$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft File: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json) Hash identifier: Nx1S0/cE0kSrmdjySAZixnj7HCZMP36LRgAI24IuRAc= Subject key identifier: 58:DF:BE:86:AE:0E:64:23:FE:39:B7:35:11:07:52:2D:2D:BF:60:41 Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 Certificate issuer: /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft Manifest number: 3A Signing time: Sun 19 Oct 2025 10:59:11 +0000 Manifest this update: Sun 19 Oct 2025 10:59:11 +0000 Manifest next update: Sun 26 Oct 2025 10:59:11 +0000 Files and hashes: 1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: evbEH4nLgP2MNenZPIQunapIai2UBizPzYep3LqwqnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Validity Not Before: Oct 19 10:59:11 2025 GMT Not After : Oct 26 10:59:11 2025 GMT Subject: CN=68f4c47f-e5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:ea:de:bf:d9:50:7e:d0:1d:cd:e3:e5:2f: e0:19:e5:f1:c3:fe:e7:96:2d:d7:c7:6b:45:af:43: f2:2f:5b:f5:20:ac:49:a1:fd:12:71:d8:e7:51:0b: c2:aa:18:3f:1e:95:8a:4e:60:24:96:78:93:a3:4f: 66:d4:bc:50:33:21:33:7e:44:ee:82:37:d0:8b:f6: d1:e3:a6:ec:55:32:6e:34:8a:03:4a:33:48:a5:76: 45:e0:4b:73:1d:95:b1:3d:a2:eb:54:37:53:da:6b: 35:d3:ed:50:9c:95:77:20:21:3b:07:a8:85:5b:f5: 5b:30:95:c6:7a:fc:b5:c5:ee:73:9d:c5:6e:0a:ea: 1d:07:95:a1:65:45:ea:30:17:03:aa:9f:ed:26:ed: fd:e7:f3:0f:7f:76:ae:1c:b9:d4:7b:94:18:86:e1: e1:c2:89:31:30:65:d5:a0:03:e8:8a:98:86:94:2e: 59:2b:6c:b9:25:b7:f8:05:13:29:f5:f6:72:11:11: d0:fc:3a:1e:2a:e7:d3:fe:9e:73:da:29:17:2e:92: d5:00:3f:d2:f6:55:61:18:58:0e:a4:60:0a:40:1a: 03:41:1e:24:cb:13:a6:d6:8e:02:8e:9f:72:f3:4c: 3a:d5:28:5b:16:90:df:ea:68:50:3d:67:d4:df:2c: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:BE:86:AE:0E:64:23:FE:39:B7:35:11:07:52:2D:2D:BF:60:41 X509v3 Authority Key Identifier: keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:50:4e:b5:d6:40:84:8a:fa:13:87:a0:49:be:ad:78:e0:55: d5:a0:f5:48:50:dc:c8:86:89:69:c7:ea:53:0c:6d:b8:a4:03: ef:cc:09:02:32:20:35:65:0f:a0:48:2e:78:e4:0d:f9:e4:a3: 2a:02:cd:43:2c:a5:25:a0:d8:58:8c:e3:f7:d7:be:a0:83:a4: 7f:e7:74:05:c7:d3:02:16:ce:b8:82:54:da:08:5f:33:48:5d: ea:fd:49:4e:6e:11:3f:db:b7:c2:8f:a2:dc:76:34:40:ff:d5: ca:dc:6e:98:cb:0c:19:f6:51:c6:7e:4d:58:19:35:9d:7f:78: 39:2b:8b:ab:63:de:ea:f4:6b:66:e3:a4:54:7f:91:1b:29:1b: c6:1a:f9:9e:13:30:78:64:7c:aa:32:08:03:02:4c:e4:ef:bd: da:2f:28:06:df:29:ad:63:4d:58:f8:27:90:ff:45:56:84:26: df:48:77:6f:aa:92:6e:e8:ac:92:da:4a:6c:60:b0:c7:33:b2: 3c:af:c3:9f:39:63:79:52:25:be:e6:53:dc:d0:d7:bf:c9:44: 95:b0:fe:b8:04:df:58:47:14:ff:88:f3:ee:1b:d1:c7:1b:4b: 03:f8:86:ab:f7:44:56:7f:86:e4:24:14:5e:dc:4f:cc:26:a4: a6:11:49:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNjQ2N0U5MjZDMjE0NEVDRDBGMjc0OEY4NDkzMjhGODVG MDI4QUU5NDAeFw0yNTEwMTkxMDU5MTFaFw0yNTEwMjYxMDU5MTFaMBgxFjAUBgNV BAMTDTY4ZjRjNDdmLWU1YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCawurev9lQftAdzePlL+AZ5fHD/ueWLdfHa0WvQ/IvW/UgrEmh/RJx2OdRC8Kq GD8elYpOYCSWeJOjT2bUvFAzITN+RO6CN9CL9tHjpuxVMm40igNKM0ildkXgS3Md lbE9outUN1PaazXT7VCclXcgITsHqIVb9VswlcZ6/LXF7nOdxW4K6h0HlaFlReow FwOqn+0m7f3n8w9/dq4cudR7lBiG4eHCiTEwZdWgA+iKmIaULlkrbLklt/gFEyn1 9nIREdD8Oh4q59P+nnPaKRcuktUAP9L2VWEYWA6kYApAGgNBHiTLE6bWjgKOn3Lz TDrVKFsWkN/qaFA9Z9TfLFg5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWN++hq4O ZCP+Obc1EQdSLS2/YEEwHwYDVR0jBBgwFoAUZGfpJsIUTs0PJ0j4STKPhfAorpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0RCMEFFNDM2NTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMwUEowajRTVEtQaGZBb3Jw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkdmcEpzSVVUczBQSjBqNFNUS1BoZkFvcnBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0RCMEFFNDM2NTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMw UEowajRTVEtQaGZBb3JwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1QTrXWQISK+hOHoEm+rXjgVdWg9UhQ3MiGiWnH6lMMbbikA+/MCQIy IDVlD6BILnjkDfnkoyoCzUMspSWg2FiM4/fXvqCDpH/ndAXH0wIWzriCVNoIXzNI Xer9SU5uET/bt8KPotx2NED/1crcbpjLDBn2UcZ+TVgZNZ1/eDkri6tj3ur0a2bj pFR/kRspG8Ya+Z4TMHhkfKoyCAMCTOTvvdovKAbfKa1jTVj4J5D/RVaEJt9Id2+q km7orJLaSmxgsMczsjyvw585Y3lSJb7mU9zQ17/JRJWw/rgE31hHFP+I8+4b0ccb SwP4hqv3RFZ/huQkFF7cT8wmpKYRSV4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:41 2025 by rpki-client