$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: Q4yvZJBhWqTFc3IutQIEwCy2MmCPlSkYJgjXPWhIF+s= Subject key identifier: 6D:2A:6E:B6:8F:40:E6:AE:49:6D:E6:F6:95:AB:DF:C1:04:34:F7:F9 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: E6 Signing time: Sun 19 Oct 2025 08:25:29 +0000 Manifest this update: Sun 19 Oct 2025 08:25:29 +0000 Manifest next update: Sun 26 Oct 2025 08:25:29 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: ytPAW44srJn9moU8H5P6n/4v2WPGpBYEX2a0R+eMDLI=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: 5PwwEtr0WdaGFqWetfTa+iIVtcVhNqtyf5KVj5gOAK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Oct 19 08:25:29 2025 GMT Not After : Oct 26 08:25:29 2025 GMT Subject: CN=68f4a079-e1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:e6:1a:1f:cb:b9:d9:e7:ba:4f:a4:24:36: 0d:12:a4:98:aa:6f:04:0a:04:ad:19:19:33:20:e3: 5a:51:f8:5d:e5:87:05:cd:54:83:c7:07:67:f9:f0: ab:1d:e0:28:82:11:17:bf:79:95:b4:52:36:de:f4: 4d:ee:d0:41:fd:f7:32:fc:70:ed:4a:a3:10:34:d8: 53:76:6c:d2:e6:4f:be:40:10:32:d8:9d:77:d7:7f: e4:1a:da:31:ed:f0:6c:0b:9c:d7:29:5e:84:33:9e: d4:ba:a1:9e:a3:53:91:96:d3:62:a1:88:cb:3d:ac: 90:7f:eb:dd:d0:54:49:4c:21:61:48:e1:19:45:fa: cb:c9:d4:ca:52:19:c6:dc:09:94:31:a3:df:2e:07: b8:de:a9:43:65:16:d9:24:f8:78:3d:52:d7:6d:7b: 01:ff:5d:d4:62:d1:a8:be:fd:ac:8b:e0:17:96:76: 18:ba:5d:8d:ef:f1:e6:22:a9:91:6c:68:96:40:e4: 8c:9f:f3:64:71:39:9f:98:39:2f:a5:62:64:72:54: 60:13:b0:89:91:58:00:ea:9a:90:73:95:51:66:ed: b1:c6:ae:2e:f5:e0:67:88:89:f8:f0:b2:71:53:9d: d0:8d:b8:4b:c1:b7:6d:b2:f4:45:2c:17:44:32:9a: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2A:6E:B6:8F:40:E6:AE:49:6D:E6:F6:95:AB:DF:C1:04:34:F7:F9 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:e1:93:84:20:02:b2:30:33:e3:c2:ed:f8:fb:32:ac:83: fe:1d:82:cf:17:b6:3c:05:d0:e9:be:bf:81:bf:7c:b4:4b:9a: 9c:58:79:e0:c2:65:78:6d:65:60:e3:e1:6b:6e:24:04:7d:1c: a4:16:bf:31:09:f0:8c:f5:ff:09:2a:e5:27:96:fe:79:16:68: 83:db:9b:14:49:c6:ec:cd:b6:17:d1:d2:a0:c5:e8:e6:52:2b: ba:df:d3:4c:5e:b4:64:42:d6:0d:3b:06:3c:e4:93:d8:83:ad: 64:5d:7d:d7:40:79:58:cd:ef:e0:c1:53:94:a0:01:5f:60:f3: 85:8b:8d:0c:1a:e5:ad:8c:10:1c:c4:9f:fe:be:ee:38:55:89: 5d:28:e5:41:03:81:09:68:30:b7:fa:58:5a:2e:05:5d:cf:db: 2d:92:3e:18:8b:67:bb:4f:98:54:c7:70:bc:3f:16:d2:0c:2a: 63:f3:f7:11:46:da:77:27:ce:c1:9e:ee:4b:4b:e0:c1:b5:1f: 32:a1:ba:9a:37:f4:ba:b9:2f:14:14:8f:bd:ca:ef:58:0b:76: c1:d8:c2:e1:24:7e:d5:e9:52:3b:7c:45:71:18:95:db:cd:ea: 50:6c:bd:81:8e:0b:e9:86:31:9f:d1:cb:34:7f:69:81:2f:73: 7a:41:80:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUxMDE5MDgyNTI5WhcNMjUxMDI2MDgyNTI5WjAYMRYwFAYD VQQDEw02OGY0YTA3OS1lMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJfmGh/Ludnnuk+kJDYNEqSYqm8ECgStGRkzIONaUfhd5YcFzVSDxwdn+fCr HeAoghEXv3mVtFI23vRN7tBB/fcy/HDtSqMQNNhTdmzS5k++QBAy2J1313/kGtox 7fBsC5zXKV6EM57UuqGeo1ORltNioYjLPayQf+vd0FRJTCFhSOEZRfrLydTKUhnG 3AmUMaPfLge43qlDZRbZJPh4PVLXbXsB/13UYtGovv2si+AXlnYYul2N7/HmIqmR bGiWQOSMn/NkcTmfmDkvpWJkclRgE7CJkVgA6pqQc5VRZu2xxq4u9eBniIn48LJx U53QjbhLwbdtsvRFLBdEMppB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0qbraP QOauSW3m9pWr38EENPf5MB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNuOGThCACsjAz48Lt+PsyrIP+HYLPF7Y8BdDpvr+Bv3y0S5qcWHng wmV4bWVg4+FrbiQEfRykFr8xCfCM9f8JKuUnlv55FmiD25sUScbszbYX0dKgxejm Uiu639NMXrRkQtYNOwY85JPYg61kXX3XQHlYze/gwVOUoAFfYPOFi40MGuWtjBAc xJ/+vu44VYldKOVBA4EJaDC3+lhaLgVdz9stkj4Yi2e7T5hUx3C8PxbSDCpj8/cR Rtp3J87Bnu5LS+DBtR8yobqaN/S6uS8UFI+9yu9YC3bB2MLhJH7V6VI7fEVxGJXb zepQbL2BjgvphjGf0cs0f2mBL3N6QYCv -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:45 2025 by rpki-client