$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json) Hash identifier: xComLloffuQUWYv7S1+QvkGkZRsQvmKF7Yxfvy21NWo= Subject key identifier: 5F:7A:27:62:1D:54:37:4B:A0:F4:AA:D6:A3:31:CE:E2:78:A9:F0:B3 Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft Manifest number: 0158 Signing time: Wed 05 Nov 2025 04:17:00 +0000 Manifest this update: Wed 05 Nov 2025 04:17:00 +0000 Manifest next update: Wed 12 Nov 2025 04:17:00 +0000 Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: +SbGMf3fcaxNk4XDf+IgkpiQMQAk7FwklJqQfsjRLpM=) 2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: AurKJa/IQdeMXLDvtgzXzstmuY9lm884aAVif5yLieA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: Nov 5 04:17:00 2025 GMT Not After : Nov 12 04:17:00 2025 GMT Subject: CN=690acfbc-a87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:d4:5d:2b:e6:f1:1b:56:80:09:e0:a1:40: 8d:66:52:60:12:64:89:18:8e:d8:68:be:9d:45:8f: 14:a8:28:10:95:75:85:53:ec:e2:95:44:e6:a5:3e: ea:af:36:0b:2f:ea:05:9e:99:d9:53:c5:51:c1:c7: 0a:ef:9f:39:e8:b8:75:ed:c4:e4:49:af:a5:85:50: 5a:65:31:e7:60:65:54:8b:12:fc:66:53:1d:7d:fd: f4:16:71:c0:21:2c:cd:d8:78:a6:43:6e:48:a7:79: b2:77:6d:2b:ac:38:3c:64:04:20:e7:49:30:ab:d9: b2:90:8b:c4:2d:de:e4:68:8f:9d:65:04:b4:76:21: dc:87:3f:3b:4e:6e:74:b7:86:04:1d:1c:95:0e:9f: dc:31:51:09:b8:58:a0:f5:39:df:ca:5d:28:91:d3: 92:08:60:55:c9:22:06:70:0c:4c:b4:70:6c:f5:a1: d2:b5:a3:92:25:fb:c9:7f:a9:f6:80:9e:6b:4a:74: da:c6:be:91:65:53:b2:97:a7:6e:e0:bb:d7:ee:11: df:2b:60:7a:33:fb:1c:9f:8b:6f:11:18:09:6f:79: b3:24:78:4c:b4:b2:df:90:35:ed:55:48:8a:a9:43: 8b:3b:0c:b9:dc:56:2b:08:7c:fc:59:98:62:cc:be: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7A:27:62:1D:54:37:4B:A0:F4:AA:D6:A3:31:CE:E2:78:A9:F0:B3 X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:f4:7d:49:57:54:fd:cc:95:1e:59:ed:10:c1:13:dc:1b:27: 68:0f:6c:ee:33:4a:09:9d:d8:93:0a:bb:3f:e0:8f:14:d7:22: 67:c0:0e:74:9b:43:0d:94:76:73:55:b4:7a:d1:61:de:ce:71: 22:f1:5a:69:a0:c7:86:42:4d:7a:4f:fc:2b:c0:2f:55:c3:0d: f4:9c:d2:12:c1:72:fc:07:3e:1a:b5:af:95:69:ec:61:a9:ff: d4:55:43:87:9b:35:92:0a:8a:99:45:41:6c:64:20:6f:6f:b1: a2:74:98:07:99:93:ce:80:f8:fa:a1:8d:bb:89:c9:ce:fe:ac: a4:e3:a9:f2:bf:96:0d:2b:5d:6b:e0:7d:1b:a4:8d:ad:52:e6: 98:93:ea:a0:fa:59:fd:43:2d:48:7d:64:00:6d:f0:be:37:f6: 9a:9b:74:23:01:0d:6b:b5:3b:49:e1:5b:ef:32:6f:c8:68:69: 35:73:3a:4b:fb:95:63:3b:98:16:5d:d1:15:d0:8a:67:ed:47: e7:2f:57:31:4e:5e:e6:69:6d:24:e7:83:b7:2d:7a:59:1c:0a: 42:9c:eb:b4:df:8b:9a:d6:fb:79:48:ea:82:4f:c1:6a:9b:e9: 4f:b5:c1:f5:df:4f:ba:09:87:af:77:b1:94:0b:98:af:48:02: 0c:dc:2e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJBMEMxMTAvBgNVBAUTKENENUNENTkwOTEzRTRGODlBRjNEMUNBNkUyOUZBQjND MDY3RDIxNEUwHhcNMjUxMTA1MDQxNzAwWhcNMjUxMTEyMDQxNzAwWjAYMRYwFAYD VQQDEw02OTBhY2ZiYy1hODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBvUXSvm8RtWgAngoUCNZlJgEmSJGI7YaL6dRY8UqCgQlXWFU+zilUTmpT7q rzYLL+oFnpnZU8VRwccK75856Lh17cTkSa+lhVBaZTHnYGVUixL8ZlMdff30FnHA ISzN2HimQ25Ip3myd20rrDg8ZAQg50kwq9mykIvELd7kaI+dZQS0diHchz87Tm50 t4YEHRyVDp/cMVEJuFig9Tnfyl0okdOSCGBVySIGcAxMtHBs9aHStaOSJfvJf6n2 gJ5rSnTaxr6RZVOyl6du4LvX7hHfK2B6M/scn4tvERgJb3mzJHhMtLLfkDXtVUiK qUOLOwy53FYrCHz8WZhizL6p9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF96J2Id VDdLoPSq1qMxzuJ4qfCzMB8GA1UdIwQYMBaAFM1c1ZCRPk+Jrz0cpuKfqzwGfSFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkEwQy80MTUzMUIwQ0FF Q0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0bXZQUnltNHAtclBBWjlJ VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkEwQy80MTUzMUIwQ0FFQ0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0 bXZQUnltNHAtclBBWjlJVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC29H1JV1T9zJUeWe0QwRPcGydoD2zuM0oJndiTCrs/4I8U1yJnwA50 m0MNlHZzVbR60WHeznEi8VppoMeGQk16T/wrwC9Vww30nNISwXL8Bz4ata+Vaexh qf/UVUOHmzWSCoqZRUFsZCBvb7GidJgHmZPOgPj6oY27icnO/qyk46nyv5YNK11r 4H0bpI2tUuaYk+qg+ln9Qy1IfWQAbfC+N/aam3QjAQ1rtTtJ4VvvMm/IaGk1czpL +5VjO5gWXdEV0Ipn7UfnL1cxTl7maW0k54O3LXpZHApCnOu034ua1vt5SOqCT8Fq m+lPtcH130+6CYevd7GUC5ivSAIM3C5q -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:06 2025 by rpki-client