$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: 5Fftcjan7wieGCvWmVd0r38T/JnjciLT8k7wqvSpfxk= Subject key identifier: 52:96:F9:06:51:F2:6C:85:1A:09:2A:28:F2:8D:6B:FA:B7:69:30:D5 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 04B7 Signing time: Sun 19 Oct 2025 01:43:31 +0000 Manifest this update: Sun 19 Oct 2025 01:43:30 +0000 Manifest next update: Sun 26 Oct 2025 01:43:30 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: RLPuZ7cbgSBkcLQNHUqd5txe5a+xT9/8O6ZSIiuagJ8=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: lHZXltajMQsPVwndfMvNDpRZmhFMuS2rZHqrCavlw1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Oct 19 01:43:30 2025 GMT Not After : Oct 26 01:43:30 2025 GMT Subject: CN=68f44242-d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:c8:8a:60:f9:e5:da:66:f6:79:15:b5:59: cc:ef:ac:84:bd:8b:24:42:ce:f9:5b:4a:8b:34:6c: 9c:99:17:b4:03:db:7c:1d:6f:9f:29:17:de:66:2d: 4f:30:4e:98:c0:d5:52:25:71:01:ad:37:7d:e4:f3: fc:d7:e5:0d:5a:4d:b5:13:1f:f1:5d:e4:aa:e0:ff: 73:1a:65:97:3b:d0:62:57:25:88:a4:53:d1:5e:09: f3:b0:76:6d:0c:55:40:6b:16:df:cf:08:71:32:e9: cc:a3:49:5d:25:1a:d4:8f:6b:1d:a8:00:18:3a:fa: 5f:d2:e7:bb:d0:8e:87:9e:0d:d5:13:d3:a5:01:a7: aa:56:73:ba:d0:ae:3f:1e:4a:d3:3e:bc:7e:08:58: 58:03:c9:7b:a8:56:6b:bc:0e:60:35:58:7d:7d:fe: cd:75:41:75:eb:98:73:09:cc:74:f5:82:60:90:19: 80:8d:b2:37:80:39:79:a3:5d:00:bd:dc:d8:06:47: ad:bf:8e:94:63:2f:69:85:73:40:52:48:f8:2b:8e: 18:6a:ae:53:0b:a5:c2:5f:a9:10:2c:d8:3e:c4:17: a6:3c:22:c0:90:97:b6:fb:c5:f2:1b:dc:ff:4b:4d: 8e:c7:cd:cd:8f:ef:50:e8:3e:2c:f7:52:c7:89:5a: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:F9:06:51:F2:6C:85:1A:09:2A:28:F2:8D:6B:FA:B7:69:30:D5 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:50:27:e8:28:3c:75:be:ce:45:be:04:ad:b8:da:ec:c7:eb: 4b:48:f4:28:cc:0e:bc:24:8b:58:12:84:d5:2e:a4:c3:c7:7c: ab:1f:3c:02:28:41:a9:25:dc:c7:83:68:c5:b6:1c:d9:59:7b: 41:97:85:af:59:d0:cc:c2:96:c2:30:37:c9:ca:9f:76:f8:5b: 33:03:2b:a6:3c:43:05:3f:70:c1:eb:3f:20:0b:dc:3f:e1:bb: b0:13:f0:05:73:02:4a:02:af:2f:f3:5a:ea:ce:a1:3a:ee:85: 16:3c:25:40:83:f1:f2:4a:2e:01:46:28:f0:ce:76:29:35:d7: 17:f5:f4:4c:d0:07:8d:ad:34:35:c8:0a:11:ba:a0:08:3a:23: fa:f8:2b:89:48:f2:9c:65:53:d7:74:e2:cc:9c:b2:e4:a9:d2: 39:9f:f5:d4:20:6b:10:94:cc:8d:8e:2d:45:30:73:ff:8b:80: 0b:c0:7c:8e:b5:a6:09:52:3a:8b:99:4c:05:7d:38:83:38:9c: bf:02:ba:1d:ae:0c:c3:80:98:28:11:90:bb:8d:43:f6:ce:75: 4a:7b:c6:2f:4e:13:f2:c2:ae:cd:b7:c3:8a:1a:bb:77:70:c0: 68:55:d2:4e:f2:3c:ac:90:ad:06:3e:27:a2:43:35:27:52:ac: 5e:1e:40:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUxMDE5MDE0MzMwWhcNMjUxMDI2MDE0MzMwWjAYMRYwFAYD VQQDEw02OGY0NDI0Mi1kNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIrIimD55dpm9nkVtVnM76yEvYskQs75W0qLNGycmRe0A9t8HW+fKRfeZi1P ME6YwNVSJXEBrTd95PP81+UNWk21Ex/xXeSq4P9zGmWXO9BiVyWIpFPRXgnzsHZt DFVAaxbfzwhxMunMo0ldJRrUj2sdqAAYOvpf0ue70I6Hng3VE9OlAaeqVnO60K4/ HkrTPrx+CFhYA8l7qFZrvA5gNVh9ff7NdUF165hzCcx09YJgkBmAjbI3gDl5o10A vdzYBketv46UYy9phXNAUkj4K44Yaq5TC6XCX6kQLNg+xBemPCLAkJe2+8XyG9z/ S02Ox83Nj+9Q6D4s91LHiVpAJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKW+QZR 8myFGgkqKPKNa/q3aTDVMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSUCfoKDx1vs5FvgStuNrsx+tLSPQozA68JItYEoTVLqTDx3yrHzwC KEGpJdzHg2jFthzZWXtBl4WvWdDMwpbCMDfJyp92+FszAyumPEMFP3DB6z8gC9w/ 4buwE/AFcwJKAq8v81rqzqE67oUWPCVAg/HySi4BRijwznYpNdcX9fRM0AeNrTQ1 yAoRuqAIOiP6+CuJSPKcZVPXdOLMnLLkqdI5n/XUIGsQlMyNji1FMHP/i4ALwHyO taYJUjqLmUwFfTiDOJy/ArodrgzDgJgoEZC7jUP2znVKe8YvThPywq7Nt8OKGrt3 cMBoVdJO8jyskK0GPieiQzUnUqxeHkAZ -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:10 2025 by rpki-client