$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: gT940C0AA58ggfzv/zYPi28TO0IiICXKaYhFONDukG4= Subject key identifier: 7B:EE:6E:3D:78:5A:8E:F4:6D:38:8D:D8:7F:F0:2C:0C:60:C2:D7:89 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 308A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 307B Signing time: Sat 18 Oct 2025 15:37:58 +0000 Manifest this update: Sat 18 Oct 2025 15:37:58 +0000 Manifest next update: Sat 25 Oct 2025 15:37:58 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: m9dV9d6FB62G3a9szwQuE+imE5Naitj+H9PiKhxU8AE=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12426 (0x308a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Oct 18 15:37:58 2025 GMT Not After : Oct 25 15:37:58 2025 GMT Subject: CN=68f3b456-e335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:f3:53:d1:91:23:37:f2:c1:0b:f8:be:e7: 4a:f7:39:6b:57:99:7c:a7:35:f6:40:c0:1b:28:2f: dd:ad:f5:ab:85:5f:f2:11:6a:c0:46:38:b4:09:6c: e1:7b:40:27:f3:81:4e:23:83:9c:62:42:11:0a:5d: f7:53:10:09:a1:9d:46:18:2d:d7:6d:45:2a:b6:fb: 48:a1:f0:ca:40:92:80:5c:13:7e:65:db:62:3f:d0: 8a:91:a6:b1:6e:cb:4a:23:a9:7b:f7:17:2d:5a:00: 6a:18:ae:82:3d:2c:98:0f:07:b3:00:46:5a:d2:1d: e5:01:01:fd:ed:04:7b:03:37:35:54:3c:07:cb:28: de:75:a7:c9:1e:d2:21:8b:e3:c6:af:54:0f:be:fa: be:c9:69:f1:fd:a1:82:11:79:4e:7d:d6:82:76:e5: 0b:28:3d:d9:f0:8d:48:d5:25:d2:6a:9e:a9:5a:3c: f3:ab:b6:76:56:95:6f:35:4a:90:a5:cb:bb:83:4a: 94:1a:86:73:8e:a4:33:90:05:5b:30:86:42:71:10: 7c:ab:c5:6e:54:5d:a8:22:75:0a:d2:89:cb:c6:cd: 3a:94:cc:fc:b0:7a:73:09:aa:6a:d3:d3:2e:ed:e3: 79:ea:8c:29:9e:22:17:4f:b3:17:f7:1d:ae:8c:f9: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EE:6E:3D:78:5A:8E:F4:6D:38:8D:D8:7F:F0:2C:0C:60:C2:D7:89 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e7:46:42:29:44:a2:fa:77:b2:44:69:55:3b:c8:4f:71:df: e4:33:b7:29:a2:e5:9f:4f:2c:f7:a5:00:1f:dc:23:93:14:00: 09:ad:ab:bb:d6:a4:7f:ff:82:7f:c9:47:95:cf:ab:fb:92:f2: 77:57:d0:86:ba:d3:5f:27:84:84:99:85:fb:7f:ce:04:5a:24: b9:a9:e0:22:00:51:0a:8d:1f:19:32:3d:f8:01:16:3d:73:07: 95:9b:b2:a6:db:9d:8b:b8:74:c3:85:94:53:a0:ad:2b:b1:a6: 0a:18:a0:ce:16:28:de:f7:cc:4e:06:d6:37:88:85:70:17:f6: 68:e2:f7:c5:0f:bc:bd:66:ed:3b:a3:7b:f8:98:a6:3c:50:6f: ac:d1:5b:8c:38:74:3c:f5:98:02:40:c7:9b:16:6a:18:91:58: 2f:10:83:52:ca:12:4a:0b:c5:f4:12:0f:24:b5:34:62:dc:19: 94:a3:da:fb:97:0c:6e:dd:56:e5:1d:eb:fc:d3:29:fc:98:cf: 3e:0d:70:e8:d3:b0:09:45:7e:6f:7e:24:84:41:1c:51:aa:c1: f3:07:2b:99:41:5b:29:3d:a7:a4:5f:c8:a5:a6:be:e1:ac:b9: 51:52:28:8c:a5:f3:f0:16:31:c6:54:d3:cb:6f:a9:73:bd:ab: f6:3e:ee:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUxMDE4MTUzNzU4WhcNMjUxMDI1MTUzNzU4WjAYMRYwFAYD VQQDEw02OGYzYjQ1Ni1lMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wvzU9GRIzfywQv4vudK9zlrV5l8pzX2QMAbKC/drfWrhV/yEWrARji0CWzh e0An84FOI4OcYkIRCl33UxAJoZ1GGC3XbUUqtvtIofDKQJKAXBN+ZdtiP9CKkaax bstKI6l79xctWgBqGK6CPSyYDwezAEZa0h3lAQH97QR7Azc1VDwHyyjedafJHtIh i+PGr1QPvvq+yWnx/aGCEXlOfdaCduULKD3Z8I1I1SXSap6pWjzzq7Z2VpVvNUqQ pcu7g0qUGoZzjqQzkAVbMIZCcRB8q8VuVF2oInUK0onLxs06lMz8sHpzCapq09Mu 7eN56owpniIXT7MX9x2ujPlTbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvubj14 Wo70bTiN2H/wLAxgwteJMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB950ZCKUSi+neyRGlVO8hPcd/kM7cpouWfTyz3pQAf3COTFAAJrau7 1qR//4J/yUeVz6v7kvJ3V9CGutNfJ4SEmYX7f84EWiS5qeAiAFEKjR8ZMj34ARY9 cweVm7Km252LuHTDhZRToK0rsaYKGKDOFije98xOBtY3iIVwF/Zo4vfFD7y9Zu07 o3v4mKY8UG+s0VuMOHQ89ZgCQMebFmoYkVgvEINSyhJKC8X0Eg8ktTRi3BmUo9r7 lwxu3VblHev80yn8mM8+DXDo07AJRX5vfiSEQRxRqsHzByuZQVspPaekX8ilpr7h rLlRUiiMpfPwFjHGVNPLb6lzvav2Pu4q -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:21 2025 by rpki-client