$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: V8TK4fnDF8EzdIyruat+b0eHcch71bj7ww5fXEaK9io= Subject key identifier: 49:01:ED:F9:E2:4A:A0:DD:5A:90:B5:09:15:D5:14:B6:BF:54:D3:DC Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 0189 Signing time: Sun 19 Oct 2025 06:09:37 +0000 Manifest this update: Sun 19 Oct 2025 06:09:36 +0000 Manifest next update: Sun 26 Oct 2025 06:09:36 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: p/riHQGKT8BfE0Z2qNo1skb2Ug1jwkr66liyegMyWGg=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Oct 19 06:09:36 2025 GMT Not After : Oct 26 06:09:36 2025 GMT Subject: CN=68f480a1-a793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:4d:3a:1e:5c:15:cd:ec:7a:2a:fd:ff:e9: 40:01:52:0a:f9:d5:96:c1:e3:9c:47:16:3e:7f:2c: e9:7d:83:a0:be:0e:43:8a:6d:52:bd:11:77:9d:99: fd:39:76:ac:89:f9:94:3b:cf:23:a0:6d:b4:78:ad: af:d9:26:0a:6a:66:9c:84:46:58:a0:35:ad:ec:39: cd:35:ad:16:67:8a:28:99:7c:1a:fc:3a:9c:d7:e5: f5:a5:65:c9:45:60:5d:67:73:9c:3f:78:3e:8b:9c: ff:8f:ba:b9:88:e0:b6:00:00:a4:46:33:29:5c:58: f9:14:8d:aa:c2:53:6c:ea:83:d3:54:1e:33:c5:50: e5:2f:d9:bb:85:3f:51:e2:3d:1f:6d:18:0c:d6:9a: 0b:11:a7:4c:19:2d:bc:5b:0b:09:4c:c1:bb:c7:53: 57:7b:51:fa:14:19:86:10:c9:62:17:44:02:bb:65: 9b:64:9a:c6:36:28:51:a1:c9:89:64:5b:8e:01:c7: f7:68:eb:fb:b8:47:44:82:5e:b8:fd:06:5e:b6:13: c2:68:58:75:cc:b4:3d:17:1f:9c:fd:38:a6:4a:af: 1d:ee:ce:20:b3:5c:ac:1b:d2:9e:9c:8a:39:3f:3f: c9:bd:dc:15:c5:74:27:dc:de:b8:51:10:9d:ce:d5: d5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:01:ED:F9:E2:4A:A0:DD:5A:90:B5:09:15:D5:14:B6:BF:54:D3:DC X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ae:fa:27:53:6f:39:3f:d7:6d:24:c1:ef:17:43:3a:4d:98: 2f:65:26:4f:6f:3b:9c:0c:5e:e8:b8:79:db:13:c7:a3:04:c2: c7:8e:01:47:bb:4d:87:fe:60:c4:9d:31:87:82:9c:b5:55:bc: 4e:fd:4e:ac:ed:64:c5:ab:de:88:83:d6:dc:a8:38:23:a4:6c: 59:68:79:e4:0a:bf:5c:86:11:49:61:f3:af:ac:e6:a9:38:0f: d7:14:7a:d2:2e:f6:15:67:f4:d7:57:02:e0:ba:41:d6:32:ed: 18:5b:77:09:9a:a9:0e:0d:a2:1c:ad:a2:35:80:55:d0:c5:b6: 91:bc:43:26:79:87:58:96:0d:e8:fd:fa:92:44:1f:61:4a:a8: 4f:e9:df:64:23:bc:2a:72:e6:b8:47:f4:d2:f2:0b:21:29:1b: 76:26:d0:74:28:75:b5:9c:c9:20:02:59:ba:7e:31:61:b7:93: 33:fd:b5:2e:e0:f9:fe:d6:6f:62:d6:e0:0d:19:ed:49:72:59: 44:50:41:95:00:4c:5a:a7:7c:35:00:78:32:0b:1e:55:d0:92: 09:c6:1d:9a:c1:0c:ac:53:6a:e7:05:a7:e7:8c:c0:14:6c:a1: 36:f6:0e:10:ad:98:92:51:13:16:a1:5a:d0:46:9b:96:31:84: 80:0c:3e:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUxMDE5MDYwOTM2WhcNMjUxMDI2MDYwOTM2WjAYMRYwFAYD VQQDEw02OGY0ODBhMS1hNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kVNOh5cFc3seir9/+lAAVIK+dWWweOcRxY+fyzpfYOgvg5Dim1SvRF3nZn9 OXasifmUO88joG20eK2v2SYKamachEZYoDWt7DnNNa0WZ4oomXwa/Dqc1+X1pWXJ RWBdZ3OcP3g+i5z/j7q5iOC2AACkRjMpXFj5FI2qwlNs6oPTVB4zxVDlL9m7hT9R 4j0fbRgM1poLEadMGS28WwsJTMG7x1NXe1H6FBmGEMliF0QCu2WbZJrGNihRocmJ ZFuOAcf3aOv7uEdEgl64/QZethPCaFh1zLQ9Fx+c/TimSq8d7s4gs1ysG9KenIo5 Pz/JvdwVxXQn3N64URCdztXVvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkB7fni SqDdWpC1CRXVFLa/VNPcMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKrvonU285P9dtJMHvF0M6TZgvZSZPbzucDF7ouHnbE8ejBMLHjgFH u02H/mDEnTGHgpy1VbxO/U6s7WTFq96Ig9bcqDgjpGxZaHnkCr9chhFJYfOvrOap OA/XFHrSLvYVZ/TXVwLgukHWMu0YW3cJmqkODaIcraI1gFXQxbaRvEMmeYdYlg3o /fqSRB9hSqhP6d9kI7wqcua4R/TS8gshKRt2JtB0KHW1nMkgAlm6fjFht5Mz/bUu 4Pn+1m9i1uANGe1JcllEUEGVAExap3w1AHgyCx5V0JIJxh2awQysU2rnBafnjMAU bKE29g4QrZiSURMWoVrQRpuWMYSADD6Y -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:47 2025 by rpki-client