$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: 8mrFRtdvWDDkNyd0i+xKcgEZ6rWBncBJ1N3j6x6rmWo= Subject key identifier: BF:AD:35:F1:9B:32:FA:14:E8:40:A5:1E:C5:90:D6:DD:EE:B0:0E:16 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: 0128 Signing time: Sun 19 Oct 2025 07:45:37 +0000 Manifest this update: Sun 19 Oct 2025 07:45:36 +0000 Manifest next update: Sun 26 Oct 2025 07:45:36 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: n10zC+GjTpI9mjm2TkRd2GXhdnyb2tAfmsbS/nB7o3Y=) 2: F6BB410AA34E11F0B508F67EC4F9AE02.roa (hash: 8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=) 3: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: S3cyIXZVoOkRNLShFeU9F6eot2kvd0U8U4Swy25JVmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Oct 19 07:45:36 2025 GMT Not After : Oct 26 07:45:36 2025 GMT Subject: CN=68f49721-0334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:76:d5:f1:45:b2:fd:49:1c:1c:b0:40:a8: 2e:3a:90:e9:62:d9:45:be:36:1d:87:95:49:85:2a: 7f:ad:81:fd:66:2f:c5:94:f0:e9:16:37:bb:72:67: 91:de:9f:7f:bb:0c:28:00:05:7b:d0:3c:8c:be:e9: 81:f5:43:e8:5e:79:ad:c9:a3:2e:4f:3b:cb:92:df: 01:26:d1:ae:0e:a4:6d:66:04:22:69:7f:4c:40:9f: 2c:4b:80:dc:9f:f7:fa:20:e8:37:ee:0e:52:e7:26: 9d:5c:05:61:1e:29:0c:5e:d4:58:13:b4:11:6c:b2: a9:ea:dd:c8:64:84:1d:e7:38:e3:05:42:18:8d:f1: 1d:a1:a6:97:35:46:b9:54:69:ac:35:ea:fe:59:21: 27:11:0e:20:10:ef:d0:96:37:a3:6d:a2:c5:6d:42: 17:b6:74:89:66:08:ff:63:01:d1:d0:b9:8b:76:bb: e4:76:96:44:c5:1c:68:ca:03:1f:8a:ac:6e:be:93: 53:17:30:a2:79:0e:8f:55:c4:23:79:0e:f9:c7:13: 2a:6b:66:7f:15:11:5e:d3:b3:7a:b4:8b:16:8c:e1: ca:23:60:dc:f4:40:87:58:15:0e:1d:e8:c7:ee:7d: d2:ad:9d:79:0a:59:77:4f:d7:9c:eb:5e:73:89:34: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:35:F1:9B:32:FA:14:E8:40:A5:1E:C5:90:D6:DD:EE:B0:0E:16 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e5:40:a4:bb:1a:7b:a8:bb:d7:72:ff:d2:20:59:1c:37:48: e9:3c:ad:ee:43:f1:f3:da:1c:d1:f4:a1:52:9e:1c:52:20:8c: 09:12:cf:3d:86:94:a5:ea:05:b1:b5:ec:05:a9:81:09:70:5b: 4c:7e:da:52:22:1b:5f:cf:91:4a:f0:6d:74:41:a1:fe:e8:1a: 9e:7d:a8:5f:8a:c4:ae:90:63:f1:41:8b:fc:58:c7:ed:66:e1: 7c:70:b2:f9:77:06:18:1b:8f:9f:89:b2:2b:cd:69:80:38:1f: d7:f2:3e:89:c7:38:af:5f:2d:63:7c:4b:b4:89:56:d0:bd:20: ae:95:e0:cd:8e:6a:60:35:19:87:93:da:52:71:93:38:ba:f0: d8:bd:14:b6:fd:55:3e:36:14:6f:c7:f3:16:9b:72:e5:ab:d5: c4:db:2c:fd:43:f7:2c:3a:e5:ee:45:6a:1b:28:e2:0f:13:50: d3:56:ec:bb:4f:13:8d:6d:d3:5e:a1:a8:66:76:f4:1c:ba:eb: 74:04:df:e7:2f:99:98:3a:7c:a7:0f:99:58:e7:6e:a0:ee:ec: 8d:64:f1:08:bd:cd:73:7f:69:96:50:e1:56:64:85:9c:52:df: d1:11:41:e6:8e:e9:e9:50:54:c2:aa:2b:85:75:d0:b5:65:4b: d8:2e:55:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUxMDE5MDc0NTM2WhcNMjUxMDI2MDc0NTM2WjAYMRYwFAYD VQQDEw02OGY0OTcyMS0wMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTZ21fFFsv1JHBywQKguOpDpYtlFvjYdh5VJhSp/rYH9Zi/FlPDpFje7cmeR 3p9/uwwoAAV70DyMvumB9UPoXnmtyaMuTzvLkt8BJtGuDqRtZgQiaX9MQJ8sS4Dc n/f6IOg37g5S5yadXAVhHikMXtRYE7QRbLKp6t3IZIQd5zjjBUIYjfEdoaaXNUa5 VGmsNer+WSEnEQ4gEO/QljejbaLFbUIXtnSJZgj/YwHR0LmLdrvkdpZExRxoygMf iqxuvpNTFzCieQ6PVcQjeQ75xxMqa2Z/FRFe07N6tIsWjOHKI2Dc9ECHWBUOHejH 7n3SrZ15Cll3T9ec615ziTSwHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+tNfGb MvoU6EClHsWQ1t3usA4WMB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq5UCkuxp7qLvXcv/SIFkcN0jpPK3uQ/Hz2hzR9KFSnhxSIIwJEs89 hpSl6gWxtewFqYEJcFtMftpSIhtfz5FK8G10QaH+6BqefahfisSukGPxQYv8WMft ZuF8cLL5dwYYG4+fibIrzWmAOB/X8j6JxzivXy1jfEu0iVbQvSCuleDNjmpgNRmH k9pScZM4uvDYvRS2/VU+NhRvx/MWm3Llq9XE2yz9Q/csOuXuRWobKOIPE1DTVuy7 TxONbdNeoahmdvQcuut0BN/nL5mYOnynD5lY526g7uyNZPEIvc1zf2mWUOFWZIWc Ut/REUHmjunpUFTCqiuFddC1ZUvYLlVS -----END CERTIFICATE-----Generated at Tue Oct 21 02:00:34 2025 by rpki-client