$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: RZ1sh9VtG0JO22aduRFanoZOm2CmP6SAgYPZfFZo08M= Subject key identifier: E8:6B:EA:4F:B8:1F:75:A0:7A:10:FA:2F:F6:A4:BE:7D:B9:8E:C2:49 Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: DA Signing time: Sun 19 Oct 2025 08:38:31 +0000 Manifest this update: Sun 19 Oct 2025 08:38:30 +0000 Manifest next update: Sun 26 Oct 2025 08:38:30 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: Hq+Zj7rNmTkAj4Scm3VXc0IEYvPab4airdsMqaCF8r8=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: Q17c7SW6XFhNWPI3WKGxRhv0/Nc9pxNZN4PlbthaE54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Oct 19 08:38:30 2025 GMT Not After : Oct 26 08:38:30 2025 GMT Subject: CN=68f4a387-67d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:e9:ea:5a:14:fc:42:d4:f9:ea:1a:1d:55: a2:6c:8d:9f:65:3d:48:ec:e9:22:1e:ca:d1:0b:15: 48:c7:32:6c:ce:1d:70:23:f8:b6:19:91:25:4b:f6: b2:5b:ef:df:ff:96:13:cd:2f:92:3c:67:97:e4:1c: d9:df:73:d5:46:5c:5f:66:f7:78:33:17:6e:8b:4f: dc:d0:1f:cf:e2:72:77:79:4e:ec:6c:40:1a:85:a3: da:84:0e:e4:7a:06:ab:1b:64:59:ab:8d:f2:a1:1c: a8:be:c9:ec:cc:f5:2e:31:3b:15:b4:30:52:20:56: b7:73:f0:13:e5:6b:8f:6a:02:20:69:ab:b1:e3:e7: e6:8b:67:a6:c5:2d:15:bb:c0:40:f3:22:40:f8:ad: 4d:ae:2c:db:5f:41:d9:08:f2:0f:d2:43:ae:a0:b7: 6e:ec:f5:06:35:26:fd:87:87:4f:52:c0:23:3b:61: 06:b7:b3:12:64:cf:81:b9:09:e1:db:d8:85:de:5e: c0:af:f9:0f:7a:a1:55:94:e6:1e:b7:f9:1f:27:f4: 8f:30:4f:70:79:90:45:48:e0:f6:a6:43:f1:73:66: 2d:53:16:0c:c8:aa:45:0d:5f:f4:15:92:0f:06:47: a1:d5:a0:ef:da:a2:7c:e2:44:42:c4:3c:d0:7a:29: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6B:EA:4F:B8:1F:75:A0:7A:10:FA:2F:F6:A4:BE:7D:B9:8E:C2:49 X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:58:13:36:62:89:77:f5:87:77:dd:b3:02:a8:79:7b:ca:db: 6e:d6:16:69:f2:41:fe:2a:64:54:7c:be:de:95:8c:1a:a0:28: 27:40:54:ac:16:3b:d2:d2:3e:d8:1d:26:b8:9b:a8:9a:90:6f: a4:dc:56:a9:b9:a7:61:a1:3e:95:0e:61:10:05:dd:41:05:8d: e2:19:6a:9f:38:6c:14:86:06:2e:76:a2:f6:85:02:cb:5b:02: e2:66:f1:99:31:9b:56:67:00:94:1b:46:10:55:66:93:58:b8: db:7f:84:0e:3e:9e:36:6d:e6:ce:be:21:f7:ae:3c:8a:29:cb: f3:f6:09:d1:e6:b2:c7:b7:10:41:c4:ba:43:64:95:30:0e:29: db:11:b1:eb:53:49:da:30:ae:e2:9d:64:05:7f:45:a2:01:50: 77:53:d6:28:69:c8:cd:0d:76:d3:91:28:a4:aa:a1:47:f3:d6: db:7c:12:10:d1:6b:fd:24:54:62:06:6f:c1:f6:50:f2:bc:5a: 79:f4:d3:d2:88:20:a5:3c:cf:15:36:55:63:41:ac:fe:68:55: 30:6c:9b:85:fd:0e:c3:2d:63:9a:88:38:9a:12:6c:34:8f:d3: 8a:1f:c7:7c:31:66:c5:07:92:b5:c0:29:97:ac:8e:df:65:94: ce:12:15:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKENFRTczQTk1RDVDQ0VFMDYyRTdENUVCQTFCNUExMjcw NTJFMTI1MzgwHhcNMjUxMDE5MDgzODMwWhcNMjUxMDI2MDgzODMwWjAYMRYwFAYD VQQDEw02OGY0YTM4Ny02N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn03p6loU/ELU+eoaHVWibI2fZT1I7OkiHsrRCxVIxzJszh1wI/i2GZElS/ay W+/f/5YTzS+SPGeX5BzZ33PVRlxfZvd4Mxdui0/c0B/P4nJ3eU7sbEAahaPahA7k egarG2RZq43yoRyovsnszPUuMTsVtDBSIFa3c/AT5WuPagIgaaux4+fmi2emxS0V u8BA8yJA+K1NrizbX0HZCPIP0kOuoLdu7PUGNSb9h4dPUsAjO2EGt7MSZM+BuQnh 29iF3l7Ar/kPeqFVlOYet/kfJ/SPME9weZBFSOD2pkPxc2YtUxYMyKpFDV/0FZIP Bkeh1aDv2qJ84kRCxDzQeinCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhr6k+4 H3WgehD6L/akvn25jsJJMB8GA1UdIwQYMBaAFM7nOpXVzO4GLn1euhtaEnBS4SU4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9DRjM3MzVEMDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdnWXVmVjY2RzFvU2NGTGhK VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9DRjM3MzVEMDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdn WXVmVjY2RzFvU2NGTGhKVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsWBM2Yol39Yd33bMCqHl7yttu1hZp8kH+KmRUfL7elYwaoCgnQFSs FjvS0j7YHSa4m6iakG+k3FapuadhoT6VDmEQBd1BBY3iGWqfOGwUhgYudqL2hQLL WwLiZvGZMZtWZwCUG0YQVWaTWLjbf4QOPp42bebOviH3rjyKKcvz9gnR5rLHtxBB xLpDZJUwDinbEbHrU0naMK7inWQFf0WiAVB3U9YoacjNDXbTkSikqqFH89bbfBIQ 0Wv9JFRiBm/B9lDyvFp59NPSiCClPM8VNlVjQaz+aFUwbJuF/Q7DLWOaiDiaEmw0 j9OKH8d8MWbFB5K1wCmXrI7fZZTOEhXy -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:36 2025 by rpki-client