$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: X4ydpiD9z+wNKMsoonhT3c/7rd2EY5M6Zy7EFl/FCbI= Subject key identifier: 0E:4D:25:4B:FE:D7:7A:24:37:2B:05:11:38:16:BC:5B:31:BB:01:4A Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 351F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 34FF Signing time: Sun 02 Nov 2025 14:45:42 +0000 Manifest this update: Sun 02 Nov 2025 14:45:41 +0000 Manifest next update: Sun 09 Nov 2025 14:45:41 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: Bz06k9j5B8yO7UGUPtSBsKAg8WcuP9S9VqANn70vUuQ=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Nov 2 14:45:41 2025 GMT Not After : Nov 9 14:45:41 2025 GMT Subject: CN=69076e96-a9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:e9:fc:3f:24:9e:1b:64:e3:7e:ff:c3:90: af:2a:3e:96:61:a8:f6:5b:1b:e7:55:89:19:2b:aa: 3b:a6:78:85:af:4d:39:3b:b2:2c:0d:bd:70:ca:55: 06:29:82:7a:87:d6:35:8f:b7:7e:c6:b9:e4:b2:71: 43:22:b3:5b:c3:f5:8a:2d:5a:1a:6b:52:55:f3:72: c8:21:6e:de:3b:e4:e8:55:c9:ef:10:fd:1e:45:b5: 29:c5:d0:be:6f:b2:14:22:5c:f7:8f:93:1c:54:81: 1b:f0:86:74:43:11:73:bb:9b:5b:58:9d:c6:b8:7e: e4:46:68:4c:21:c3:10:3c:27:e9:38:eb:33:63:dd: c3:d9:84:9b:46:6d:eb:55:72:bc:00:21:94:9d:1b: 0f:b6:3b:a9:b4:cb:dc:dc:e1:41:c1:e4:71:b4:9a: c8:74:66:2d:8a:8c:8c:04:6b:6c:fe:94:9c:bb:8d: de:f8:85:03:6d:62:53:54:f4:2b:dc:85:18:cc:c5: 0b:b0:5f:3d:5a:94:95:bd:b3:05:f8:ec:40:1b:27: 49:88:15:53:fb:4a:48:db:20:c3:64:dc:d8:2a:54: fd:ad:91:c1:53:8b:de:6d:bb:28:cf:4b:4d:f5:80: ff:1d:a0:16:f7:04:a8:ad:33:27:c1:53:e9:89:44: 10:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:25:4B:FE:D7:7A:24:37:2B:05:11:38:16:BC:5B:31:BB:01:4A X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b3:cc:36:8e:14:ee:b3:16:fe:23:ca:b5:09:18:f5:2c:57: 20:82:38:a1:32:a9:52:fa:9e:da:c3:a6:fd:3a:9d:b3:aa:d7: 05:f5:7d:68:cd:b4:f4:fa:6d:d4:a1:a9:b9:ec:ea:d2:e0:f0: da:92:c7:5b:24:61:b0:25:53:cb:a5:ea:c8:b6:15:9a:74:c1: 7d:1c:a7:73:44:23:21:1c:17:b6:91:a4:f8:25:0e:69:78:df: 5f:ef:28:3f:e7:a3:d8:5a:82:a5:1d:26:3f:44:15:c6:f1:bf: 14:39:9e:b8:7b:44:5a:11:57:d1:5c:a6:34:cd:15:0e:08:9f: 01:e6:d0:78:85:22:1e:9f:13:18:d5:75:ca:49:c4:59:49:c0: 59:8d:18:73:8d:77:c9:75:25:6b:aa:d1:30:7c:52:cb:60:10: 9f:71:7b:fc:16:df:77:83:30:92:dc:b8:4a:22:d9:a8:de:9d: 79:4d:50:22:30:d1:19:7f:1a:39:2f:d1:20:2e:5c:48:fb:67: 06:13:3a:c1:d5:31:08:87:84:75:ea:65:8f:ad:de:57:a4:89: d4:ce:49:7e:67:a6:e6:29:81:45:2e:7e:b1:78:e3:0a:16:cd: 7d:69:72:7a:6a:57:b9:18:71:3c:54:f1:13:68:27:76:c7:ea: 02:8d:ce:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUxMTAyMTQ0NTQxWhcNMjUxMTA5MTQ0NTQxWjAYMRYwFAYD VQQDEw02OTA3NmU5Ni1hOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGvp/D8knhtk437/w5CvKj6WYaj2WxvnVYkZK6o7pniFr005O7IsDb1wylUG KYJ6h9Y1j7d+xrnksnFDIrNbw/WKLVoaa1JV83LIIW7eO+ToVcnvEP0eRbUpxdC+ b7IUIlz3j5McVIEb8IZ0QxFzu5tbWJ3GuH7kRmhMIcMQPCfpOOszY93D2YSbRm3r VXK8ACGUnRsPtjuptMvc3OFBweRxtJrIdGYtioyMBGts/pScu43e+IUDbWJTVPQr 3IUYzMULsF89WpSVvbMF+OxAGydJiBVT+0pI2yDDZNzYKlT9rZHBU4vebbsoz0tN 9YD/HaAW9wSorTMnwVPpiUQQfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5NJUv+ 13okNysFETgWvFsxuwFKMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBns8w2jhTusxb+I8q1CRj1LFcggjihMqlS+p7aw6b9Op2zqtcF9X1o zbT0+m3Uoam57OrS4PDaksdbJGGwJVPLperIthWadMF9HKdzRCMhHBe2kaT4JQ5p eN9f7yg/56PYWoKlHSY/RBXG8b8UOZ64e0RaEVfRXKY0zRUOCJ8B5tB4hSIenxMY 1XXKScRZScBZjRhzjXfJdSVrqtEwfFLLYBCfcXv8Ft93gzCS3LhKItmo3p15TVAi MNEZfxo5L9EgLlxI+2cGEzrB1TEIh4R16mWPrd5XpInUzkl+Z6bmKYFFLn6xeOMK Fs19aXJ6ale5GHE8VPETaCd2x+oCjc5G -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:09 2025 by rpki-client