$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: 3tQSE1QwzQkF6227lKZM2cLSKYbSolZ7P/gKdsflfKY= Subject key identifier: EF:D5:A4:3B:26:EA:B4:39:8F:34:A8:61:1C:3B:00:45:17:B7:8D:0C Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C7D Signing time: Mon 20 Oct 2025 19:03:13 +0000 Manifest this update: Mon 20 Oct 2025 19:03:12 +0000 Manifest next update: Mon 27 Oct 2025 19:03:12 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: H5GcjHXwkoUOMOVJGJWwm8ORpLbJAlsMmVHS4lXjfu4=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Oct 20 19:03:12 2025 GMT Not After : Oct 27 19:03:12 2025 GMT Subject: CN=68f68771-3a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:1c:e7:89:2c:b4:b0:7d:52:25:80:fa:13: d6:1a:46:7f:44:0a:88:05:62:ab:0a:5e:58:73:e2: 07:84:a1:62:cb:8b:48:0d:2c:a6:87:73:55:a5:3a: d9:23:ca:d5:b4:7b:4d:18:83:66:58:43:ff:e9:33: 1e:80:b4:e9:4f:9a:a2:06:61:34:14:e9:4d:cf:bf: ff:a9:2d:3b:6f:c5:69:82:08:46:0d:cc:66:9c:ce: 8b:78:3f:80:9a:a7:6a:2a:0b:a3:6c:4f:80:50:aa: 78:cc:46:b2:c6:61:96:f2:65:eb:4e:b2:4e:5e:5f: b7:d3:8a:6f:49:0a:ab:a3:46:b3:65:a2:ef:be:73: 1b:a4:7c:dc:03:02:9b:54:31:6f:4f:39:19:b2:77: f5:85:62:69:69:bd:a6:00:84:78:91:a0:88:0f:35: 92:96:ca:62:d9:a0:e3:fc:3d:2e:d3:f6:83:b7:89: 4f:b2:70:6d:7e:b9:dc:79:2d:c2:e7:6b:34:3b:f4: 92:08:60:11:e9:c6:dd:72:90:3b:3d:cb:3f:5d:68: 3f:9b:f9:63:92:21:4c:d6:83:86:c5:57:c5:57:82: d0:19:51:42:6a:a2:5c:fd:11:37:b7:e5:e1:d5:24: d3:65:ea:7f:a9:f7:84:70:cb:ef:8c:d3:31:27:66: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D5:A4:3B:26:EA:B4:39:8F:34:A8:61:1C:3B:00:45:17:B7:8D:0C X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:22:af:c9:72:23:a9:6c:24:b8:5d:d7:2b:9f:a3:42:16:21: 0f:cd:69:d3:66:1e:2f:f6:b5:80:4a:3d:53:86:54:0d:42:a6: 5b:c5:13:ad:43:1c:75:22:f4:5b:11:53:e7:36:68:a7:0e:f1: 68:07:9a:58:32:f6:ee:b1:ce:d4:7b:c8:9c:d4:75:8c:a4:73: fb:34:f2:b2:05:2f:66:99:39:c4:6c:a6:52:1b:8c:27:2e:aa: b4:30:4a:fc:49:3a:ca:c3:94:35:4a:85:d1:29:a0:b2:ce:42: 32:4c:20:6f:c4:23:89:22:85:e0:ed:60:e8:28:0c:1a:3f:3b: d5:00:14:01:78:63:dd:1f:51:88:08:d7:17:b4:4b:2c:e2:5f: fe:89:61:db:cc:b7:a1:f7:51:48:32:c3:ff:42:2f:d5:9b:94: 69:30:3d:5a:0a:67:42:25:7f:75:7b:29:d4:61:b4:0a:9b:03: 66:1d:17:6b:1d:4f:ef:1b:03:5e:fd:00:66:47:49:4a:9b:9b: 3e:0c:68:f2:00:57:a5:3f:5c:47:f8:19:c7:b1:d9:dd:cc:e2: 34:6a:5c:a5:21:7d:b1:fb:43:8c:fd:1e:63:a9:40:bc:a7:c8: a7:c4:a9:d3:73:0e:cd:92:80:0d:bb:d5:e9:de:9b:b4:c3:b8: b8:0d:e2:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUxMDIwMTkwMzEyWhcNMjUxMDI3MTkwMzEyWjAYMRYwFAYD VQQDEw02OGY2ODc3MS0zYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTAc54kstLB9UiWA+hPWGkZ/RAqIBWKrCl5Yc+IHhKFiy4tIDSymh3NVpTrZ I8rVtHtNGINmWEP/6TMegLTpT5qiBmE0FOlNz7//qS07b8VpgghGDcxmnM6LeD+A mqdqKgujbE+AUKp4zEayxmGW8mXrTrJOXl+304pvSQqro0azZaLvvnMbpHzcAwKb VDFvTzkZsnf1hWJpab2mAIR4kaCIDzWSlspi2aDj/D0u0/aDt4lPsnBtfrnceS3C 52s0O/SSCGAR6cbdcpA7Pcs/XWg/m/ljkiFM1oOGxVfFV4LQGVFCaqJc/RE3t+Xh 1STTZep/qfeEcMvvjNMxJ2apxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/VpDsm 6rQ5jzSoYRw7AEUXt40MMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Iq/JciOpbCS4Xdcrn6NCFiEPzWnTZh4v9rWASj1ThlQNQqZbxROt Qxx1IvRbEVPnNminDvFoB5pYMvbusc7Ue8ic1HWMpHP7NPKyBS9mmTnEbKZSG4wn Lqq0MEr8STrKw5Q1SoXRKaCyzkIyTCBvxCOJIoXg7WDoKAwaPzvVABQBeGPdH1GI CNcXtEss4l/+iWHbzLeh91FIMsP/Qi/Vm5RpMD1aCmdCJX91eynUYbQKmwNmHRdr HU/vGwNe/QBmR0lKm5s+DGjyAFelP1xH+BnHsdndzOI0alylIX2x+0OM/R5jqUC8 p8inxKnTcw7NkoANu9Xp3pu0w7i4DeKn -----END CERTIFICATE-----Generated at Mon Oct 20 21:25:00 2025 by rpki-client