$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: SWdUW6PLE5z0htWXWDzHieuEbRM/OBpBV9MCm9lXY+4= Subject key identifier: 7D:0B:D6:CD:C8:55:50:43:22:73:34:FC:46:B8:30:0D:34:51:D4:4E Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: C6 Signing time: Sun 19 Oct 2025 08:54:58 +0000 Manifest this update: Sun 19 Oct 2025 08:54:57 +0000 Manifest next update: Sun 26 Oct 2025 08:54:57 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: qAOMW6qBNVMaSy2+WZxwkfkJ3xRATwfYJEGP2LDMap0=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: iI9yotfrL9J3LQc+csF8mlXtrJJ2hdKlLEmN7bc8pzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Oct 19 08:54:57 2025 GMT Not After : Oct 26 08:54:57 2025 GMT Subject: CN=68f4a761-254b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:fd:ed:36:db:de:a0:09:18:38:77:5e:f6: 41:cf:71:f1:f3:f0:ae:0d:26:b9:44:3a:1c:86:21: b9:91:d0:cd:c2:eb:42:55:b6:68:27:29:20:ea:4a: 7f:fa:32:c8:3d:94:f0:66:2a:d5:b2:85:bc:44:14: 45:eb:b5:79:84:fe:b0:cf:6b:25:cc:e8:17:9e:3b: 64:fc:83:05:e6:1b:24:95:0c:f1:f7:bb:b7:35:e8: ac:06:f3:d3:b9:1f:ee:56:43:9f:45:e7:13:80:c3: 1a:af:f2:b8:a1:af:29:c4:08:bb:bd:f5:6c:4a:12: d4:dd:16:79:7d:ca:20:b5:3c:14:94:69:31:35:fe: 3d:4b:5e:da:27:16:20:11:80:3a:d6:bb:46:e8:f4: 6f:6a:14:4f:70:6b:74:4d:72:d6:f6:67:a9:db:19: 9f:d5:25:f7:70:3b:b0:5d:44:11:c8:df:85:2b:bd: ed:a0:eb:e5:ea:e7:25:ef:72:54:5d:67:d2:d1:40: 77:3a:33:0c:82:51:7e:3b:17:b6:e2:db:e8:7d:45: b9:7b:e1:1c:44:72:c6:db:2d:c9:15:02:ae:a4:65: 2f:59:c6:ba:e1:c4:cd:fd:8a:c8:c1:36:8a:35:c2: cf:92:6b:19:83:2b:ad:85:85:dd:07:22:8c:14:0e: ad:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:D6:CD:C8:55:50:43:22:73:34:FC:46:B8:30:0D:34:51:D4:4E X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:92:a1:b5:9b:b8:e1:51:03:df:b2:13:f8:fd:38:cd:31:99: b9:17:ca:7e:c2:45:85:08:eb:4f:c9:52:24:33:69:3d:15:78: 79:09:a9:97:c2:78:29:3d:37:1f:e2:55:3b:bb:0b:bf:59:b9: 6e:27:11:01:f9:e4:d4:ea:3a:d4:be:19:b1:93:14:78:3d:8f: 92:d7:e7:b9:d8:30:23:8f:0f:26:be:ac:9b:2a:38:ec:ba:17: 2a:19:ed:be:e3:57:2b:ca:fa:26:bc:e1:ef:74:54:aa:e8:7e: b1:a9:b3:18:94:f3:e6:8a:0c:f3:08:69:55:35:be:13:9f:62: e2:1d:07:34:bc:91:36:75:49:07:d1:af:6b:d9:cf:62:dd:e5: 22:f5:cd:68:e6:5b:c5:b6:fc:f2:e5:ec:b0:a6:00:21:e1:38: 66:a2:2a:70:c9:d6:fc:7f:e4:ca:ba:1a:f5:0e:d2:f1:0a:91: 5e:bf:b4:3e:5f:b5:89:af:85:f8:f9:1f:64:24:77:7e:60:ed: 23:e8:bc:56:8e:33:68:05:74:17:7f:61:17:36:0a:ff:88:b9: ee:21:00:68:f8:93:2c:80:8c:1c:f9:ef:5b:06:16:1b:a6:fd: 1c:4c:6f:3d:7b:63:08:f0:37:05:b8:99:c0:e8:50:de:26:f9: aa:ef:62:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUxMDE5MDg1NDU3WhcNMjUxMDI2MDg1NDU3WjAYMRYwFAYD VQQDEw02OGY0YTc2MS0yNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrH97Tbb3qAJGDh3XvZBz3Hx8/CuDSa5RDochiG5kdDNwutCVbZoJykg6kp/ +jLIPZTwZirVsoW8RBRF67V5hP6wz2slzOgXnjtk/IMF5hsklQzx97u3NeisBvPT uR/uVkOfRecTgMMar/K4oa8pxAi7vfVsShLU3RZ5fcogtTwUlGkxNf49S17aJxYg EYA61rtG6PRvahRPcGt0TXLW9mep2xmf1SX3cDuwXUQRyN+FK73toOvl6ucl73JU XWfS0UB3OjMMglF+Oxe24tvofUW5e+EcRHLG2y3JFQKupGUvWca64cTN/YrIwTaK NcLPkmsZgyuthYXdByKMFA6tfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0L1s3I VVBDInM0/Ea4MA00UdROMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkqG1m7jhUQPfshP4/TjNMZm5F8p+wkWFCOtPyVIkM2k9FXh5CamX wngpPTcf4lU7uwu/WbluJxEB+eTU6jrUvhmxkxR4PY+S1+e52DAjjw8mvqybKjjs uhcqGe2+41cryvomvOHvdFSq6H6xqbMYlPPmigzzCGlVNb4Tn2LiHQc0vJE2dUkH 0a9r2c9i3eUi9c1o5lvFtvzy5eywpgAh4Thmoipwydb8f+TKuhr1DtLxCpFev7Q+ X7WJr4X4+R9kJHd+YO0j6LxWjjNoBXQXf2EXNgr/iLnuIQBo+JMsgIwc+e9bBhYb pv0cTG89e2MI8DcFuJnA6FDeJvmq72JH -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:13 2025 by rpki-client