$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft File: zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json) Hash identifier: J4EFEHnxzFSjXQeJuKD/h77eBe8QrtSmxWS9kyQ8hJg= Subject key identifier: B1:B5:97:9A:9D:EB:63:F4:1B:86:BA:9D:5F:0B:FC:3C:AB:87:6C:E8 Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Certificate serial: 0E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft Manifest number: 0E87 Signing time: Sat 18 Oct 2025 18:20:24 +0000 Manifest this update: Sat 18 Oct 2025 18:20:23 +0000 Manifest next update: Sat 25 Oct 2025 18:20:23 +0000 Files and hashes: 1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: fKGo9lw65UJRY+vF33+LapagtJsn3hEdp7gkxtXuYt4=) 2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: am9c/5/9WUqfqDVJJkqHl1fMAMJ9WE34zLQ5kEncnkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3735 (0xe97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Validity Not Before: Oct 18 18:20:23 2025 GMT Not After : Oct 25 18:20:23 2025 GMT Subject: CN=68f3da68-78ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:d4:06:56:86:e2:6c:18:f5:c3:f8:1e:e9: 15:6a:f2:5e:54:de:0f:f3:b1:00:fe:50:6c:b0:bf: 0e:39:e1:b5:ea:da:17:e3:e1:f4:27:da:ac:34:cb: 08:74:13:b5:89:18:00:0a:dd:c7:d0:a6:2a:be:f4: fb:39:69:fc:c9:08:6e:1c:53:31:21:57:fb:df:87: 89:ee:fc:e3:71:ed:9e:d2:3d:af:e1:6a:50:9f:ee: 54:f0:18:59:e9:65:0e:e9:7e:b5:84:dd:eb:c6:b2: 45:1a:f3:d9:0e:44:0c:5c:45:fa:ef:36:e8:2b:84: 4e:47:a9:12:67:43:fb:f6:23:9f:7a:a4:f9:9e:df: e1:08:2a:c1:08:1d:fa:20:6c:54:2c:26:df:7b:a4: 17:15:15:74:b0:ce:b5:d7:c6:5b:0c:38:04:cd:a3: 55:d3:28:c3:62:7c:ed:62:f0:85:a5:32:c6:31:96: 9a:27:c8:ac:a1:79:7a:5d:f6:2a:03:e5:01:7b:4b: 80:dc:db:26:a1:0d:04:09:26:66:4a:0d:b4:0a:3e: d5:bc:bf:40:40:c1:f1:cb:cf:be:5e:d0:4f:0e:44: 31:a0:e1:c4:9b:fb:e2:3b:a5:34:19:65:a9:aa:ac: 46:cc:6c:84:12:aa:23:fb:5f:51:46:a6:bb:2f:fb: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B5:97:9A:9D:EB:63:F4:1B:86:BA:9D:5F:0B:FC:3C:AB:87:6C:E8 X509v3 Authority Key Identifier: keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:40:22:48:47:45:6f:80:88:48:21:7b:39:70:ed:44:18:60: 35:71:7e:45:4f:31:50:ac:35:0c:99:e4:16:d1:a6:81:ec:b6: 46:18:d8:c9:08:2b:a3:ce:73:03:43:9a:1e:2b:8a:06:bf:f6: 95:fb:6b:32:36:38:e0:62:d1:4f:16:11:06:c5:28:54:65:d8: ef:53:0a:c0:fc:f2:48:df:69:35:6f:e0:4a:96:47:17:27:1f: 91:77:06:d2:06:73:7e:74:c9:2b:ff:92:4c:3c:ad:b7:4c:58: 9a:2f:c1:ed:06:42:4b:eb:c9:8f:08:cd:76:f0:a7:f6:2c:09: 2a:40:e7:fa:25:5e:3f:c5:27:cd:d6:2c:98:2f:c2:07:f4:ae: e6:35:46:36:6f:24:ab:98:46:c2:09:b8:13:d9:2b:18:ae:35: 7b:67:4b:94:5d:7e:9c:d4:cc:2a:55:89:0b:bd:1b:fe:01:1d: 20:05:24:12:b4:bc:96:d4:76:fb:ff:83:0d:ae:05:b6:d4:7d: b6:6a:43:e1:71:72:2e:66:c4:a3:84:fd:74:c2:08:23:3b:47: 59:53:bb:70:25:4e:22:af:f4:24:56:f4:7d:aa:e2:33:ab:cb: 6e:79:a5:a7:99:67:17:db:ca:50:ec:87:e2:75:f7:db:70:9e: 1f:c4:3a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGMDgxMTAvBgNVBAUTKENFOENBRDM1NjIxQTkwMTJDNDBCMzYzNzUzN0NBNDBF M0QwN0U4Q0YwHhcNMjUxMDE4MTgyMDIzWhcNMjUxMDI1MTgyMDIzWjAYMRYwFAYD VQQDEw02OGYzZGE2OC03OGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW/UBlaG4mwY9cP4HukVavJeVN4P87EA/lBssL8OOeG16toX4+H0J9qsNMsI dBO1iRgACt3H0KYqvvT7OWn8yQhuHFMxIVf734eJ7vzjce2e0j2v4WpQn+5U8BhZ 6WUO6X61hN3rxrJFGvPZDkQMXEX67zboK4ROR6kSZ0P79iOfeqT5nt/hCCrBCB36 IGxULCbfe6QXFRV0sM6118ZbDDgEzaNV0yjDYnztYvCFpTLGMZaaJ8isoXl6XfYq A+UBe0uA3NsmoQ0ECSZmSg20Cj7VvL9AQMHxy8++XtBPDkQxoOHEm/viO6U0GWWp qqxGzGyEEqoj+19RRqa7L/uFJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG1l5qd 62P0G4a6nV8L/Dyrh2zoMB8GA1UdIwQYMBaAFM6MrTViGpASxAs2N1N8pA49B+jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUYwOC8zMDkwRDkxNEEx NEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtCTEVDelkzVTN5a0RqMEg2 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pveXROV0lha0JMRUN6WTNVM3lrRGowSDZNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUYwOC8zMDkwRDkxNEExNEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtC TEVDelkzVTN5a0RqMEg2TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXQCJIR0VvgIhIIXs5cO1EGGA1cX5FTzFQrDUMmeQW0aaB7LZGGNjJ CCujznMDQ5oeK4oGv/aV+2syNjjgYtFPFhEGxShUZdjvUwrA/PJI32k1b+BKlkcX Jx+RdwbSBnN+dMkr/5JMPK23TFiaL8HtBkJL68mPCM128Kf2LAkqQOf6JV4/xSfN 1iyYL8IH9K7mNUY2bySrmEbCCbgT2SsYrjV7Z0uUXX6c1MwqVYkLvRv+AR0gBSQS tLyW1Hb7/4MNrgW21H22akPhcXIuZsSjhP10wggjO0dZU7twJU4ir/QkVvR9quIz q8tueaWnmWcX28pQ7IfidffbcJ4fxDrH -----END CERTIFICATE-----Generated at Mon Oct 20 04:03:42 2025 by rpki-client