$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: tcC6u6C9XS+vF5qHGUqGndaW7vM7EuB646mFNmZ2OkQ= Subject key identifier: E0:5D:7E:C4:F5:22:B8:B7:81:07:F7:4C:6C:F6:96:72:A6:37:88:44 Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 08:44:06 +0000 Manifest this update: Sun 19 Oct 2025 08:44:05 +0000 Manifest next update: Sun 26 Oct 2025 08:44:05 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: NMQSjXfTx8nSGL2ab2N7qk32+8zzZ6cM1cO67NSEQGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Oct 19 08:44:05 2025 GMT Not After : Oct 26 08:44:05 2025 GMT Subject: CN=68f4a4d6-c698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:7f:40:e2:f4:35:56:c2:c4:75:99:a7:4e: 6a:73:c2:54:b3:4b:9c:10:37:e5:20:fb:fc:1c:7b: dd:62:20:1f:49:06:10:58:1a:b4:41:b0:19:b8:cc: c3:41:f1:20:4b:c1:be:f5:f6:c3:52:8e:06:a0:bd: 95:5b:ff:ac:bc:23:11:4b:52:6b:b5:34:81:a7:d6: c3:71:ee:c5:e7:0d:49:56:90:91:65:be:c5:a6:c7: a4:bd:f4:b8:da:d9:2e:7e:6c:95:b5:2d:ab:d8:64: 70:61:1f:97:6e:96:21:23:67:a3:0c:a1:5a:e8:42: dd:74:9c:5e:d2:8c:6d:a1:d1:3d:a5:3d:fe:7c:72: f0:d0:ff:7f:e8:61:40:73:cf:52:98:6e:aa:20:9f: ec:e1:a8:5d:59:7e:ec:20:4d:3d:aa:63:ab:5b:ae: 93:dc:b7:58:e8:48:8f:a8:13:69:79:c0:3b:bd:10: 13:ac:83:f9:aa:6f:66:14:de:3e:d3:31:17:f2:65: c0:f3:04:0d:13:7f:19:38:ad:9c:e9:64:45:89:0f: e7:ac:a5:0e:4e:99:92:12:4b:39:23:9f:22:57:2f: 3a:ec:a9:6f:9a:9b:3b:86:58:92:46:6c:79:92:b5: 0c:b3:03:6b:d1:18:b1:b9:36:42:84:77:8f:c4:c9: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:7E:C4:F5:22:B8:B7:81:07:F7:4C:6C:F6:96:72:A6:37:88:44 X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:6a:dd:08:94:e3:6e:3c:72:63:04:6e:a1:b7:e8:f7:ee:43: 62:3b:da:a6:f4:e1:67:7a:51:a7:78:8a:90:40:46:c2:c2:20: 41:bc:b6:b4:3e:50:89:2c:16:24:1d:a9:7a:17:7a:05:4b:4e: 50:f5:00:7d:ae:2e:17:2a:17:c9:08:6e:64:0e:c7:0c:36:44: 2e:21:24:04:dd:63:de:ed:f3:df:8c:42:27:cc:bd:2a:02:74: 0d:2d:38:00:de:88:e6:c9:48:cd:93:c1:e9:52:4f:86:9d:40: a2:1a:f8:cf:58:da:96:d6:79:38:27:0d:26:29:13:cb:d0:32: c0:7c:27:ae:b9:21:2d:ea:3d:9f:e0:d3:a2:5b:8d:85:2d:62: 75:6d:5c:2f:97:13:5d:29:c8:b5:20:24:d6:8b:2f:9c:46:a9: 09:12:10:64:2b:d9:12:39:78:48:18:cd:e9:a6:9a:ce:fd:4e: 6f:32:1a:60:36:44:94:f3:0f:dd:e8:13:f9:7f:af:19:db:cf: 8a:50:1c:20:28:ab:8a:00:f3:4f:84:69:26:f2:ae:57:ac:bd: 18:2e:ba:c3:5d:42:65:38:ff:9f:55:17:f5:ec:82:db:80:9f: 07:43:7a:17:3f:d0:3c:0c:dc:fc:8c:3a:7f:61:3d:64:ae:64: 02:6a:58:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz NjhERUY0QTkwHhcNMjUxMDE5MDg0NDA1WhcNMjUxMDI2MDg0NDA1WjAYMRYwFAYD VQQDEw02OGY0YTRkNi1jNjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6x/QOL0NVbCxHWZp05qc8JUs0ucEDflIPv8HHvdYiAfSQYQWBq0QbAZuMzD QfEgS8G+9fbDUo4GoL2VW/+svCMRS1JrtTSBp9bDce7F5w1JVpCRZb7FpsekvfS4 2tkufmyVtS2r2GRwYR+XbpYhI2ejDKFa6ELddJxe0oxtodE9pT3+fHLw0P9/6GFA c89SmG6qIJ/s4ahdWX7sIE09qmOrW66T3LdY6EiPqBNpecA7vRATrIP5qm9mFN4+ 0zEX8mXA8wQNE38ZOK2c6WRFiQ/nrKUOTpmSEks5I58iVy867Klvmps7hliSRmx5 krUMswNr0RixuTZChHePxMkrbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBdfsT1 Iri3gQf3TGz2lnKmN4hEMB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5 S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI MlVVSTdBb2F6YWcyamU5S2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1at0IlONuPHJjBG6ht+j37kNiO9qm9OFnelGneIqQQEbCwiBBvLa0 PlCJLBYkHal6F3oFS05Q9QB9ri4XKhfJCG5kDscMNkQuISQE3WPe7fPfjEInzL0q AnQNLTgA3ojmyUjNk8HpUk+GnUCiGvjPWNqW1nk4Jw0mKRPL0DLAfCeuuSEt6j2f 4NOiW42FLWJ1bVwvlxNdKci1ICTWiy+cRqkJEhBkK9kSOXhIGM3ppprO/U5vMhpg NkSU8w/d6BP5f68Z28+KUBwgKKuKAPNPhGkm8q5XrL0YLrrDXUJlOP+fVRf17ILb gJ8HQ3oXP9A8DNz8jDp/YT1krmQCaljg -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:49 2025 by rpki-client