$ rpki-client -vvf rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft File: Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft (raw, json) Hash identifier: OxNmGsw1qX+nf75qEaUwV5C9+5LQ54RNrgLst/cIq3o= Subject key identifier: 28:A5:08:73:17:85:F7:F4:C3:E4:F7:A0:91:61:8C:1B:59:3B:D9:D6 Authority key identifier: 67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 Certificate issuer: /CN=A91180E8/serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft Manifest number: 80 Signing time: Sun 19 Oct 2025 09:58:44 +0000 Manifest this update: Sun 19 Oct 2025 09:58:43 +0000 Manifest next update: Sun 26 Oct 2025 09:58:43 +0000 Files and hashes: 1: Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl (hash: 3RO7eRvMBID3/7fO3rD3a7BB2FsrPClUTH+v0cgttqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91180E8, serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Validity Not Before: Oct 19 09:58:43 2025 GMT Not After : Oct 26 09:58:43 2025 GMT Subject: CN=68f4b653-9d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:e1:42:62:fd:9f:22:5b:e5:cf:79:13:dc: 0f:a6:11:2a:bf:2b:63:c4:4d:86:f0:50:77:a0:19: 44:9e:36:ad:04:26:69:a6:d9:f2:e8:8f:ad:55:f4: 09:66:41:5a:a3:aa:86:b9:ab:bb:cd:b5:77:7b:b8: b4:d0:4e:99:b9:88:01:d2:ef:03:27:9c:b7:22:5e: a7:90:66:ab:4a:bc:3a:47:52:bd:c2:b8:76:d8:ad: 5d:c7:66:2f:42:98:11:6b:04:3c:a7:ea:d9:0b:45: fd:f1:24:61:5e:0b:3c:92:42:25:56:66:64:50:25: 6d:e5:8e:b1:7c:62:86:ff:55:04:cd:78:3f:49:bf: e7:e2:09:11:be:62:7c:5a:e2:3e:2f:df:a3:50:1d: 1b:58:38:be:a3:9a:88:bb:8b:8b:bf:79:3c:21:12: 28:bf:bb:40:b1:90:9b:0e:e9:b9:9a:51:e6:ea:f7: 7d:0e:66:e8:c4:aa:88:1e:e9:2f:bb:e5:4e:e6:29: 75:44:11:70:3f:18:bf:c0:e6:46:7e:53:dc:46:fa: 13:0f:69:8b:0b:0a:30:1b:ed:06:cd:c3:32:96:f9: b9:17:f2:b6:51:41:cd:69:9f:5c:a3:6b:6f:17:61: af:65:ca:d3:4e:56:ee:9a:2d:bf:9d:8e:1f:14:c7: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A5:08:73:17:85:F7:F4:C3:E4:F7:A0:91:61:8C:1B:59:3B:D9:D6 X509v3 Authority Key Identifier: keyid:67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:65:df:a3:80:c5:27:9f:af:8c:cb:88:70:b2:da:97:07:10: bc:09:cc:fe:e7:26:9b:4a:21:45:98:bd:84:ed:35:b8:c6:d6: 69:c8:8b:c9:6d:c2:7c:dc:9b:f0:87:8e:dc:ac:28:d4:b4:2d: 47:c5:5e:c8:f0:48:a5:0d:96:0d:7d:80:8f:d0:51:ed:e1:1b: bd:93:be:60:65:59:64:8b:ad:dd:f2:15:af:ae:b8:41:89:2b: 76:09:83:af:13:e5:40:dd:c8:93:bc:1e:a8:09:31:5d:cd:23: 1e:78:3b:a6:7e:fe:78:c6:f4:4a:a0:c1:12:5b:f5:a6:26:6d: cc:87:3d:df:00:c2:d8:be:a9:64:d3:d5:58:17:b7:03:4a:d4: 10:ec:24:d7:c7:d3:7e:d5:40:df:30:7e:c3:fb:f8:6b:a6:76: 4b:f6:e0:a8:69:b8:53:ff:2e:12:77:1f:0b:c4:6b:62:ae:f5: cc:2e:0a:aa:60:5a:60:64:55:bc:21:83:26:c6:cc:c6:ba:58: 5d:3b:47:9d:5a:33:fe:71:54:e2:60:9c:3d:a6:2d:1b:48:60: 9a:59:19:88:4b:58:24:e5:de:2b:22:42:dd:e3:16:9a:39:3b: 33:51:75:4c:ea:bd:61:70:9e:7c:e4:c2:b9:65:63:39:56:b3: 39:ad:e1:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwRTgxMTAvBgNVBAUTKDY3RjI5QjM1QTg5NDJBQTZCN0Y0MUFFRkIzNEEwNjc2 RkQ2OTUwOTcwHhcNMjUxMDE5MDk1ODQzWhcNMjUxMDI2MDk1ODQzWjAYMRYwFAYD VQQDEw02OGY0YjY1My05ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK/hQmL9nyJb5c95E9wPphEqvytjxE2G8FB3oBlEnjatBCZpptny6I+tVfQJ ZkFao6qGuau7zbV3e7i00E6ZuYgB0u8DJ5y3Il6nkGarSrw6R1K9wrh22K1dx2Yv QpgRawQ8p+rZC0X98SRhXgs8kkIlVmZkUCVt5Y6xfGKG/1UEzXg/Sb/n4gkRvmJ8 WuI+L9+jUB0bWDi+o5qIu4uLv3k8IRIov7tAsZCbDum5mlHm6vd9DmboxKqIHukv u+VO5il1RBFwPxi/wOZGflPcRvoTD2mLCwowG+0GzcMylvm5F/K2UUHNaZ9co2tv F2GvZcrTTlbumi2/nY4fFMda6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCilCHMX hff0w+T3oJFhjBtZO9nWMB8GA1UdIwQYMBaAFGfymzWolCqmt/Qa77NKBnb9aVCX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODBFOC8zQTlGQUM1NEU5 RDYxMUVGOEQwNEI2NzdDNEY5QUUwMi9aX0tiTmFpVUtxYTM5QnJ2czBvR2R2MXBV SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfS2JOYWlVS3FhMzlCcnZzMG9HZHYxcFVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODBFOC8zQTlGQUM1NEU5RDYxMUVGOEQwNEI2NzdDNEY5QUUwMi9aX0tiTmFpVUtx YTM5QnJ2czBvR2R2MXBVSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWZd+jgMUnn6+My4hwstqXBxC8Ccz+5yabSiFFmL2E7TW4xtZpyIvJ bcJ83Jvwh47crCjUtC1HxV7I8EilDZYNfYCP0FHt4Ru9k75gZVlki63d8hWvrrhB iSt2CYOvE+VA3ciTvB6oCTFdzSMeeDumfv54xvRKoMESW/WmJm3Mhz3fAMLYvqlk 09VYF7cDStQQ7CTXx9N+1UDfMH7D+/hrpnZL9uCoabhT/y4Sdx8LxGtirvXMLgqq YFpgZFW8IYMmxszGulhdO0edWjP+cVTiYJw9pi0bSGCaWRmIS1gk5d4rIkLd4xaa OTszUXVM6r1hcJ585MK5ZWM5VrM5reGA -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:38 2025 by rpki-client