$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: rRviDB60WvE2Xq5ideu0GQM5LRoUFem4Kow8PorSgL0= Subject key identifier: E8:BE:50:E2:53:06:B3:1D:9C:86:FA:ED:6B:74:CC:92:AC:A0:5A:60 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: CC Signing time: Mon 27 Oct 2025 08:14:11 +0000 Manifest this update: Mon 27 Oct 2025 08:14:10 +0000 Manifest next update: Mon 03 Nov 2025 08:14:10 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: xaEvSdOznLEwaNX0SU4N96hboeu5eXjYA3fI8CdmABw=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: YrfoAaRH0TwvCd3/fpeLdhWkCOhZ1iXJCt8nCYQZbVA=) 3: 566D69C69DEF11F08AD06664C4F9AE02.roa (hash: ElOzDZKrPCoR9cjo2BzyLGjq0fxAHUzikC7WpFlXFyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Oct 27 08:14:10 2025 GMT Not After : Nov 3 08:14:10 2025 GMT Subject: CN=68ff29d2-0133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:53:24:0e:1f:6e:1c:71:ef:1e:39:9a:91: a9:ca:ba:08:43:1e:50:b0:4b:15:7c:28:ed:d0:10: 7f:6a:8f:44:52:4d:d1:8d:a8:f9:df:81:7a:d1:5c: a3:5e:f7:04:4e:84:38:cf:b0:24:d4:eb:d9:af:e8: 81:bc:f9:8a:a8:98:8e:72:0f:b0:85:f0:50:7a:aa: 9b:1f:49:59:21:e4:0b:6d:f6:2d:ae:65:71:03:37: 90:91:e6:bd:aa:2e:77:88:06:44:c8:28:b1:6e:ee: a8:0e:88:e5:f3:d3:e7:e6:ca:f3:73:74:6d:24:b4: 25:cf:35:11:98:1c:8e:7c:84:16:0d:47:a9:5e:47: 9f:d7:e8:44:13:96:87:14:59:ed:d5:bc:7e:bc:d3: e6:65:8d:20:56:ad:00:b7:bf:74:79:d3:aa:22:2f: 51:0c:a0:07:ca:08:5a:17:3e:6b:2b:c3:87:ee:95: 6f:95:a0:0a:54:e7:98:44:cf:76:f0:a8:3b:9d:63: 3c:ca:c8:7f:3e:03:e7:9f:96:69:91:54:01:aa:b7: 36:22:ce:be:5e:26:17:49:1a:9a:5a:21:19:a5:13: 04:8d:e7:4a:28:65:aa:5a:bb:0a:42:5c:30:0e:d3: c7:24:2d:d5:8a:8a:72:13:a7:20:1e:89:a1:d4:b8: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:50:E2:53:06:B3:1D:9C:86:FA:ED:6B:74:CC:92:AC:A0:5A:60 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:20:d7:30:64:ba:b8:02:fb:af:5e:7c:41:99:26:7e:f4:05: c8:e5:f2:88:98:d2:68:75:23:df:d1:7e:6b:25:f1:f6:86:fb: b2:b7:34:97:b1:01:7e:87:15:d3:8f:31:07:39:7d:b2:ac:73: 37:4c:1d:6b:ea:b9:d9:43:4b:2f:ac:3e:7c:fc:09:69:0d:92: 20:b3:bd:c4:f2:c5:bb:4b:3e:bd:17:8e:d9:9c:ba:96:65:f7: 71:e2:a7:90:f0:7c:9f:e7:d6:1d:76:06:f2:6e:ed:c0:d9:f6: 84:b4:3d:12:75:c8:ab:ff:bb:82:d2:0d:cd:06:0c:00:76:02: 6d:4b:da:82:56:a5:9d:cb:05:7e:aa:67:91:ce:f8:fd:04:53: 64:8f:d5:b5:6d:84:f2:c2:eb:9f:12:0c:91:fc:15:b2:fa:ac: ed:1f:58:cd:5b:8f:4a:5f:bb:5e:a7:94:a2:6a:ea:a3:60:8a: cf:f3:50:3c:23:49:65:a7:83:3e:ff:00:78:5f:0d:3b:a1:3d: 50:6c:aa:df:70:bf:ae:21:a0:ec:78:b5:b8:f5:8a:f4:1e:90: 89:13:06:32:0c:94:63:56:35:c8:4b:d7:95:dc:cf:a9:3a:73: a0:c4:5b:db:8a:58:d7:cc:7b:de:d9:b4:2d:8f:10:48:eb:28: ef:c2:bc:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUxMDI3MDgxNDEwWhcNMjUxMTAzMDgxNDEwWjAYMRYwFAYD VQQDEw02OGZmMjlkMi0wMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ5TJA4fbhxx7x45mpGpyroIQx5QsEsVfCjt0BB/ao9EUk3Rjaj534F60Vyj XvcEToQ4z7Ak1OvZr+iBvPmKqJiOcg+whfBQeqqbH0lZIeQLbfYtrmVxAzeQkea9 qi53iAZEyCixbu6oDojl89Pn5srzc3RtJLQlzzURmByOfIQWDUepXkef1+hEE5aH FFnt1bx+vNPmZY0gVq0At790edOqIi9RDKAHyghaFz5rK8OH7pVvlaAKVOeYRM92 8Kg7nWM8ysh/PgPnn5ZpkVQBqrc2Is6+XiYXSRqaWiEZpRMEjedKKGWqWrsKQlww DtPHJC3ViopyE6cgHomh1LgIuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi+UOJT BrMdnIb67Wt0zJKsoFpgMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaINcwZLq4AvuvXnxBmSZ+9AXI5fKImNJodSPf0X5rJfH2hvuytzSX sQF+hxXTjzEHOX2yrHM3TB1r6rnZQ0svrD58/AlpDZIgs73E8sW7Sz69F47ZnLqW Zfdx4qeQ8Hyf59Yddgbybu3A2faEtD0Sdcir/7uC0g3NBgwAdgJtS9qCVqWdywV+ qmeRzvj9BFNkj9W1bYTywuufEgyR/BWy+qztH1jNW49KX7tep5SiauqjYIrP81A8 I0llp4M+/wB4Xw07oT1QbKrfcL+uIaDseLW49Yr0HpCJEwYyDJRjVjXIS9eV3M+p OnOgxFvbiljXzHve2bQtjxBI6yjvwrzI -----END CERTIFICATE-----Generated at Wed Oct 29 05:28:55 2025 by rpki-client