$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: ne/co/9fvzalzX5HO6KhqKVKGxmGKsxlwh8n8yocM1s= Subject key identifier: CC:A9:0B:19:C5:6E:93:7A:A2:28:8C:70:53:51:5D:B0:82:84:B3:80 Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 0478 Signing time: Sun 19 Oct 2025 02:00:58 +0000 Manifest this update: Sun 19 Oct 2025 02:00:57 +0000 Manifest next update: Sun 26 Oct 2025 02:00:57 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: 9p9LSuN5xh+mneipJN1ck2dstMzPgaykIDinIETYmgk=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Oct 19 02:00:57 2025 GMT Not After : Oct 26 02:00:57 2025 GMT Subject: CN=68f4465a-bb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:3a:f0:63:0a:22:de:00:7f:af:fd:82:5d: 07:4e:11:08:c7:1c:05:50:1c:f5:97:15:66:4f:2a: d1:b7:67:5d:2b:02:1f:c9:bd:05:0c:8d:e1:5c:47: 95:7c:23:4c:bc:32:64:af:8c:31:47:80:86:60:6f: d1:ba:a6:51:ba:9c:cf:a1:cd:fe:a3:4b:a7:1f:ca: 74:0b:38:f8:ba:0c:c7:3b:99:b4:e3:be:76:2c:63: 06:7c:3d:b1:7a:75:33:f5:16:a6:db:e1:b0:ce:67: 74:09:73:5c:b5:51:3a:30:78:38:6a:10:00:cc:7d: 00:7f:41:39:22:38:c0:b4:c6:73:70:4d:1d:f2:a4: 41:76:89:dc:b0:76:34:4b:7e:82:5f:dd:18:78:e8: 3e:08:a8:09:72:6f:f8:ae:65:bb:77:4b:26:62:34: 19:42:d8:f0:64:b4:a8:6c:b5:f9:05:4e:88:31:60: 6d:d4:b9:8c:9a:63:0c:9a:a4:53:b5:18:bb:ec:a3: ce:cb:4a:ab:6d:a8:96:d9:53:a9:85:1f:79:12:61: 7d:14:11:07:9d:30:e4:a8:8d:5c:66:62:e6:44:c7: f4:c2:d8:16:6a:7c:bd:17:97:38:a5:e3:d7:23:f8: 79:9f:60:88:54:d8:8c:0e:bb:e7:bd:cd:01:ec:0e: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A9:0B:19:C5:6E:93:7A:A2:28:8C:70:53:51:5D:B0:82:84:B3:80 X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:8c:d6:7b:49:af:60:6d:76:18:58:6f:77:b3:2b:a9:00:32: 8c:f0:69:e8:04:4d:a9:da:b1:1f:84:12:3f:90:56:20:3c:6f: 8b:61:66:6e:33:1c:9d:8c:81:f2:af:81:e9:cc:fc:f0:09:8d: 58:1f:79:b8:6b:45:4c:57:4a:4c:9a:93:38:03:20:9a:87:45: d3:bf:c4:6c:5c:e9:da:a8:54:54:ad:d8:f0:01:bd:b4:a7:28: 52:e5:a6:59:2c:15:07:a8:9b:1d:b2:d3:62:2e:88:9b:4f:d3: cd:19:c1:d0:b5:53:7a:d6:07:aa:f1:1a:bd:dc:9a:77:de:67: 46:1a:d9:35:a7:2b:b0:d8:5d:17:14:25:54:89:37:55:29:a4: bc:8a:47:69:d4:39:d4:b9:f8:b6:e7:81:74:b3:b6:00:23:8b: f7:bf:7d:8b:93:33:90:0f:a7:26:fe:97:44:ee:a3:df:94:c8: 54:db:a8:4c:33:db:05:ea:c9:7f:8d:5f:c4:d3:cd:0c:5f:f7: eb:8b:0c:7f:00:57:43:ba:d1:dc:6d:02:00:71:a8:65:cc:cd: 8e:2b:8d:a5:24:cb:94:5c:5d:5f:1b:e0:49:f4:3b:71:66:6d: 3b:15:2e:5b:1e:3d:85:83:1e:41:ee:86:00:51:3a:35:31:9d: eb:49:e3:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUxMDE5MDIwMDU3WhcNMjUxMDI2MDIwMDU3WjAYMRYwFAYD VQQDEw02OGY0NDY1YS1iYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskI68GMKIt4Af6/9gl0HThEIxxwFUBz1lxVmTyrRt2ddKwIfyb0FDI3hXEeV fCNMvDJkr4wxR4CGYG/RuqZRupzPoc3+o0unH8p0Czj4ugzHO5m04752LGMGfD2x enUz9Ram2+Gwzmd0CXNctVE6MHg4ahAAzH0Af0E5IjjAtMZzcE0d8qRBdoncsHY0 S36CX90YeOg+CKgJcm/4rmW7d0smYjQZQtjwZLSobLX5BU6IMWBt1LmMmmMMmqRT tRi77KPOy0qrbaiW2VOphR95EmF9FBEHnTDkqI1cZmLmRMf0wtgWany9F5c4pePX I/h5n2CIVNiMDrvnvc0B7A7EfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMypCxnF bpN6oiiMcFNRXbCChLOAMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0jNZ7Sa9gbXYYWG93syupADKM8GnoBE2p2rEfhBI/kFYgPG+LYWZu MxydjIHyr4HpzPzwCY1YH3m4a0VMV0pMmpM4AyCah0XTv8RsXOnaqFRUrdjwAb20 pyhS5aZZLBUHqJsdstNiLoibT9PNGcHQtVN61geq8Rq93Jp33mdGGtk1pyuw2F0X FCVUiTdVKaS8ikdp1DnUufi254F0s7YAI4v3v32LkzOQD6cm/pdE7qPflMhU26hM M9sF6sl/jV/E080MX/friwx/AFdDutHcbQIAcahlzM2OK42lJMuUXF1fG+BJ9Dtx Zm07FS5bHj2Fgx5B7oYAUTo1MZ3rSePk -----END CERTIFICATE-----Generated at Mon Oct 20 10:49:51 2025 by rpki-client