$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft File: f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json) Hash identifier: HZnLpvp+bPW5bb+1aYXnJXqKJHhkYS5ENGkoabTi+98= Subject key identifier: 05:02:6B:BF:E6:41:1B:B2:1F:96:B7:00:8C:92:A4:FB:5F:58:57:98 Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75 Certificate issuer: /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft Manifest number: 01EA Signing time: Sun 19 Oct 2025 05:01:43 +0000 Manifest this update: Sun 19 Oct 2025 05:01:42 +0000 Manifest next update: Sun 26 Oct 2025 05:01:42 +0000 Files and hashes: 1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: 25i5BELddSKwfzkkweKFQmN9K+FHxo5jMvCONPJAskY=) 2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: bJ0v83C66Egxm5Wkl4eVEIZVTUzpH+tAcrHqbaRE6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75 Validity Not Before: Oct 19 05:01:42 2025 GMT Not After : Oct 26 05:01:42 2025 GMT Subject: CN=68f470b7-8d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:bb:3f:de:d0:0f:f3:28:5e:9f:94:be:2a: 9c:6c:74:b5:a6:b7:61:8e:17:96:e3:9f:08:b5:03: f4:df:04:e5:9c:9d:b0:89:66:78:2d:54:70:9b:57: 38:a4:d8:3b:3c:e5:27:21:a2:9f:4c:75:0a:65:a3: 73:f9:2d:fb:28:c7:62:e2:80:09:90:49:1a:b6:aa: 9d:8e:e3:ab:1d:8e:1a:1d:3d:84:12:04:ce:70:51: 7b:b5:2b:75:02:51:da:43:be:52:41:75:65:71:dd: 7a:1b:99:85:62:4a:13:45:8c:b6:31:39:bd:23:8f: 44:fe:9f:02:71:81:d9:cd:0a:97:14:13:5e:f1:a4: d9:c7:fa:0c:d2:d5:ee:9d:52:6c:0a:a5:71:7d:dc: 48:74:ea:13:da:65:62:25:18:fe:3c:bb:47:23:8e: 55:8b:3c:ed:3d:09:41:95:d8:71:15:b6:12:64:ca: b6:bd:29:eb:c5:02:51:c4:75:ea:1e:4d:96:be:f6: ab:fc:46:e3:e8:9b:83:94:b5:56:f2:7c:8d:3a:c2: 16:f1:35:59:6e:fd:71:c3:2d:92:a3:5c:be:50:3a: 8d:a3:94:e1:3a:ce:8f:69:94:2d:54:18:85:ba:37: 50:2c:8f:cb:a6:07:ea:a4:d1:d8:b2:66:67:c3:e9: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:02:6B:BF:E6:41:1B:B2:1F:96:B7:00:8C:92:A4:FB:5F:58:57:98 X509v3 Authority Key Identifier: keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:70:be:2b:f0:21:ec:30:ff:31:b3:88:36:00:c1:d0:38:86: d5:61:75:5f:5b:cf:71:9d:e9:4e:d2:c5:d3:d0:19:42:5b:84: 8c:ae:04:a1:4e:65:14:c6:ae:73:e6:cc:36:66:85:e2:f8:04: cd:1a:01:47:7f:07:f5:94:f0:25:4b:3f:1e:0e:12:fa:64:08: 31:14:a0:be:31:33:9c:de:4f:cf:16:d1:fc:f3:03:4d:76:51: 43:13:60:c5:6d:e3:7c:48:84:9f:f8:d8:33:17:c6:9b:64:dc: e1:5f:45:8f:9b:6b:2f:9d:f9:83:55:a5:62:f0:99:5e:fc:d2: c8:e5:91:6a:14:30:e4:24:12:15:d6:f8:f8:20:63:c2:dc:bd: d1:be:c7:46:08:9d:1f:0f:50:1c:90:a2:57:d4:f8:5b:3f:1b: 9c:33:2a:29:06:df:50:16:67:a5:37:db:68:c3:d3:dd:f6:cb: d7:26:03:e6:df:bc:84:a2:cf:2b:0c:07:eb:7b:19:7e:26:8a: 45:7c:61:ad:9e:7f:31:f7:e1:67:57:16:ef:d7:8b:be:a0:cc: c1:2d:44:e4:2c:29:c1:56:f8:c2:b4:45:a9:31:f3:01:a8:48: c7:e4:7a:ac:d4:f6:e1:d4:88:de:b6:bf:f4:07:45:d5:a5:55: 17:51:ac:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEzQzMxMTAvBgNVBAUTKDdGRjY1NjVCNzkzRDc1RTE0RTcyREM3N0Q4MjgyNkJE NDNCN0ZFNzUwHhcNMjUxMDE5MDUwMTQyWhcNMjUxMDI2MDUwMTQyWjAYMRYwFAYD VQQDEw02OGY0NzBiNy04ZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Pa7P97QD/MoXp+UviqcbHS1prdhjheW458ItQP03wTlnJ2wiWZ4LVRwm1c4 pNg7POUnIaKfTHUKZaNz+S37KMdi4oAJkEkatqqdjuOrHY4aHT2EEgTOcFF7tSt1 AlHaQ75SQXVlcd16G5mFYkoTRYy2MTm9I49E/p8CcYHZzQqXFBNe8aTZx/oM0tXu nVJsCqVxfdxIdOoT2mViJRj+PLtHI45VizztPQlBldhxFbYSZMq2vSnrxQJRxHXq Hk2Wvvar/Ebj6JuDlLVW8nyNOsIW8TVZbv1xwy2So1y+UDqNo5ThOs6PaZQtVBiF ujdQLI/LpgfqpNHYsmZnw+n42QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUCa7/m QRuyH5a3AIySpPtfWFeYMB8GA1UdIwQYMBaAFH/2Vlt5PXXhTnLcd9goJr1Dt/51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNDMy9DNTUwQTkyNEMz Q0QxMUVEOTkyMjc0ODFDNEY5QUUwMi9mX1pXVzNrOWRlRk9jdHgzMkNnbXZVTzNf blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfWldXM2s5ZGVGT2N0eDMyQ2dtdlVPM19uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTNDMy9DNTUwQTkyNEMzQ0QxMUVEOTkyMjc0ODFDNEY5QUUwMi9mX1pXVzNrOWRl Rk9jdHgzMkNnbXZVTzNfblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCncL4r8CHsMP8xs4g2AMHQOIbVYXVfW89xnelO0sXT0BlCW4SMrgSh TmUUxq5z5sw2ZoXi+ATNGgFHfwf1lPAlSz8eDhL6ZAgxFKC+MTOc3k/PFtH88wNN dlFDE2DFbeN8SISf+NgzF8abZNzhX0WPm2svnfmDVaVi8Jle/NLI5ZFqFDDkJBIV 1vj4IGPC3L3RvsdGCJ0fD1AckKJX1PhbPxucMyopBt9QFmelN9tow9Pd9svXJgPm 37yEos8rDAfrexl+JopFfGGtnn8x9+FnVxbv14u+oMzBLUTkLCnBVvjCtEWpMfMB qEjH5Hqs1Pbh1Ijetr/0B0XVpVUXUazo -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:33 2025 by rpki-client