$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: dY7cSbGkYmjE0kcOG2ohOfyER3HulFJNEol4lWsbtg8= Subject key identifier: 29:6A:2A:13:D2:00:70:CB:E2:BB:5D:F7:EA:C8:6F:AB:23:9C:E3:04 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 05CD Signing time: Sun 19 Oct 2025 00:45:27 +0000 Manifest this update: Sun 19 Oct 2025 00:45:26 +0000 Manifest next update: Sun 26 Oct 2025 00:45:26 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: Kz6aCw8c7u5P1rhXCDFu4xYhh0J9/owziUNuhRF6+m0=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Oct 19 00:45:26 2025 GMT Not After : Oct 26 00:45:26 2025 GMT Subject: CN=68f434a7-4687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:65:79:a9:e5:29:db:2f:1a:e5:c4:b5:d8:7d: 89:d3:77:59:8e:04:20:85:e3:f2:c0:01:c5:f0:d0: 41:27:57:f2:38:f5:21:b3:0e:46:61:d8:03:b0:7a: 5e:da:97:3e:65:b4:f6:2e:ad:88:49:ea:25:76:31: 0f:99:54:23:b9:2b:e3:68:ae:ca:2b:5b:6a:22:22: b7:c4:86:82:87:4d:7b:00:d1:d2:d6:92:2f:dc:b1: 1a:ce:59:4d:76:a4:68:a6:5c:d6:ee:63:3d:e3:5d: a3:46:32:58:1b:c4:6a:7b:55:89:1d:da:e5:95:92: f2:3b:cf:6f:0e:df:4e:81:2a:86:b0:e2:38:05:2b: 23:d7:ec:7c:6c:3e:85:ef:b8:8e:1b:41:a2:e6:c1: ad:03:f0:ce:f2:9b:c5:0e:9d:42:b2:29:f0:ec:34: 9a:69:0c:34:4f:50:ae:57:f1:f3:39:ea:89:20:ae: 82:49:60:70:ed:ad:dc:3a:7d:c9:f7:f9:e1:1b:b0: 6c:87:c3:39:79:2e:b5:f3:c7:6b:27:9c:00:55:e1: ff:e6:4e:90:5c:cb:7f:48:fb:0f:2d:2b:ba:e2:f4: bf:ee:06:1d:ef:13:bd:a1:23:60:12:0a:18:ca:af: 3a:1b:13:65:06:7f:26:9e:03:60:ac:82:b0:3a:e6: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6A:2A:13:D2:00:70:CB:E2:BB:5D:F7:EA:C8:6F:AB:23:9C:E3:04 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c2:ec:a4:65:be:3f:59:33:d2:b6:ac:f4:2c:09:55:69:0f: 47:1e:52:80:77:2e:fa:34:b2:04:d8:39:2f:0b:93:96:7c:a7: ab:49:14:df:01:d2:db:fe:da:a9:42:10:41:7b:f1:a0:ac:69: da:da:0a:cd:83:a5:6d:e3:82:0d:f2:cc:b4:29:f0:12:94:eb: be:e3:9c:56:e4:84:8f:ac:4b:a6:4e:61:93:92:2c:07:e8:26: 19:8c:df:22:ee:ba:21:34:2b:e6:4f:11:2f:e9:81:bf:0f:6c: 93:17:a5:8b:e1:04:43:38:6e:0f:90:ec:8c:5c:e7:69:74:21: ce:e4:e1:58:b8:2b:6b:11:fa:6e:db:d8:e1:15:a2:c7:a1:4e: de:e9:ea:6c:09:d1:36:ef:79:0a:80:9d:82:38:3a:96:98:96: 63:e3:59:13:1d:27:fa:49:e6:72:97:5c:1b:7c:e4:42:b3:45: 48:62:06:07:61:cc:22:04:1e:47:1e:fc:ed:8f:62:18:13:f3: 1e:04:44:78:47:00:4b:e2:c5:5a:f8:82:97:cf:9d:e4:07:65: b8:e8:68:d6:cc:cf:2b:c6:b7:d3:97:ec:a9:cb:28:14:ca:5e: e7:4d:31:be:90:fd:38:e4:2f:a4:54:21:6f:e1:9b:4e:17:f6: a9:fd:f4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUxMDE5MDA0NTI2WhcNMjUxMDI2MDA0NTI2WjAYMRYwFAYD VQQDEw02OGY0MzRhNy00Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mV5qeUp2y8a5cS12H2J03dZjgQghePywAHF8NBBJ1fyOPUhsw5GYdgDsHpe 2pc+ZbT2Lq2ISeoldjEPmVQjuSvjaK7KK1tqIiK3xIaCh017ANHS1pIv3LEazllN dqRoplzW7mM9412jRjJYG8Rqe1WJHdrllZLyO89vDt9OgSqGsOI4BSsj1+x8bD6F 77iOG0Gi5sGtA/DO8pvFDp1Csinw7DSaaQw0T1CuV/HzOeqJIK6CSWBw7a3cOn3J 9/nhG7Bsh8M5eS6188drJ5wAVeH/5k6QXMt/SPsPLSu64vS/7gYd7xO9oSNgEgoY yq86GxNlBn8mngNgrIKwOuZJpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClqKhPS AHDL4rtd9+rIb6sjnOMEMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARwuykZb4/WTPStqz0LAlVaQ9HHlKAdy76NLIE2DkvC5OWfKerSRTf AdLb/tqpQhBBe/GgrGna2grNg6Vt44IN8sy0KfASlOu+45xW5ISPrEumTmGTkiwH 6CYZjN8i7rohNCvmTxEv6YG/D2yTF6WL4QRDOG4PkOyMXOdpdCHO5OFYuCtrEfpu 29jhFaLHoU7e6epsCdE273kKgJ2CODqWmJZj41kTHSf6SeZyl1wbfORCs0VIYgYH YcwiBB5HHvztj2IYE/MeBER4RwBL4sVa+IKXz53kB2W46GjWzM8rxrfTl+ypyygU yl7nTTG+kP045C+kVCFv4ZtOF/ap/fQq -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:55 2025 by rpki-client