$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: jO921mNWw8cqRkB2n/iZI4iXNntaYt2PX33aM03DKb4= Subject key identifier: 1A:77:54:C4:A4:D6:71:0A:47:36:7C:6F:5F:01:A9:0D:F3:0B:D5:E0 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 23A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 2390 Signing time: Sat 18 Oct 2025 16:03:58 +0000 Manifest this update: Sat 18 Oct 2025 16:03:57 +0000 Manifest next update: Sat 25 Oct 2025 16:03:57 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: FMS5EYEzXmDFGOeTtjEfn4pPDNSdGiiDh3fvChW8QPo=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9121 (0x23a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Oct 18 16:03:57 2025 GMT Not After : Oct 25 16:03:57 2025 GMT Subject: CN=68f3ba6e-86cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:d0:df:7e:9a:27:a9:83:ed:3b:10:d7:96: 0a:c7:a4:71:2f:e6:b2:82:0d:c0:b6:ca:4c:95:a4: 92:fd:a5:19:6b:c2:28:08:4d:6d:ea:e3:fe:e6:a9: 8d:fa:ba:a8:b9:d5:d7:a1:26:a2:81:c5:58:2a:d9: 0c:3e:bc:68:81:77:08:4c:0f:35:85:cc:27:47:d2: 7d:44:b5:c1:ea:fc:7b:66:17:0c:df:c4:66:a9:b3: f6:2b:d8:21:63:92:2a:81:5c:26:84:99:57:b8:3e: cd:18:c6:65:3d:04:ee:24:cc:03:6c:d7:dc:2f:ea: 8f:c8:a9:e3:8f:b6:db:7b:35:73:2f:57:36:f0:3e: 45:92:27:5a:1c:da:e7:f8:dd:22:12:a9:85:75:76: 7c:d1:59:c2:7c:ff:06:ef:d0:51:f4:4a:bc:ef:e9: 78:9b:fe:46:ac:34:9a:35:ab:c8:1e:9e:0d:14:de: f2:da:b8:08:88:89:26:56:75:e7:88:8e:4a:23:d0: 59:42:d2:a5:57:a6:05:46:d6:75:d5:f9:e7:cc:82: c3:1a:ff:6d:bb:95:38:60:53:e5:56:05:fb:5c:30: 9d:a2:1b:d8:79:d4:b2:0c:75:05:4f:4f:55:d3:2a: c2:e6:d7:9e:c5:6e:f7:09:b6:81:e8:9b:5f:05:96: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:54:C4:A4:D6:71:0A:47:36:7C:6F:5F:01:A9:0D:F3:0B:D5:E0 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:46:71:0d:f7:e7:30:34:c2:dc:cd:46:f1:5b:be:39:0e:33: a6:13:c1:93:b6:ae:0e:ca:8a:a3:47:66:1e:99:94:a0:c3:cb: 57:7d:99:c9:ab:ba:5a:e8:ce:1c:b6:48:1c:3d:71:a0:66:ba: e6:eb:e8:c7:bf:b1:02:21:16:ae:a0:46:23:04:bf:1f:f0:62: cb:7e:6e:30:72:28:5a:af:5a:e8:be:a0:ba:83:bd:4c:18:1b: 87:63:65:85:90:a1:1f:50:cf:f6:da:b7:52:e0:30:5b:a5:99: 79:4c:fb:b7:16:61:ae:ee:c3:18:50:59:22:68:db:3e:88:d2: 6d:9a:83:8c:6a:43:8b:ca:63:d1:4d:98:e5:f2:b3:0d:bf:1b: c6:d3:79:54:95:e2:b8:4d:35:82:c5:d1:4f:3f:19:e3:ee:c7: 7e:96:3d:9d:97:d6:15:f6:ab:90:86:ff:69:9a:39:be:83:51: b1:76:1e:2d:7a:67:3b:d4:9b:b4:64:b3:7f:e0:53:0c:ed:53: 81:e2:d8:8c:51:f8:6d:c0:6f:f2:28:1e:90:1a:a1:a3:1d:fc: 05:41:6f:c8:69:ec:d7:28:dd:37:86:c8:ad:bc:fe:b4:78:2a: 16:fd:bd:58:58:4e:b3:19:e4:b1:67:10:26:27:c3:26:67:a1: 62:bf:e7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUxMDE4MTYwMzU3WhcNMjUxMDI1MTYwMzU3WjAYMRYwFAYD VQQDEw02OGYzYmE2ZS04NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvrQ336aJ6mD7TsQ15YKx6RxL+aygg3AtspMlaSS/aUZa8IoCE1t6uP+5qmN +rqoudXXoSaigcVYKtkMPrxogXcITA81hcwnR9J9RLXB6vx7ZhcM38RmqbP2K9gh Y5IqgVwmhJlXuD7NGMZlPQTuJMwDbNfcL+qPyKnjj7bbezVzL1c28D5FkidaHNrn +N0iEqmFdXZ80VnCfP8G79BR9Eq87+l4m/5GrDSaNavIHp4NFN7y2rgIiIkmVnXn iI5KI9BZQtKlV6YFRtZ11fnnzILDGv9tu5U4YFPlVgX7XDCdohvYedSyDHUFT09V 0yrC5teexW73CbaB6JtfBZawVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp3VMSk 1nEKRzZ8b18BqQ3zC9XgMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuRnEN9+cwNMLczUbxW745DjOmE8GTtq4OyoqjR2YemZSgw8tXfZnJ q7pa6M4ctkgcPXGgZrrm6+jHv7ECIRauoEYjBL8f8GLLfm4wcihar1rovqC6g71M GBuHY2WFkKEfUM/22rdS4DBbpZl5TPu3FmGu7sMYUFkiaNs+iNJtmoOMakOLymPR TZjl8rMNvxvG03lUleK4TTWCxdFPPxnj7sd+lj2dl9YV9quQhv9pmjm+g1Gxdh4t emc71Ju0ZLN/4FMM7VOB4tiMUfhtwG/yKB6QGqGjHfwFQW/IaezXKN03hsitvP60 eCoW/b1YWE6zGeSxZxAmJ8MmZ6Fiv+cw -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:12 2025 by rpki-client