$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft File: zFYVfHLcxpczY2dD21AIdZMtpB8.mft (raw, json) Hash identifier: H3TJSLkEfYUf7ESqdye0s/7dux/mIQdNVyM7HqcXzfI= Subject key identifier: FA:12:0C:E6:33:73:C9:85:5A:F1:AC:52:6D:30:CB:82:CA:DC:9A:04 Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F Certificate issuer: /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft Manifest number: 0669 Signing time: Sun 19 Oct 2025 00:06:28 +0000 Manifest this update: Sun 19 Oct 2025 00:06:27 +0000 Manifest next update: Sun 26 Oct 2025 00:06:27 +0000 Files and hashes: 1: zFYVfHLcxpczY2dD21AIdZMtpB8.crl (hash: n9PWCC4VPS6lnlPM5bVv9ACQ16DPdLVIXWd9Mg7JjyM=) 2: A210E7309CAB11EBAB87D43AC4F9AE02.roa (hash: Up4WhD3Nf9WRZOsGh/RIfu2ds6rWcEA9ea8zVjDFpwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6CD6, serialNumber=CC56157C72DCC69733636743DB500875932DA41F Validity Not Before: Oct 19 00:06:27 2025 GMT Not After : Oct 26 00:06:27 2025 GMT Subject: CN=68f42b84-cd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:07:1d:38:cb:ae:b3:4e:d9:a6:f2:2d:cd: db:87:15:46:99:7a:46:2f:6a:8e:a3:7e:af:10:78: 68:d5:41:ab:2e:8e:be:ea:6f:a4:d0:f7:dc:11:6c: 27:64:72:62:47:fe:a8:da:01:c4:6b:fb:ac:de:56: ea:df:3e:61:70:19:30:99:fb:b9:42:5a:94:5b:4b: f3:6a:63:54:ea:78:8d:f9:9d:95:db:d8:bc:a5:3d: 3d:31:00:02:bc:53:6a:69:db:c6:e6:60:31:0e:af: 7b:26:4c:4e:d7:ee:14:8d:d1:08:6e:d7:3e:e9:62: 6b:73:50:62:c9:59:5d:62:37:06:d2:16:f6:80:c0: 8d:5a:4b:1e:69:a6:07:40:61:e7:af:a3:98:14:95: 32:4a:fb:1d:92:55:9c:df:48:07:9c:9c:68:00:8d: 6d:09:36:e8:71:ef:59:ff:dc:ca:65:b3:b7:5f:8e: 79:94:af:e8:93:9c:95:87:10:8b:c3:7d:d7:73:74: 6b:63:06:44:51:8c:76:9b:5c:57:f1:42:bf:1f:50: 1d:7e:4e:87:21:5e:de:62:35:5c:7a:85:87:2f:73: 77:48:28:c7:bd:5c:15:fc:2d:fa:f2:77:6d:24:f6: 49:bc:11:b8:e3:86:d3:59:c1:47:85:a1:28:f9:96: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:12:0C:E6:33:73:C9:85:5A:F1:AC:52:6D:30:CB:82:CA:DC:9A:04 X509v3 Authority Key Identifier: keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e5:7e:a7:3b:aa:b1:6e:ca:39:05:bc:e9:d9:fd:09:c1:d1: 7f:39:59:4d:7f:dc:e2:f0:cb:38:3b:cd:7f:0a:2e:33:2f:d0: 6e:88:5d:23:a4:dd:03:55:7c:7a:3f:40:5d:ff:cb:b5:8a:2d: ac:96:ba:d9:84:2b:5c:2a:60:32:25:d7:62:42:7a:c8:ff:02: d9:55:fb:c5:ab:d6:86:57:9c:85:d5:5c:c2:3c:78:79:38:83: f8:b6:76:58:54:fa:7a:9a:3a:58:c6:ef:fc:90:89:c4:f0:a6: b0:5b:57:1f:27:4e:83:fd:4a:65:d1:77:84:90:b7:85:9c:5d: 03:66:98:e5:f9:d7:09:9d:8a:72:44:83:81:a0:90:40:1f:24: cf:99:59:aa:eb:53:e5:fd:c2:38:a2:d0:b4:a5:b0:be:90:71: f1:6c:fa:3b:9c:b9:a0:a2:98:fd:a6:e9:e7:f5:b1:18:c7:65: 54:18:58:43:28:fb:55:f6:88:5c:92:68:31:f5:ae:f4:78:34: cd:c4:92:81:fb:dd:e8:95:3a:23:f1:3c:9b:b2:5a:b3:1e:e1: ba:99:b8:47:9b:84:15:ac:7b:f9:58:9d:72:e4:d9:01:ee:20: ac:4f:87:f9:e4:50:fe:fe:d8:f1:5a:23:99:9f:10:c4:49:8e: 38:10:bd:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZDRDYxMTAvBgNVBAUTKENDNTYxNTdDNzJEQ0M2OTczMzYzNjc0M0RCNTAwODc1 OTMyREE0MUYwHhcNMjUxMDE5MDAwNjI3WhcNMjUxMDI2MDAwNjI3WjAYMRYwFAYD VQQDEw02OGY0MmI4NC1jZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLMHHTjLrrNO2abyLc3bhxVGmXpGL2qOo36vEHho1UGrLo6+6m+k0PfcEWwn ZHJiR/6o2gHEa/us3lbq3z5hcBkwmfu5QlqUW0vzamNU6niN+Z2V29i8pT09MQAC vFNqadvG5mAxDq97JkxO1+4UjdEIbtc+6WJrc1BiyVldYjcG0hb2gMCNWkseaaYH QGHnr6OYFJUySvsdklWc30gHnJxoAI1tCTboce9Z/9zKZbO3X455lK/ok5yVhxCL w33Xc3RrYwZEUYx2m1xX8UK/H1Adfk6HIV7eYjVceoWHL3N3SCjHvVwV/C368ndt JPZJvBG444bTWcFHhaEo+Zb2ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoSDOYz c8mFWvGsUm0wy4LK3JoEMB8GA1UdIwQYMBaAFMxWFXxy3MaXM2NnQ9tQCHWTLaQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkNENi82NUU2REJENjlD QTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hwY3pZMmREMjFBSWRaTXRw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWVZmSExjeHBjelkyZEQyMUFJZFpNdHBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkNENi82NUU2REJENjlDQTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hw Y3pZMmREMjFBSWRaTXRwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm5X6nO6qxbso5Bbzp2f0JwdF/OVlNf9zi8Ms4O81/Ci4zL9BuiF0j pN0DVXx6P0Bd/8u1ii2slrrZhCtcKmAyJddiQnrI/wLZVfvFq9aGV5yF1VzCPHh5 OIP4tnZYVPp6mjpYxu/8kInE8KawW1cfJ06D/Upl0XeEkLeFnF0DZpjl+dcJnYpy RIOBoJBAHyTPmVmq61Pl/cI4otC0pbC+kHHxbPo7nLmgopj9punn9bEYx2VUGFhD KPtV9ohckmgx9a70eDTNxJKB+93olToj8TybslqzHuG6mbhHm4QVrHv5WJ1y5NkB 7iCsT4f55FD+/tjxWiOZnxDESY44EL3D -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:36 2025 by rpki-client