$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: wY8Z+KKxU+CB4giyEDIUx9c9OG0UngRf27PCZ80eccc= Subject key identifier: 15:0F:44:B9:7E:30:33:C8:D4:C8:26:CF:CF:89:FE:0C:33:12:8E:FD Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 0D Signing time: Sun 19 Oct 2025 11:35:27 +0000 Manifest this update: Sun 19 Oct 2025 11:35:27 +0000 Manifest next update: Sun 26 Oct 2025 11:35:27 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: dOcXzYeV/Z5/hWP2R920/6dltG5n35lO+sccsCEQxIU=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: qXahNWKD3ULNKbUsqqR6NoyLBXctmb1mpVL8KL1rQa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Oct 19 11:35:27 2025 GMT Not After : Oct 26 11:35:27 2025 GMT Subject: CN=68f4ccff-427f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:af:c9:20:55:6a:b6:e2:13:b1:45:26:51: 5b:fb:32:a1:a7:64:51:50:3b:fa:06:7f:1e:24:39: 5c:fa:1b:d8:22:b7:28:05:de:7b:d3:bb:c9:2c:0b: 31:66:be:1d:87:ec:e2:63:71:65:e4:d4:80:f6:84: 9a:52:b6:3e:ea:8f:22:53:33:20:f5:eb:0d:5a:08: 3d:32:2e:4e:fc:3c:a3:7f:1f:37:d7:9b:65:d3:83: 01:46:8c:80:ad:89:6d:7a:b8:e9:97:1b:d8:fa:e6: 01:84:15:a9:fb:a1:27:f8:c9:3c:be:4d:72:9c:76: af:08:d2:23:f0:44:f2:1d:04:7a:74:70:d4:ae:2c: 95:f0:e0:35:11:c2:fa:c1:c3:98:9a:c5:67:8f:dd: 3b:80:9d:3d:11:92:08:56:7d:db:a5:f6:02:e1:f9: 46:56:28:53:cf:a8:95:32:25:64:5d:54:4d:c7:67: 0b:0d:9e:54:47:b4:2b:5a:9a:76:90:50:95:e9:14: 1a:78:20:31:c9:a3:8f:b6:c5:33:0d:21:d2:ba:5f: 8c:21:52:2c:fe:d1:a3:6d:6f:5f:03:a4:cd:52:12: e0:fd:89:69:f3:c6:8b:97:ae:4c:0a:bd:c9:03:03: 1b:9e:6b:e5:e0:51:8f:f1:1f:62:66:68:c7:a0:45: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0F:44:B9:7E:30:33:C8:D4:C8:26:CF:CF:89:FE:0C:33:12:8E:FD X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e9:aa:91:55:57:02:52:3f:2c:73:76:20:c8:c3:b2:6b:29: cf:40:e4:43:2e:65:22:38:73:26:4b:d0:b3:08:83:15:44:92: 7b:47:18:af:ba:f3:ee:8d:05:65:9a:d1:f7:a5:b1:2a:15:ab: af:04:96:53:e6:d9:a6:02:d9:c2:10:50:98:e6:fa:93:5a:fb: 16:10:72:8b:51:af:65:4b:00:8c:c2:78:6f:95:5a:32:87:33: 1a:21:e1:16:ac:57:06:5e:bf:ec:4d:77:7c:b8:56:e0:03:45: 1b:99:13:df:4c:7b:4a:6c:f0:a3:9c:61:17:cc:78:fc:73:e8: c4:a0:52:a3:bc:2e:41:a7:b9:d2:fd:c3:e6:27:d9:4e:7e:61: 7a:ec:f2:3a:f0:20:1b:c5:6e:a9:70:54:ab:30:a0:2d:10:8a: 30:22:4e:b5:b8:55:0a:59:0c:d6:b3:12:f2:eb:83:8a:79:bf: bf:a9:fd:4c:b3:37:4c:dd:9b:8e:e6:88:a0:fc:63:53:92:e5: 22:25:16:1c:65:98:f8:3c:f7:cd:b2:bf:79:79:cd:a2:2b:29: 88:19:1b:b5:6b:cd:3a:93:3f:17:80:c6:31:53:9b:84:67:9a: 4e:d7:a8:46:ad:a3:52:c7:52:4c:11:a6:17:6a:ee:1e:e8:12: 5a:db:c2:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNTEwMTkxMTM1MjdaFw0yNTEwMjYxMTM1MjdaMBgxFjAUBgNV BAMTDTY4ZjRjY2ZmLTQyN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+16/JIFVqtuITsUUmUVv7MqGnZFFQO/oGfx4kOVz6G9gitygF3nvTu8ksCzFm vh2H7OJjcWXk1ID2hJpStj7qjyJTMyD16w1aCD0yLk78PKN/HzfXm2XTgwFGjICt iW16uOmXG9j65gGEFan7oSf4yTy+TXKcdq8I0iPwRPIdBHp0cNSuLJXw4DURwvrB w5iaxWeP3TuAnT0RkghWfdul9gLh+UZWKFPPqJUyJWRdVE3HZwsNnlRHtCtamnaQ UJXpFBp4IDHJo4+2xTMNIdK6X4whUiz+0aNtb18DpM1SEuD9iWnzxouXrkwKvckD Axuea+XgUY/xH2JmaMegRV6HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFQ9EuX4w M8jUyCbPz4n+DDMSjv0wHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAzpqpFVVwJSPyxzdiDIw7JrKc9A5EMuZSI4cyZL0LMIgxVEkntHGK+6 8+6NBWWa0felsSoVq68EllPm2aYC2cIQUJjm+pNa+xYQcotRr2VLAIzCeG+VWjKH Mxoh4RasVwZev+xNd3y4VuADRRuZE99Me0ps8KOcYRfMePxz6MSgUqO8LkGnudL9 w+Yn2U5+YXrs8jrwIBvFbqlwVKswoC0QijAiTrW4VQpZDNazEvLrg4p5v7+p/Uyz N0zdm47miKD8Y1OS5SIlFhxlmPg8982yv3l5zaIrKYgZG7VrzTqTPxeAxjFTm4Rn mk7XqEato1LHUkwRphdq7h7oElrbwgs= -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:56 2025 by rpki-client