$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: ZXXd5LkTVSWTA9hLJbHDLgCYPHeIqeQpoSSyz1DlWFA= Subject key identifier: C4:F1:5C:68:08:AB:40:68:53:F3:5A:CD:8D:90:78:B3:9B:BC:BF:8A Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1E60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1E4F Signing time: Sat 18 Oct 2025 16:22:08 +0000 Manifest this update: Sat 18 Oct 2025 16:22:08 +0000 Manifest next update: Sat 25 Oct 2025 16:22:08 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: 7qGTN5ExQJF5vuAD/3Gk1KtCouK/aI+tCAcFsh983vE=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7776 (0x1e60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Oct 18 16:22:08 2025 GMT Not After : Oct 25 16:22:08 2025 GMT Subject: CN=68f3beb0-1f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:a4:b9:50:44:77:54:e9:63:13:f3:25:64: 4c:cd:c3:10:25:25:df:2c:63:15:26:39:30:78:64: d9:93:df:88:d1:27:6e:1d:59:c3:6a:95:e9:8f:8c: 58:fa:81:78:25:55:32:00:1f:67:bb:4a:cd:a5:39: 59:b6:cb:c5:8f:28:30:43:00:44:40:68:56:d7:bc: 8f:0a:00:b5:1d:36:b0:1e:b3:81:04:eb:32:a7:1c: 11:f4:8b:7a:c5:56:39:46:19:5a:91:ae:b2:49:d3: 6b:fc:a1:fd:60:12:35:69:af:99:b2:fa:f2:68:91: 90:78:e0:b6:e3:bd:f2:30:4c:68:0e:c4:61:5b:90: c5:5c:4b:1d:41:a3:b6:c7:38:0e:97:77:11:d6:42: 1b:6d:96:ff:6b:f1:d8:f5:ef:8e:b5:8e:29:1c:95: ce:23:b0:56:f7:7e:58:12:c2:26:ce:a9:fc:ed:3c: b6:f3:1b:16:9d:d5:28:1e:ec:51:72:3c:64:ba:e2: e5:48:0e:d8:8b:59:4d:46:90:44:e4:1a:26:32:1b: 34:10:6d:fd:f1:82:d3:61:89:02:64:68:6a:26:5b: 40:38:a3:c6:9c:fc:cb:02:17:40:2c:b8:4b:a9:f2: 08:4b:fb:2d:f7:d0:13:17:de:4a:25:19:88:94:77: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:5C:68:08:AB:40:68:53:F3:5A:CD:8D:90:78:B3:9B:BC:BF:8A X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f4:f9:f8:7e:b9:83:59:0f:dd:2f:92:2d:82:ba:3c:c2:4f: cc:53:73:3d:d1:38:2e:31:c7:8e:a6:c2:64:f0:0c:ab:6c:5d: 15:e4:cf:ed:43:6e:4e:83:8c:f1:62:37:34:13:5b:be:b9:eb: 28:2b:47:b8:5c:c4:de:c2:a4:c6:87:7a:7d:61:9e:ee:60:09: 93:b3:9a:96:2e:56:8c:c7:6b:4a:72:fa:f0:a2:bd:91:0d:8f: 69:66:51:fb:00:a8:55:63:3d:30:7a:04:80:5d:2c:b8:6b:c1: 35:f6:99:38:15:a5:48:f0:1f:93:c2:c6:4e:64:11:5f:05:19: c5:6d:63:83:08:9f:59:68:06:82:02:4a:6f:c0:a9:2d:1e:2a: c8:9d:b2:1c:1f:ca:30:10:d6:bb:38:eb:5f:fc:06:5c:4b:e8: d3:9d:75:45:04:f8:d8:eb:72:10:6c:dd:1d:2c:14:4d:22:08: 83:6a:59:cc:70:bd:0b:45:58:b1:06:f8:89:70:8d:ab:cb:d2: 33:7f:6e:09:f3:ea:a3:59:31:e3:c3:e3:21:28:f0:f7:e8:f7: 2b:d4:48:af:24:e8:7e:e4:da:fe:a7:7a:52:17:4a:ee:e5:a3: d5:69:22:5f:8c:49:80:85:22:99:2b:33:81:49:b8:85:43:40: cd:e3:2a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjUxMDE4MTYyMjA4WhcNMjUxMDI1MTYyMjA4WjAYMRYwFAYD VQQDEw02OGYzYmViMC0xZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVGkuVBEd1TpYxPzJWRMzcMQJSXfLGMVJjkweGTZk9+I0SduHVnDapXpj4xY +oF4JVUyAB9nu0rNpTlZtsvFjygwQwBEQGhW17yPCgC1HTawHrOBBOsypxwR9It6 xVY5Rhlaka6ySdNr/KH9YBI1aa+ZsvryaJGQeOC2473yMExoDsRhW5DFXEsdQaO2 xzgOl3cR1kIbbZb/a/HY9e+OtY4pHJXOI7BW935YEsImzqn87Ty28xsWndUoHuxR cjxkuuLlSA7Yi1lNRpBE5BomMhs0EG398YLTYYkCZGhqJltAOKPGnPzLAhdALLhL qfIIS/st99ATF95KJRmIlHehwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTxXGgI q0BoU/NazY2QeLObvL+KMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl9Pn4frmDWQ/dL5Itgro8wk/MU3M90TguMceOpsJk8AyrbF0V5M/t Q25Og4zxYjc0E1u+uesoK0e4XMTewqTGh3p9YZ7uYAmTs5qWLlaMx2tKcvrwor2R DY9pZlH7AKhVYz0wegSAXSy4a8E19pk4FaVI8B+TwsZOZBFfBRnFbWODCJ9ZaAaC AkpvwKktHirInbIcH8owENa7OOtf/AZcS+jTnXVFBPjY63IQbN0dLBRNIgiDalnM cL0LRVixBviJcI2ry9Izf24J8+qjWTHjw+MhKPD36Pcr1EivJOh+5Nr+p3pSF0ru 5aPVaSJfjEmAhSKZKzOBSbiFQ0DN4yq7 -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:43 2025 by rpki-client