$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json) Hash identifier: TZU+Ax8ElpEmG7mUY2QApKZwdv6jOHNSxdHTBpvb4mc= Subject key identifier: EC:81:C8:31:95:83:81:47:C6:92:D4:EB:D2:73:3D:9D:BD:CD:5C:4D Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft Manifest number: E8 Signing time: Sun 19 Oct 2025 08:22:57 +0000 Manifest this update: Sun 19 Oct 2025 08:22:57 +0000 Manifest next update: Sun 26 Oct 2025 08:22:57 +0000 Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: 9d3YWMcBQ8Y29/PvDEq2/R4jXmG9qSQfRH7HQlgLnbI=) 2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: Oct 19 08:22:57 2025 GMT Not After : Oct 26 08:22:57 2025 GMT Subject: CN=68f49fe1-bb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:18:4e:2c:9c:ab:41:77:b9:a9:f9:e1:e6: ff:c7:9d:98:9d:f6:c5:82:3b:74:ff:b9:74:3b:b2: 45:a0:0d:c4:a4:a5:bc:5e:87:ee:87:f6:31:3f:51: a1:80:9d:37:95:c5:ca:80:9b:e5:c8:61:2d:1a:a6: 58:0a:f7:89:87:b7:b2:97:f2:3a:ba:df:2f:25:1d: 95:17:a7:d1:74:98:8d:20:7a:77:7f:13:65:e3:0c: 92:be:92:9a:da:1c:66:3a:33:58:4c:a7:35:d9:c7: 4c:18:5d:68:9d:10:bb:12:64:12:96:1f:fd:dd:f4: c1:06:22:8d:e3:72:be:9a:df:0e:1a:bd:f6:1b:3d: 55:f1:d1:8a:1d:6c:9a:5f:f1:1a:a6:dc:c3:2b:66: cb:bc:8c:37:6b:04:af:72:be:6b:b8:7e:70:85:48: cd:68:6a:30:ea:48:f7:73:f2:33:98:31:9a:bc:5e: f7:ca:22:d6:ae:c3:01:50:a8:6f:bf:72:40:42:26: bf:8e:2e:76:f1:f1:d0:f1:f0:32:61:b5:00:0d:75: fe:f2:13:e6:91:38:6a:c4:04:01:a8:21:9e:8c:f8: 3b:6b:c8:b2:2a:2b:3f:96:50:4b:05:90:40:15:82: a9:ee:de:78:88:f1:99:3d:d7:3c:55:53:3c:76:7c: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:C8:31:95:83:81:47:C6:92:D4:EB:D2:73:3D:9D:BD:CD:5C:4D X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:53:b7:cc:a4:73:e7:53:94:bc:29:42:7d:43:76:9b:b5: 7d:7c:a7:70:50:75:c5:e8:5c:9d:33:f4:43:2d:f1:ec:40:da: 05:d3:9d:f2:ce:14:dc:2a:75:3f:e0:0c:e7:b7:62:a7:37:ff: d0:db:60:fa:c4:4a:d7:52:10:13:6b:5e:a4:86:05:f2:a6:f0: 0a:59:d5:e8:97:d3:8b:39:a3:77:da:ee:c4:1f:91:8b:41:94: 1a:79:95:7e:64:cb:de:d4:2c:f1:76:f0:4f:17:ca:e5:b1:86: e3:84:ac:26:05:b7:71:bf:7c:9c:d7:20:49:0a:cc:89:24:d3: e1:d8:36:47:43:81:f8:f3:5f:eb:7c:b0:df:bf:54:ce:b7:0c: ce:b2:d9:fc:29:5a:06:9a:04:da:6c:10:5a:3c:b6:b9:b7:e8: 95:eb:82:9a:a5:00:38:dc:8a:e8:fc:8b:e9:f3:47:a3:d6:92: d0:9e:71:0b:bf:0a:9c:91:8d:be:11:28:e9:4b:6e:53:9a:ea: 59:69:aa:ee:a1:ce:73:56:a3:a3:46:77:e8:20:62:bb:bf:d4: c7:de:1d:09:d1:36:b6:1f:d6:6c:ca:c3:47:cb:31:41:83:9c: e4:4b:44:41:e3:9e:3d:34:90:eb:7b:b9:05:9e:94:7b:89:f9: 9c:77:6a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz NzE4MzJDQTUwHhcNMjUxMDE5MDgyMjU3WhcNMjUxMDI2MDgyMjU3WjAYMRYwFAYD VQQDEw02OGY0OWZlMS1iYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnkYTiycq0F3uan54eb/x52YnfbFgjt0/7l0O7JFoA3EpKW8Xofuh/YxP1Gh gJ03lcXKgJvlyGEtGqZYCveJh7eyl/I6ut8vJR2VF6fRdJiNIHp3fxNl4wySvpKa 2hxmOjNYTKc12cdMGF1onRC7EmQSlh/93fTBBiKN43K+mt8OGr32Gz1V8dGKHWya X/EaptzDK2bLvIw3awSvcr5ruH5whUjNaGow6kj3c/IzmDGavF73yiLWrsMBUKhv v3JAQia/ji528fHQ8fAyYbUADXX+8hPmkThqxAQBqCGejPg7a8iyKis/llBLBZBA FYKp7t54iPGZPdc8VVM8dnzCfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyByDGV g4FHxpLU69JzPZ29zVxNMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8aVO3zKRz51OUvClCfUN2m7V9fKdwUHXF6FydM/RDLfHsQNoF053y zhTcKnU/4Aznt2KnN//Q22D6xErXUhATa16khgXypvAKWdXol9OLOaN32u7EH5GL QZQaeZV+ZMve1CzxdvBPF8rlsYbjhKwmBbdxv3yc1yBJCsyJJNPh2DZHQ4H481/r fLDfv1TOtwzOstn8KVoGmgTabBBaPLa5t+iV64KapQA43Iro/Ivp80ej1pLQnnEL vwqckY2+ESjpS25TmupZaaruoc5zVqOjRnfoIGK7v9TH3h0J0Ta2H9ZsysNHyzFB g5zkS0RB4549NJDre7kFnpR7ifmcd2o0 -----END CERTIFICATE-----Generated at Mon Oct 20 10:30:36 2025 by rpki-client