$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: gbI9D/nxuRqPHXZwNrDPxKPVMQQcexj9s/jofB1N3GI= Subject key identifier: 7C:9D:57:49:DE:59:54:DD:EA:FD:FF:2E:22:F1:EA:BC:99:C1:93:52 Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 37 Signing time: Mon 03 Nov 2025 07:34:13 +0000 Manifest this update: Mon 03 Nov 2025 07:34:13 +0000 Manifest next update: Mon 10 Nov 2025 07:34:13 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: Q3lOsptD3pMjf6bVyAnw8fTL6CalfelFh9G1Zpv04H8=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: 2Z7ZXOjsrVXv6QpvLW3sNTYWE2LGQXJRgdUTVxtlGsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Nov 3 07:34:13 2025 GMT Not After : Nov 10 07:34:13 2025 GMT Subject: CN=69085af5-a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:c7:1f:12:76:6c:ff:15:de:62:1d:58:6d: a1:9c:43:11:bd:02:38:ec:69:ce:3e:db:86:d1:40: f4:a8:1f:04:ed:81:8d:16:f3:d0:7b:56:92:3f:d6: c5:cb:2e:0c:f5:89:10:3b:4b:48:5a:1f:56:21:cd: 71:99:36:1c:4d:09:80:3c:b3:5f:01:0b:5a:72:59: 0f:7e:a1:ba:09:e3:73:99:9b:79:f0:ab:1e:b9:fa: db:9f:3d:98:35:5b:78:61:03:fa:1e:4f:7f:c1:66: 27:08:56:c4:03:40:19:45:7a:00:34:1c:89:eb:a2: b5:e5:33:fd:65:f2:71:c1:52:11:76:77:aa:0b:ec: 08:01:c3:2d:db:f2:69:78:d3:77:44:f2:4a:cc:7d: a3:5d:05:c3:c1:53:ca:04:ff:a4:d4:ef:79:4f:86: 3b:76:2d:28:ea:aa:49:bf:a3:5b:70:87:61:d3:e3: f0:d3:0a:78:25:bf:db:9d:fc:1b:3f:9e:7e:4f:19: 96:73:2d:09:95:ab:77:21:9f:79:58:3d:54:4d:e1: a7:cd:7d:e2:2e:fe:fa:98:1f:fb:29:30:29:22:52: 0b:2f:f3:4f:b9:93:57:33:e0:b3:04:9a:96:a6:54: 0c:1b:41:2f:dc:66:f2:0c:5f:a5:41:d1:e1:25:a1: 5a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9D:57:49:DE:59:54:DD:EA:FD:FF:2E:22:F1:EA:BC:99:C1:93:52 X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d4:f6:7c:90:e7:48:b8:cb:1e:99:b4:b8:0f:6a:f6:8a:9d: b3:f0:a6:48:2d:4a:e2:5d:0e:c1:02:79:95:8b:66:12:5a:7e: ad:b1:db:d4:08:b0:0b:a9:72:1b:5b:bc:14:5f:41:3d:46:6f: 98:ce:86:04:f1:bd:77:c9:2a:df:48:c6:5b:f4:b3:aa:19:cb: b8:e9:28:25:c0:71:97:1e:a8:d6:36:98:42:bc:d4:43:b6:37: ad:71:fd:41:c2:85:58:98:6e:52:2f:d3:83:60:04:5d:a1:40: cf:c7:33:74:26:2d:d1:7e:2b:95:f9:f6:c4:07:05:df:f1:9d: 95:c3:d7:6c:87:12:13:13:4c:8e:d1:e3:5f:25:a7:2e:bc:ca: 70:63:63:f7:94:9c:ee:ac:c3:9c:c8:a4:d9:b6:27:23:93:c6: 48:d0:e1:79:df:8f:91:66:13:84:04:c1:24:7a:cb:b5:27:8f: b4:27:c8:71:50:4f:03:39:74:1b:78:bb:7b:da:16:39:02:a9: ee:36:9d:9b:f9:7b:55:cc:9d:dd:62:e4:8d:f5:a7:5d:d7:37: 75:e1:50:fa:70:4f:6a:1d:b3:60:90:31:25:2b:fc:3a:14:64: 7b:57:3e:d2:9a:d0:ae:2c:3d:25:b6:e2:a9:aa:4e:d6:b8:45: 1e:3e:7b:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUVENTExMC8GA1UEBRMoNjY3ODE3OUE1REE4RTVFOTFFN0Q5RERGQzlGRjVCMzU0 M0VENEQ3NDAeFw0yNTExMDMwNzM0MTNaFw0yNTExMTAwNzM0MTNaMBgxFjAUBgNV BAMTDTY5MDg1YWY1LWE0ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdKscfEnZs/xXeYh1YbaGcQxG9Ajjsac4+24bRQPSoHwTtgY0W89B7VpI/1sXL Lgz1iRA7S0haH1YhzXGZNhxNCYA8s18BC1pyWQ9+oboJ43OZm3nwqx65+tufPZg1 W3hhA/oeT3/BZicIVsQDQBlFegA0HInrorXlM/1l8nHBUhF2d6oL7AgBwy3b8ml4 03dE8krMfaNdBcPBU8oE/6TU73lPhjt2LSjqqkm/o1twh2HT4/DTCnglv9ud/Bs/ nn5PGZZzLQmVq3chn3lYPVRN4afNfeIu/vqYH/spMCkiUgsv80+5k1cz4LMEmpam VAwbQS/cZvIMX6VB0eEloVrjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfJ1XSd5Z VN3q/f8uIvHqvJnBk1IwHwYDVR0jBBgwFoAUZngXml2o5ekefZ3fyf9bNUPtTXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRUQ1L0FGQTQ2NDY0Njcy RjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5nWG1sMm81ZWtlZlozZnlmOWJOVVB0VFhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RUQ1L0FGQTQ2NDY0NjcyRjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVr ZWZaM2Z5ZjliTlVQdFRYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKjU9nyQ50i4yx6ZtLgPavaKnbPwpkgtSuJdDsECeZWLZhJafq2x29QI sAupchtbvBRfQT1Gb5jOhgTxvXfJKt9Ixlv0s6oZy7jpKCXAcZceqNY2mEK81EO2 N61x/UHChViYblIv04NgBF2hQM/HM3QmLdF+K5X59sQHBd/xnZXD12yHEhMTTI7R 418lpy68ynBjY/eUnO6sw5zIpNm2JyOTxkjQ4Xnfj5FmE4QEwSR6y7Unj7QnyHFQ TwM5dBt4u3vaFjkCqe42nZv5e1XMnd1i5I31p13XN3XhUPpwT2ods2CQMSUr/DoU ZHtXPtKa0K4sPSW24qmqTta4RR4+e5Y= -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:02 2025 by rpki-client