$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: KvCamsfITTjWW0FSXGyIDk/1s7QytrdaX1leYPyFkjI= Subject key identifier: 96:65:2D:F8:E2:F4:1A:2F:F8:E3:D9:E3:60:87:B2:3E:E7:E5:CE:24 Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 0156 Signing time: Sun 19 Oct 2025 07:01:43 +0000 Manifest this update: Sun 19 Oct 2025 07:01:43 +0000 Manifest next update: Sun 26 Oct 2025 07:01:43 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: MjV+fPSbACmATP2CbPYpL9e5UoftiNusI74B91xm1BY=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Oct 19 07:01:43 2025 GMT Not After : Oct 26 07:01:43 2025 GMT Subject: CN=68f48cd7-a764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:5e:e9:37:fa:ec:51:80:e6:86:ce:71:90: 31:b2:04:a2:cc:83:bd:10:1c:d6:e2:bd:f6:82:5a: 1e:28:4a:0e:18:6c:7a:92:b3:68:55:97:e5:61:d6: e1:68:5e:ac:9d:b3:e8:1f:32:28:18:82:91:c0:a2: dc:ab:10:35:27:23:5b:66:6f:67:73:c5:c8:95:ce: c9:7b:31:b6:29:be:81:b1:46:84:69:6c:9f:cf:92: 70:fb:0e:06:5d:b8:f2:ca:29:97:de:e1:30:28:35: 1d:5e:09:e7:5c:e8:e4:f8:3b:a5:7d:f7:22:d0:bb: c2:dd:fd:68:dc:74:14:61:b3:5f:28:ac:25:d6:ce: 39:27:16:f6:63:69:49:1f:fb:f1:4d:3b:b9:3c:68: 83:18:4e:4a:6b:11:f3:9b:c0:93:f0:b6:03:03:79: d8:7c:6d:ea:34:73:d2:2f:11:5b:90:59:54:ca:83: 49:3f:3b:32:0d:15:38:ee:e6:b0:d1:14:8e:cd:9c: 11:15:4c:1e:d4:97:b4:8e:0c:e5:6b:72:59:c5:03: 47:f6:63:d4:54:07:9a:5c:5d:5d:61:82:e0:02:78: 76:98:4a:6b:06:0f:bf:a7:71:5a:d4:69:3a:ae:7f: 7e:c4:c9:98:b1:ab:fc:c4:8b:b2:76:59:f4:75:41: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:2D:F8:E2:F4:1A:2F:F8:E3:D9:E3:60:87:B2:3E:E7:E5:CE:24 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0e:b9:88:0e:f3:8f:87:22:6a:a8:b4:c3:50:b1:04:27:b7: fd:34:8e:46:e2:d2:cf:99:65:5d:f3:75:96:f6:b3:ee:c0:1c: 8e:70:88:d5:e2:3d:49:f5:6b:a3:21:aa:ec:56:bc:af:38:42: b3:6f:4b:1a:96:c6:7c:18:54:d2:e3:b9:b0:69:33:c3:b5:f3: d8:c1:85:9b:a1:25:f0:37:5d:43:7a:18:52:42:62:78:d7:0c: 9e:19:6a:d8:c8:15:08:9b:ea:5c:54:fa:5c:16:7e:dc:fc:11: b9:34:22:9f:0b:17:b8:f6:78:0f:c0:68:0f:db:82:94:c5:04: 59:04:f2:a5:bf:af:ce:f6:2a:89:95:87:b8:c5:38:ee:47:65: 5a:6b:7e:47:41:5d:89:c7:a9:f3:db:74:bb:f5:22:ea:92:d1: ab:16:0b:28:51:50:9f:3c:e0:43:d6:62:67:49:fd:1f:b2:a8: 99:bb:a8:e9:69:73:2c:d0:0b:9b:4b:08:ea:c7:c8:e7:e0:9c: 3f:ac:50:f7:1c:90:54:30:38:2f:41:37:8f:cc:a2:95:e5:13: 41:55:a1:22:c8:87:45:56:6d:75:68:2f:ea:13:dc:44:96:ca: 93:6c:29:92:e5:3c:6a:9c:f6:89:49:e8:23:3e:cd:c4:96:e3: 12:47:f9:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUxMDE5MDcwMTQzWhcNMjUxMDI2MDcwMTQzWjAYMRYwFAYD VQQDEw02OGY0OGNkNy1hNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3Fe6Tf67FGA5obOcZAxsgSizIO9EBzW4r32gloeKEoOGGx6krNoVZflYdbh aF6snbPoHzIoGIKRwKLcqxA1JyNbZm9nc8XIlc7JezG2Kb6BsUaEaWyfz5Jw+w4G XbjyyimX3uEwKDUdXgnnXOjk+Dulffci0LvC3f1o3HQUYbNfKKwl1s45Jxb2Y2lJ H/vxTTu5PGiDGE5KaxHzm8CT8LYDA3nYfG3qNHPSLxFbkFlUyoNJPzsyDRU47uaw 0RSOzZwRFUwe1Je0jgzla3JZxQNH9mPUVAeaXF1dYYLgAnh2mEprBg+/p3Fa1Gk6 rn9+xMmYsav8xIuydln0dUGyoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZlLfji 9Bov+OPZ42CHsj7n5c4kMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4DrmIDvOPhyJqqLTDULEEJ7f9NI5G4tLPmWVd83WW9rPuwByOcIjV 4j1J9WujIarsVryvOEKzb0salsZ8GFTS47mwaTPDtfPYwYWboSXwN11DehhSQmJ4 1wyeGWrYyBUIm+pcVPpcFn7c/BG5NCKfCxe49ngPwGgP24KUxQRZBPKlv6/O9iqJ lYe4xTjuR2Vaa35HQV2Jx6nz23S79SLqktGrFgsoUVCfPOBD1mJnSf0fsqiZu6jp aXMs0AubSwjqx8jn4Jw/rFD3HJBUMDgvQTePzKKV5RNBVaEiyIdFVm11aC/qE9xE lsqTbCmS5TxqnPaJSegjPs3EluMSR/kS -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:26 2025 by rpki-client