$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: ThT4I542akLZWI1C7iTraBHgf3kYCeh7u0tAfghweRg= Subject key identifier: 83:16:12:9F:9B:15:89:35:38:46:8C:3D:89:04:27:98:3D:75:72:A1 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0C12 Signing time: Sat 18 Oct 2025 19:36:40 +0000 Manifest this update: Sat 18 Oct 2025 19:36:39 +0000 Manifest next update: Sat 25 Oct 2025 19:36:39 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: W4wQ0fY0j1ebpBvz8w6f7HDtyHo5yy05MSy4HIoZ3gQ=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3103 (0xc1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Oct 18 19:36:39 2025 GMT Not After : Oct 25 19:36:39 2025 GMT Subject: CN=68f3ec48-e333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:23:0f:4a:29:da:d2:d7:e3:bd:f5:bc:a2: 26:fc:c7:6a:64:ad:60:46:23:ef:5b:f1:34:ca:5f: ce:88:71:b4:40:0c:e1:67:8e:cb:3f:e6:26:27:26: e9:36:ae:d5:07:06:06:cf:1a:a3:b0:d3:cf:14:d5: e9:41:6e:fe:a4:5a:73:29:bf:8a:ab:ca:3d:aa:a3: 6d:70:c3:40:63:01:4f:f0:c3:45:cc:50:09:b3:69: 80:44:49:67:33:03:f3:ad:1e:79:4d:b1:27:4a:65: 9a:a2:f6:67:ca:47:ae:17:86:58:31:32:77:f8:be: b5:7d:d2:71:63:1f:1a:4d:56:89:e6:7f:0c:a5:f7: 1e:34:3a:75:11:e9:b8:49:45:2c:40:9e:2c:5f:76: 1f:d3:d5:05:bc:c0:50:a3:ab:0a:b9:ea:9d:ec:30: 8a:20:52:8c:0f:db:4c:15:37:73:f5:fe:0b:fb:bc: 50:0f:87:f6:b0:22:54:7f:37:50:9b:81:a8:9f:a3: f5:3e:21:6e:5f:4a:78:53:bf:46:a5:bc:2c:29:e1: fb:0c:f4:2d:ad:b6:90:a5:a0:ac:5f:e7:e8:1e:25: 4c:82:62:a3:d1:b0:79:19:c5:57:fc:3b:39:4a:47: d8:a2:c4:f7:49:97:40:d1:e7:6a:f2:cf:44:e0:69: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:16:12:9F:9B:15:89:35:38:46:8C:3D:89:04:27:98:3D:75:72:A1 X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:5f:0b:f8:51:f7:26:bd:42:44:82:0a:73:89:4a:32:f1:45: 22:e3:83:c5:8e:53:ac:c3:09:ef:e5:82:a5:7a:e3:f5:72:62: a3:9e:2d:f2:a8:90:ae:3e:93:a7:7c:ed:44:ac:a8:fc:95:90: bb:cf:59:dc:d5:c0:ac:aa:dc:5c:2b:d7:fb:49:9c:ed:ec:41: 3e:cc:cc:ed:db:c0:35:a2:c4:7c:db:1a:a6:06:11:4b:93:bb: dd:2a:9d:51:55:e2:a6:dd:1a:1e:a9:62:ea:b5:0c:78:28:b7: 1c:3b:b3:b5:54:04:20:4b:df:cf:80:a1:3d:55:72:12:83:02: 7e:69:38:7e:de:cc:e5:19:41:90:7b:c4:b7:8e:19:8c:fd:50: 40:0b:9c:f3:74:bf:d3:eb:9a:a7:f6:6a:ef:5a:9b:68:91:76: bf:9b:59:e1:8d:64:8c:ac:f6:23:4a:2e:94:09:a3:c3:56:98: 8d:5e:3f:e4:e8:e7:12:6f:91:b2:38:1f:9e:95:ba:24:ed:f6: 00:87:bb:b9:39:02:96:32:40:c4:cb:8d:50:8e:f3:c2:d9:2f: ea:4e:74:10:8d:82:99:ea:53:e8:42:e4:7a:4e:ae:a1:07:a1: 4f:0c:47:ef:ae:38:5e:7b:b4:d1:f9:65:f7:e6:b4:88:b7:39: 94:6f:5c:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUxMDE4MTkzNjM5WhcNMjUxMDI1MTkzNjM5WjAYMRYwFAYD VQQDEw02OGYzZWM0OC1lMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLEjD0op2tLX4731vKIm/MdqZK1gRiPvW/E0yl/OiHG0QAzhZ47LP+YmJybp Nq7VBwYGzxqjsNPPFNXpQW7+pFpzKb+Kq8o9qqNtcMNAYwFP8MNFzFAJs2mAREln MwPzrR55TbEnSmWaovZnykeuF4ZYMTJ3+L61fdJxYx8aTVaJ5n8MpfceNDp1Eem4 SUUsQJ4sX3Yf09UFvMBQo6sKueqd7DCKIFKMD9tMFTdz9f4L+7xQD4f2sCJUfzdQ m4Gon6P1PiFuX0p4U79GpbwsKeH7DPQtrbaQpaCsX+foHiVMgmKj0bB5GcVX/Ds5 SkfYosT3SZdA0edq8s9E4GndMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMWEp+b FYk1OEaMPYkEJ5g9dXKhMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Xwv4UfcmvUJEggpziUoy8UUi44PFjlOswwnv5YKleuP1cmKjni3y qJCuPpOnfO1ErKj8lZC7z1nc1cCsqtxcK9f7SZzt7EE+zMzt28A1osR82xqmBhFL k7vdKp1RVeKm3RoeqWLqtQx4KLccO7O1VAQgS9/PgKE9VXISgwJ+aTh+3szlGUGQ e8S3jhmM/VBAC5zzdL/T65qn9mrvWptokXa/m1nhjWSMrPYjSi6UCaPDVpiNXj/k 6OcSb5GyOB+elbok7fYAh7u5OQKWMkDEy41QjvPC2S/qTnQQjYKZ6lPoQuR6Tq6h B6FPDEfvrjhee7TR+WX35rSItzmUb1xI -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:57 2025 by rpki-client