$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: P4P4ZSEkgbWWtOsrmbU1dtRjMOJLtgbvQYRC4zNYb7g= Subject key identifier: FC:8C:79:E9:D5:49:19:17:9C:A0:3D:35:F5:35:0B:FE:17:E6:FC:6E Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: C8 Signing time: Sun 19 Oct 2025 08:50:49 +0000 Manifest this update: Sun 19 Oct 2025 08:50:49 +0000 Manifest next update: Sun 26 Oct 2025 08:50:49 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: q/I5GuM66zv2S2IbciSg9z1pB3hRKBtv4ptxe3ivaBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Oct 19 08:50:49 2025 GMT Not After : Oct 26 08:50:49 2025 GMT Subject: CN=68f4a669-4242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:4c:93:61:00:54:8d:69:6f:be:2f:5e:fa: ac:44:72:bc:f7:dd:0c:c8:93:46:6b:51:dc:7d:41: 9f:01:fc:08:72:7b:0c:8f:88:83:f6:81:d3:70:90: bb:69:65:38:65:66:6b:96:f1:05:dd:ee:e8:56:cc: 07:a8:39:6a:a4:b7:e8:15:4d:62:36:31:34:d2:1b: e3:4c:79:b0:fd:d1:be:97:8f:8e:16:58:ac:e9:d7: e1:be:9f:b6:dc:cc:50:3b:7c:3b:f5:1b:fd:59:e6: d7:5f:48:6f:6d:18:7d:a6:c0:10:bb:75:c7:0c:24: e0:46:21:13:5e:c0:bc:91:50:9d:24:18:ec:41:18: aa:da:de:dd:a4:89:22:79:5e:ca:00:a7:65:c1:74: d8:52:26:16:61:90:68:f6:75:58:be:49:d0:33:f9: aa:7f:57:5f:06:89:b9:0e:8d:6c:47:42:d5:21:55: 30:5b:61:1b:d0:79:10:0b:fc:1f:49:d6:ef:e7:60: 0c:3f:9d:60:56:4c:fd:7c:e6:1d:a8:c0:84:f3:48: bd:9f:8d:7b:9b:9a:20:b0:85:ff:d7:1e:02:e5:a6: 82:58:95:f0:c4:35:eb:d6:41:d5:38:bd:27:f3:64: 51:36:8a:ac:27:93:ed:28:20:6e:71:ee:37:82:48: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8C:79:E9:D5:49:19:17:9C:A0:3D:35:F5:35:0B:FE:17:E6:FC:6E X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b5:25:24:98:8d:86:fe:64:82:1a:6c:31:af:c7:5f:b9:f6: 2f:8b:3d:47:e4:f6:49:23:62:7e:26:c4:fa:d4:35:05:d2:ab: 4a:93:0a:e9:9a:8c:36:95:76:58:71:2f:90:dd:68:44:28:1c: 0f:e2:ae:64:15:07:ae:1f:da:d9:ba:b8:ce:86:ea:a3:53:21: 83:7c:fd:c6:50:0e:0e:3a:f9:5e:19:db:fe:8c:48:9f:5f:f2: d9:ae:62:0f:24:88:0e:6c:ee:f3:5d:4b:0d:a7:e3:14:41:36: 36:a3:30:9c:58:73:7b:25:f3:8b:ad:fd:3d:0c:d7:22:52:e1: 07:b2:68:cc:8a:c8:7b:24:bb:2c:7f:81:9f:26:fe:65:0e:fa: e4:ed:3f:5d:1b:73:7d:87:27:72:72:66:4a:38:c4:cc:04:f2: 20:a2:6c:57:1f:32:25:f1:9c:ca:bc:b6:e3:d1:77:0f:36:b6: 2a:95:34:5a:f3:5e:ef:f8:86:c9:7f:67:8c:25:2e:99:01:73: 3b:8e:8a:61:20:6d:1b:54:bc:99:eb:2e:03:67:1c:69:50:6c: cf:09:5a:15:5b:2f:d3:d4:82:54:45:71:8e:c9:32:bd:c0:83: 2b:12:56:bf:ca:45:5a:4a:0d:f8:3e:a5:80:79:7a:49:41:83: 25:a3:a5:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUxMDE5MDg1MDQ5WhcNMjUxMDI2MDg1MDQ5WjAYMRYwFAYD VQQDEw02OGY0YTY2OS00MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lNMk2EAVI1pb74vXvqsRHK8990MyJNGa1HcfUGfAfwIcnsMj4iD9oHTcJC7 aWU4ZWZrlvEF3e7oVswHqDlqpLfoFU1iNjE00hvjTHmw/dG+l4+OFlis6dfhvp+2 3MxQO3w79Rv9WebXX0hvbRh9psAQu3XHDCTgRiETXsC8kVCdJBjsQRiq2t7dpIki eV7KAKdlwXTYUiYWYZBo9nVYvknQM/mqf1dfBom5Do1sR0LVIVUwW2Eb0HkQC/wf Sdbv52AMP51gVkz9fOYdqMCE80i9n417m5ogsIX/1x4C5aaCWJXwxDXr1kHVOL0n 82RRNoqsJ5PtKCBuce43gkgg2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyMeenV SRkXnKA9NfU1C/4X5vxuMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAytSUkmI2G/mSCGmwxr8dfufYviz1H5PZJI2J+JsT61DUF0qtKkwrp mow2lXZYcS+Q3WhEKBwP4q5kFQeuH9rZurjOhuqjUyGDfP3GUA4OOvleGdv+jEif X/LZrmIPJIgObO7zXUsNp+MUQTY2ozCcWHN7JfOLrf09DNciUuEHsmjMish7JLss f4GfJv5lDvrk7T9dG3N9hydycmZKOMTMBPIgomxXHzIl8ZzKvLbj0XcPNrYqlTRa 817v+IbJf2eMJS6ZAXM7jophIG0bVLyZ6y4DZxxpUGzPCVoVWy/T1IJURXGOyTK9 wIMrEla/ykVaSg34PqWAeXpJQYMlo6Uq -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:03 2025 by rpki-client