$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: y5TmtK/7vNJDrYzaB4c+DiZTg1k9FbLWMfT3TEb3nxI= Subject key identifier: 85:F7:FF:F3:C5:24:B4:D5:E0:FE:F6:BF:74:61:33:1C:52:55:1F:62 Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 11CE Signing time: Mon 20 Oct 2025 20:27:31 +0000 Manifest this update: Mon 20 Oct 2025 20:27:30 +0000 Manifest next update: Mon 27 Oct 2025 20:27:30 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: /TWRFKi8SIf403t0I5rgFwdVN4pMelgudJoeGCD9wi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: Oct 20 20:27:30 2025 GMT Not After : Oct 27 20:27:30 2025 GMT Subject: CN=68f69b33-ba5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:72:9e:38:db:13:c7:6b:e4:b4:d7:a8:e2: 9d:c5:5d:bd:51:5d:cd:17:c3:8a:c7:95:32:20:e8: 82:09:5b:ca:14:20:b7:c8:c3:8f:9c:af:8e:39:5b: 8a:25:0f:6b:65:0a:96:1a:2e:59:b7:11:20:c4:f2: b8:ba:59:02:41:c1:04:ad:b5:9e:21:c5:6d:27:bd: 69:70:33:e2:16:ba:89:5b:95:61:24:23:65:7b:49: 2d:44:58:1a:07:47:9b:20:8f:ba:80:81:e9:06:b9: 05:96:ea:a6:7d:88:2f:49:b1:3a:3b:c4:61:2c:fd: 15:d0:8d:db:aa:0c:6d:4a:7b:8d:86:25:49:32:1c: e8:2d:d7:23:33:7d:b6:8d:56:7b:86:a0:0f:27:33: 7b:91:9f:23:d2:e0:5e:e9:b9:a0:61:0d:ae:94:97: 1c:8e:f3:ef:40:09:42:62:b6:33:f0:f3:fe:14:0b: 75:e0:64:92:e9:d7:39:00:a3:a5:1c:55:24:08:ea: eb:97:b1:d8:fd:4f:01:ee:fb:aa:ae:2e:9e:2d:42: e0:ba:29:0c:6f:72:3b:db:48:f4:0a:5a:79:ee:d4: 48:8c:a7:32:5d:6c:04:05:30:87:92:4a:80:ba:32: e0:84:f5:58:6f:8f:d2:a0:e1:6d:8b:95:cb:4d:2f: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F7:FF:F3:C5:24:B4:D5:E0:FE:F6:BF:74:61:33:1C:52:55:1F:62 X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e2:f9:24:6a:af:44:0c:56:90:08:d3:02:04:b9:d6:5b:c4: 53:e0:80:e1:fd:08:cb:38:81:8d:90:41:be:d9:5e:2e:9d:4a: ea:07:66:92:ce:50:f4:79:ee:50:61:c2:b7:95:b2:32:25:30: 31:d9:c0:b3:f7:6e:bd:7a:b7:0c:b3:88:de:66:ad:5e:cd:8b: ea:62:fa:83:38:1c:83:24:33:bb:3c:d2:db:ab:3d:8a:fe:49: e3:07:38:98:95:6f:0f:92:6b:b7:c2:46:0f:fc:d1:d6:68:dc: b9:67:cf:66:1f:ff:15:1a:c2:bf:10:9a:f8:38:96:3b:11:8b: 5e:56:01:3b:06:16:14:38:b1:c2:c8:9c:4c:af:5a:0a:63:ce: ea:c0:e7:8f:a9:6e:35:43:6b:e6:3b:3e:00:87:b4:c5:2f:49: 2f:16:8c:78:9f:e5:21:4b:f6:6a:c9:f1:a9:fd:1a:8b:b0:df: 3a:28:51:98:ab:fd:df:6b:aa:93:8f:25:79:84:a9:71:c0:53: 1c:80:44:56:bb:e6:0a:b4:49:2d:32:cd:09:fd:9f:64:9d:92: b6:b4:23:8e:fe:65:28:db:6c:ff:9a:48:5c:59:1d:2e:a5:f9: c4:f4:b0:03:13:c6:4f:42:c5:d1:7a:e5:55:f7:eb:7d:9a:92: bc:8e:11:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjUxMDIwMjAyNzMwWhcNMjUxMDI3MjAyNzMwWjAYMRYwFAYD VQQDEw02OGY2OWIzMy1iYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRJynjjbE8dr5LTXqOKdxV29UV3NF8OKx5UyIOiCCVvKFCC3yMOPnK+OOVuK JQ9rZQqWGi5ZtxEgxPK4ulkCQcEErbWeIcVtJ71pcDPiFrqJW5VhJCNle0ktRFga B0ebII+6gIHpBrkFluqmfYgvSbE6O8RhLP0V0I3bqgxtSnuNhiVJMhzoLdcjM322 jVZ7hqAPJzN7kZ8j0uBe6bmgYQ2ulJccjvPvQAlCYrYz8PP+FAt14GSS6dc5AKOl HFUkCOrrl7HY/U8B7vuqri6eLULguikMb3I720j0Clp57tRIjKcyXWwEBTCHkkqA ujLghPVYb4/SoOFti5XLTS/QcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX3//PF JLTV4P72v3RhMxxSVR9iMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF4vkkaq9EDFaQCNMCBLnWW8RT4IDh/QjLOIGNkEG+2V4unUrqB2aS zlD0ee5QYcK3lbIyJTAx2cCz9269ercMs4jeZq1ezYvqYvqDOByDJDO7PNLbqz2K /knjBziYlW8Pkmu3wkYP/NHWaNy5Z89mH/8VGsK/EJr4OJY7EYteVgE7BhYUOLHC yJxMr1oKY87qwOePqW41Q2vmOz4Ah7TFL0kvFox4n+UhS/ZqyfGp/RqLsN86KFGY q/3fa6qTjyV5hKlxwFMcgERWu+YKtEktMs0J/Z9knZK2tCOO/mUo22z/mkhcWR0u pfnE9LADE8ZPQsXReuVV9+t9mpK8jhG7 -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:52 2025 by rpki-client