$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: ZofhJk9ltUqY0XMdczFd/uSgsDB/LuLM3/J0wiicFUg= Subject key identifier: 38:C0:B8:D5:81:2C:85:B8:FF:25:51:97:C2:82:A0:08:75:E0:65:F7 Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: AA Signing time: Mon 03 Nov 2025 06:10:52 +0000 Manifest this update: Mon 03 Nov 2025 06:10:52 +0000 Manifest next update: Mon 10 Nov 2025 06:10:51 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: hknxNjOmnVMC8+mi3Mdt7tsJ4020eCfqxwyGHaBMySY=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Nov 3 06:10:52 2025 GMT Not After : Nov 10 06:10:51 2025 GMT Subject: CN=6908476c-4e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:89:48:61:57:c8:d3:4f:86:b3:d4:5c:f3: e7:77:a5:57:ae:f5:f2:73:58:22:09:5a:95:47:1f: 01:6f:1d:98:ec:d7:21:61:2a:b3:35:f8:73:b8:6f: 97:27:32:b2:25:7f:53:69:b3:b0:81:a1:a5:11:84: ed:dc:34:fb:bc:b5:cd:28:70:2b:da:8d:cb:e7:5c: 6f:02:f9:24:6c:e3:40:1b:ac:cf:7d:c0:17:97:c4: e4:90:0e:7c:0d:f3:03:65:50:55:51:ea:77:52:45: 29:e4:ae:db:75:b2:2c:ed:c2:0f:1a:dc:d7:45:07: 85:d2:92:11:9e:3f:1e:1e:d7:22:21:91:c7:53:87: 0e:03:b9:33:80:e8:2b:67:9f:68:82:0f:5d:0b:71: 52:32:7a:7b:c4:62:e1:92:b4:2a:d4:a8:97:72:69: eb:57:7b:5b:83:49:83:49:dd:76:f2:db:93:b1:cf: d2:2e:6b:11:f7:9c:e4:07:3f:eb:a8:a6:e7:c3:1b: c7:1c:62:54:49:53:46:de:b4:56:44:01:60:82:25: be:b0:e3:50:66:8f:97:34:19:29:92:fb:e2:e0:4d: 68:17:07:f5:81:31:fa:ea:a5:4a:23:d4:52:07:d5: c0:c9:62:7c:c8:90:b1:3b:9c:f8:84:55:f3:6d:72: 82:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:B8:D5:81:2C:85:B8:FF:25:51:97:C2:82:A0:08:75:E0:65:F7 X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:06:0e:0e:37:c4:a8:06:4a:61:40:72:cf:52:2e:90:24:4c: dd:92:37:97:05:76:cb:7d:93:94:53:fb:49:2b:aa:af:86:82: 0e:ec:28:cf:c9:5a:44:84:0c:25:9f:70:e3:89:9b:70:69:d1: e8:67:cc:e4:b8:aa:55:89:e0:fe:e1:a4:cf:0d:02:ce:7b:f5: 01:f8:01:1c:06:8e:7f:1e:6d:b6:57:62:0d:af:8c:c0:e5:87: f8:3c:56:99:c7:45:24:c9:39:da:67:07:c1:9c:8f:43:68:5f: eb:b8:e0:b5:41:3f:d7:fa:0a:1d:89:0c:70:f9:1a:98:3c:d5: 85:8d:85:cd:68:a5:1f:6b:82:d8:9e:d7:00:6c:81:2f:90:ac: ec:0e:6f:79:e4:90:32:c6:d2:c1:ae:36:3b:2e:4f:5d:d5:79: bf:a3:f4:b0:8b:4c:d1:71:67:3b:7a:ec:99:56:cb:2a:66:e1: cd:6c:1a:5b:6e:3f:49:a5:d3:cb:11:6b:df:73:ff:f7:a3:b2: c2:37:a2:33:67:c9:d5:e3:b5:f4:17:70:65:4c:d5:d0:7f:1d: a5:34:74:60:80:0c:56:80:87:73:35:2c:4c:45:b0:05:50:d3: e0:19:3d:28:ad:ec:ab:25:36:14:b0:8b:15:8c:c4:bb:6c:85: de:3d:90:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx N0QwMjExQjUwHhcNMjUxMTAzMDYxMDUyWhcNMjUxMTEwMDYxMDUxWjAYMRYwFAYD VQQDEw02OTA4NDc2Yy00ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqOJSGFXyNNPhrPUXPPnd6VXrvXyc1giCVqVRx8Bbx2Y7NchYSqzNfhzuG+X JzKyJX9TabOwgaGlEYTt3DT7vLXNKHAr2o3L51xvAvkkbONAG6zPfcAXl8TkkA58 DfMDZVBVUep3UkUp5K7bdbIs7cIPGtzXRQeF0pIRnj8eHtciIZHHU4cOA7kzgOgr Z59ogg9dC3FSMnp7xGLhkrQq1KiXcmnrV3tbg0mDSd128tuTsc/SLmsR95zkBz/r qKbnwxvHHGJUSVNG3rRWRAFggiW+sONQZo+XNBkpkvvi4E1oFwf1gTH66qVKI9RS B9XAyWJ8yJCxO5z4hFXzbXKCywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjAuNWB LIW4/yVRl8KCoAh14GX3MB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq ZFFockxQams0R2tYMENFYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEBg4ON8SoBkphQHLPUi6QJEzdkjeXBXbLfZOUU/tJK6qvhoIO7CjP yVpEhAwln3DjiZtwadHoZ8zkuKpVieD+4aTPDQLOe/UB+AEcBo5/Hm22V2INr4zA 5Yf4PFaZx0UkyTnaZwfBnI9DaF/ruOC1QT/X+godiQxw+RqYPNWFjYXNaKUfa4LY ntcAbIEvkKzsDm955JAyxtLBrjY7Lk9d1Xm/o/Swi0zRcWc7euyZVssqZuHNbBpb bj9JpdPLEWvfc//3o7LCN6IzZ8nV47X0F3BlTNXQfx2lNHRggAxWgIdzNSxMRbAF UNPgGT0oreyrJTYUsIsVjMS7bIXePZBc -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:42 2025 by rpki-client