cc:af:7d:58:6f:d1:db:8a:85:e2:be:b3:15:10: af:fd:c0:32:d3:e5:81:00:d4:d7:d5:b6:ac:eb:36: c1:8f:c4:dd:59:52:2e:20:52:c8:84:ed:36:c9:dd: 5e:d0:c5:b5:09:a4:89:dd:df:b6:63:aa:dd:af:0e: 56:c6:1c:34:ad:3f:80:24:8b:15:f7:df:8f:14:3d: 92:d8:d4:bd:9c:9b:66:d2:90:4f:bc:b6:fd:59:81: e6:f8:9a:57:4d:d4:99:d0:5d:0c:a1:90:d0:5d:80: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EA:64:DA:99:B5:F0:ED:F2:87:22:F6:17:E1:39:2C:0A:4A:51:7C X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:62:1e:30:ae:32:4c:ba:36:cb:44:95:f3:4e:97:37:80:a0: a4:9b:83:a1:be:0c:71:21:d1:01:dd:eb:09:cc:16:53:5c:ad: cf:09:07:93:08:0d:5c:d4:43:d4:99:35:af:13:58:d2:a7:65: 6c:e6:4f:7f:0d:37:55:56:8d:56:97:fa:04:01:34:36:3a:f8: e6:a5:62:c6:0d:bb:57:44:f9:62:95:d8:5b:d0:44:48:ea:97: 47:3d:79:7f:cc:b3:d5:ec:74:e7:73:65:cc:a2:50:af:41:3d: 2b:f9:04:a0:6c:d6:f5:ff:ed:23:9d:21:21:fe:82:1b:e2:bd: bd:72:1c:98:2a:2b:03:5b:0a:32:d1:5d:f3:a3:d3:fd:b8:9b: c3:3e:69:57:65:9d:86:3e:dc:06:40:4a:8c:0b:d7:94:48:a7: de:fa:34:4d:20:e5:cf:5a:7b:a2:9b:5c:60:25:4f:d0:68:bc: 74:4b:1c:be:f9:b4:98:3a:44:45:63:08:9b:a2:d4:fa:bd:d8: 5b:27:a8:a6:99:ca:d9:8b:83:cc:cd:c9:d8:ef:df:78:c9:ee: e9:6c:e5:ef:6e:35:7e:36:6e:32:0f:e8:7c:25:b8:a6:0d:44: b6:1d:5d:24:70:ac:5e:ad:ec:e2:26:ad:a2:43:73:5a:2c:1c: 13:27:2a:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUxMTA0MTcxNjQ1WhcNMjUxMTExMTcxNjQ1WjAYMRYwFAYD VQQDEw02OTBhMzRmZC1mOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukUH1/o0kB9Nv+13KWn8jyWMaZxJqcp+VG1NAiHwFo0n40BKenbDrfWigpcJ E8ptPS52wIr3Tn2x/PvHR29HWwKrpCjGF4jEH5I2HQhlv26lEPoZdq9g2q5QLLdG WzVAhkzVTF2ADC5Ak6uDrKK+zVAbzmrqhOYCCWOjACkydhnqvS1N6S6I8frXusDg Mqq/Nc3KMw2QzK99WG/R24qF4r6zFRCv/cAy0+WBANTX1bas6zbBj8TdWVIuIFLI hO02yd1e0MW1CaSJ3d+2Y6rdrw5Wxhw0rT+AJIsV99+PFD2S2NS9nJtm0pBPvLb9 WYHm+JpXTdSZ0F0MoZDQXYDS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvqZNqZ tfDt8oci9hfhOSwKSlF8MB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXYh4wrjJMujbLRJXzTpc3gKCkm4OhvgxxIdEB3esJzBZTXK3PCQeT CA1c1EPUmTWvE1jSp2Vs5k9/DTdVVo1Wl/oEATQ2OvjmpWLGDbtXRPlildhb0ERI 6pdHPXl/zLPV7HTnc2XMolCvQT0r+QSgbNb1/+0jnSEh/oIb4r29chyYKisDWwoy 0V3zo9P9uJvDPmlXZZ2GPtwGQEqMC9eUSKfe+jRNIOXPWnuim1xgJU/QaLx0Sxy+ +bSYOkRFYwibotT6vdhbJ6immcrZi4PMzcnY7994ye7pbOXvbjV+Nm4yD+h8Jbim DUS2HV0kcKxereziJq2iQ3NaLBwTJypO -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:47 2025 by rpki-client