$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: O+fOyRcsSmuHuaTli4yUKQKlBgwLXdlldvPpl7UNW2A= Subject key identifier: E5:0A:19:D3:A3:6F:5D:71:77:6B:96:CE:C0:0C:BC:BC:40:66:6E:07 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 05:34:13 +0000 Manifest this update: Sun 19 Oct 2025 05:34:13 +0000 Manifest next update: Sun 26 Oct 2025 05:34:13 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: sZKOhzAUVcC1mhExXQ9PP9QY/wdfxj9XEIQUDnDZgPY=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: jnLxIBXSm7e5/8UMqX1czieGQhqSS+3jnA+J0x4YYkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Oct 19 05:34:13 2025 GMT Not After : Oct 26 05:34:13 2025 GMT Subject: CN=68f47855-0637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:ab:fc:0b:8d:9f:fa:48:6a:e1:00:23:5d: 6d:55:bb:3e:05:7e:35:c7:f2:da:db:0f:10:b9:4c: a5:76:59:5c:21:9f:d8:7e:a5:67:00:0b:91:33:49: 85:2f:3f:85:07:31:2c:7a:8f:71:84:89:b1:5a:bd: 0a:a5:26:a4:cd:f8:fb:96:b5:a8:35:89:c3:76:95: 0e:ad:ac:5f:9f:29:37:1b:de:02:52:ff:3a:15:e5: b5:b7:2d:73:bd:de:1b:97:46:9d:33:73:9d:a5:eb: 7d:9b:25:74:74:af:0c:c4:fb:0c:b3:f8:35:78:bc: a6:08:75:94:4f:81:00:7f:b6:ee:cd:82:a6:de:91: 6f:0a:ce:05:63:b9:0d:bc:0d:7c:de:f9:4f:fa:2e: ee:5c:34:ba:11:bb:78:98:50:68:fa:18:3d:b2:81: eb:9b:42:2b:ec:b4:b0:e0:f7:7a:55:8e:68:e0:df: 46:5e:98:aa:ed:25:d9:02:fc:17:b1:12:ae:ca:9c: bd:09:ae:2d:ce:2a:62:22:64:29:c1:e9:6f:31:24: 2b:99:b2:af:6b:73:fe:72:7a:fe:b3:ab:b1:d1:73: f1:9a:11:66:76:bb:3f:c7:9f:3f:b8:5a:e8:db:02: aa:fb:86:c7:18:3f:48:10:ec:6c:ec:10:e6:0a:95: 1a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:19:D3:A3:6F:5D:71:77:6B:96:CE:C0:0C:BC:BC:40:66:6E:07 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9f:bd:17:26:3d:92:eb:b4:5d:9b:2f:a3:8b:9d:ff:08:84: 49:61:68:e7:9e:2f:31:72:70:9a:61:c6:e8:96:a8:d0:75:aa: 7a:ab:d7:7a:7a:dd:c1:7f:e6:04:fd:e0:c6:a4:40:54:01:79: 16:3d:41:73:1f:38:0e:5e:81:c8:63:95:34:ab:04:15:bc:11: fd:9c:34:9d:32:fd:c3:04:9a:17:e4:24:21:83:2d:ce:d6:74: 7a:45:26:93:74:09:c2:3f:7b:c4:5b:01:5b:11:d9:57:0e:c6: 59:e8:62:3d:cb:fd:8a:df:b5:39:7c:36:13:ac:8a:ac:e1:e2: 3d:6c:16:0e:2a:a2:8b:1b:5b:de:93:eb:d4:e1:e2:b2:83:77: 7b:f7:d8:b5:6c:2c:a9:34:c5:74:b5:02:e0:52:e5:75:f3:4b: 2d:1b:b9:05:cf:15:3a:60:3d:1d:73:6e:c3:ba:be:86:c3:e8: 3b:ee:bd:38:98:f8:8b:cb:6b:a6:34:9e:d4:b9:71:24:41:f0: e2:29:14:9d:cb:b2:0c:69:36:54:99:ca:1e:a4:c1:b7:e5:5d: b4:83:9e:18:49:0b:28:ec:2b:62:35:68:22:68:4d:41:64:7b: e3:e1:64:45:1c:0d:67:83:52:46:a6:f5:a8:61:d2:44:0b:d5: 2e:62:47:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUxMDE5MDUzNDEzWhcNMjUxMDI2MDUzNDEzWjAYMRYwFAYD VQQDEw02OGY0Nzg1NS0wNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xCr/AuNn/pIauEAI11tVbs+BX41x/La2w8QuUyldllcIZ/YfqVnAAuRM0mF Lz+FBzEseo9xhImxWr0KpSakzfj7lrWoNYnDdpUOraxfnyk3G94CUv86FeW1ty1z vd4bl0adM3Odpet9myV0dK8MxPsMs/g1eLymCHWUT4EAf7buzYKm3pFvCs4FY7kN vA183vlP+i7uXDS6Ebt4mFBo+hg9soHrm0Ir7LSw4Pd6VY5o4N9GXpiq7SXZAvwX sRKuypy9Ca4tzipiImQpwelvMSQrmbKva3P+cnr+s6ux0XPxmhFmdrs/x58/uFro 2wKq+4bHGD9IEOxs7BDmCpUakQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUKGdOj b11xd2uWzsAMvLxAZm4HMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNn70XJj2S67Rdmy+ji53/CIRJYWjnni8xcnCaYcbolqjQdap6q9d6 et3Bf+YE/eDGpEBUAXkWPUFzHzgOXoHIY5U0qwQVvBH9nDSdMv3DBJoX5CQhgy3O 1nR6RSaTdAnCP3vEWwFbEdlXDsZZ6GI9y/2K37U5fDYTrIqs4eI9bBYOKqKLG1ve k+vU4eKyg3d799i1bCypNMV0tQLgUuV180stG7kFzxU6YD0dc27Dur6Gw+g77r04 mPiLy2umNJ7UuXEkQfDiKRSdy7IMaTZUmcoepMG35V20g54YSQso7CtiNWgiaE1B ZHvj4WRFHA1ng1JGpvWoYdJEC9UuYkcd -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:13 2025 by rpki-client