$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json) Hash identifier: XVHBtWjEePXrJbzZnpGkL3fmPw0/U/SIi3yreGHpXqs= Subject key identifier: 48:6C:E7:15:5B:CC:D5:D8:C4:F4:C5:A4:10:7D:05:64:49:57:56:EE Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft Manifest number: 08 Signing time: Sun 19 Oct 2025 11:40:14 +0000 Manifest this update: Sun 19 Oct 2025 11:40:14 +0000 Manifest next update: Sun 26 Oct 2025 11:40:14 +0000 Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: jbpyRzyJepV56wu2dor5Xy4rI/b76hg6wPTUtS7K9WM=) 2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: 4+Fz/s7urhRbpWxiqcwm2WW31Se8f+bopMU0fcrID14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Validity Not Before: Oct 19 11:40:14 2025 GMT Not After : Oct 26 11:40:14 2025 GMT Subject: CN=68f4ce1e-4b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:0f:fc:97:e4:94:98:87:fd:48:b6:f8:49: d3:c9:20:ce:7b:cb:6b:81:d2:5a:f0:ce:aa:a2:07: 1b:72:97:16:c3:23:05:15:f9:1b:ba:67:31:55:40: eb:2a:f5:e3:a1:79:53:1a:0a:d8:80:f6:48:e5:93: 71:f0:49:be:8f:63:f4:d0:25:10:2b:49:74:ac:f4: d2:04:e4:74:34:d5:1b:23:6b:4f:5c:0a:80:4c:dd: 1d:05:7e:bc:e5:8a:78:eb:29:84:01:16:d3:73:d6: 54:9d:d0:19:36:d0:db:6b:0b:72:4e:2d:10:57:f1: bd:26:a9:2b:99:fb:8b:ed:cb:57:db:64:7d:4e:bc: 36:40:a0:da:fe:39:6e:cd:5f:5c:62:c2:bf:aa:34: df:c4:3d:9d:a6:ce:5d:79:2a:ac:33:b1:5c:42:63: 2b:9f:ea:23:41:57:d9:1e:50:0d:09:2f:35:74:2c: 9a:66:81:ee:f1:e3:c9:42:92:37:51:d7:8b:2f:ba: ac:35:51:7d:8e:cc:e5:bc:0f:c9:a4:ad:66:85:fd: 8c:7c:15:9a:52:02:f0:3c:49:3e:96:86:33:b6:a6: 22:e8:48:ee:50:5a:56:f8:54:c1:90:c1:ec:a9:f8: a0:22:e7:3b:66:d1:f9:10:dc:c2:95:ae:cd:39:42: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:E7:15:5B:CC:D5:D8:C4:F4:C5:A4:10:7D:05:64:49:57:56:EE X509v3 Authority Key Identifier: keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2e:fb:e3:e3:2c:4a:da:54:b1:17:72:ab:04:9d:d7:48:b3: b4:57:94:c6:8c:51:47:56:5f:da:5c:3b:4b:95:af:e6:bc:10: 54:67:cb:fa:f2:20:ff:43:78:1f:74:b6:63:46:85:58:8e:c8: 3a:2c:35:37:bd:1e:68:9c:1b:50:c5:a5:fe:cb:3b:d0:fe:49: 74:43:53:bb:d9:dd:e1:0c:93:de:e5:92:aa:e9:f9:e5:23:e8: dd:1b:14:ad:6c:c4:e0:8d:1f:49:be:d4:e3:84:ef:2f:8d:58: ba:e8:8f:38:24:9d:69:01:4d:09:43:4b:80:36:1f:67:e1:cb: e7:35:5d:df:f8:c3:e9:46:50:a2:b6:b5:a0:3d:86:4b:8a:c0: 42:50:e9:7c:86:50:73:99:65:c6:a8:5c:ce:66:00:93:96:02: e5:73:46:6a:0e:d9:49:60:74:c2:0d:18:2a:11:06:e6:5d:67: 7f:28:2b:f5:4c:1d:c0:17:da:d2:e7:b4:c2:f0:5e:9a:57:46: 6b:f9:f1:17:e9:27:ac:78:d9:ab:3b:e9:fe:e9:d9:40:19:cd: cc:27:f4:2c:42:7d:5a:de:22:6f:8e:7e:da:ad:40:d1:5e:77: a4:5c:c1:58:68:cd:1f:e7:a2:f1:69:39:e6:1e:b2:41:3d:a5: 56:66:2d:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw NTEyM0EyNDAeFw0yNTEwMTkxMTQwMTRaFw0yNTEwMjYxMTQwMTRaMBgxFjAUBgNV BAMTDTY4ZjRjZTFlLTRiOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHbQ/8l+SUmIf9SLb4SdPJIM57y2uB0lrwzqqiBxtylxbDIwUV+Ru6ZzFVQOsq 9eOheVMaCtiA9kjlk3HwSb6PY/TQJRArSXSs9NIE5HQ01Rsja09cCoBM3R0Ffrzl injrKYQBFtNz1lSd0Bk20NtrC3JOLRBX8b0mqSuZ+4vty1fbZH1OvDZAoNr+OW7N X1xiwr+qNN/EPZ2mzl15KqwzsVxCYyuf6iNBV9keUA0JLzV0LJpmge7x48lCkjdR 14svuqw1UX2OzOW8D8mkrWaF/Yx8FZpSAvA8ST6WhjO2piLoSO5QWlb4VMGQweyp +KAi5ztm0fkQ3MKVrs05QpGHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSGznFVvM 1djE9MWkEH0FZElXVu4wHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl TTQyLUgtVTVfY1FVU09pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHUu++PjLEraVLEXcqsEnddIs7RXlMaMUUdWX9pcO0uVr+a8EFRny/ry IP9DeB90tmNGhViOyDosNTe9HmicG1DFpf7LO9D+SXRDU7vZ3eEMk97lkqrp+eUj 6N0bFK1sxOCNH0m+1OOE7y+NWLrojzgknWkBTQlDS4A2H2fhy+c1Xd/4w+lGUKK2 taA9hkuKwEJQ6XyGUHOZZcaoXM5mAJOWAuVzRmoO2UlgdMINGCoRBuZdZ38oK/VM HcAX2tLntMLwXppXRmv58RfpJ6x42as76f7p2UAZzcwn9CxCfVreIm+OftqtQNFe d6RcwVhozR/novFpOeYeskE9pVZmLao= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:39 2025 by rpki-client