$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: P+HBM5wA8maiJXUgsGvw10iaWjrC/h249A82w/T9gjY= Subject key identifier: 46:DA:90:10:34:84:1D:CD:2F:63:0B:51:48:58:64:33:86:D9:D2:28 Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 3534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 3504 Signing time: Sat 18 Oct 2025 14:29:59 +0000 Manifest this update: Sat 18 Oct 2025 14:29:59 +0000 Manifest next update: Sat 25 Oct 2025 14:29:59 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: fP6P0xSFIaSQp2euVD3sh/ctOZvbzqLjRu7gYRXMEIE=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13620 (0x3534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Oct 18 14:29:59 2025 GMT Not After : Oct 25 14:29:59 2025 GMT Subject: CN=68f3a467-b5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:04:1d:a4:7e:30:d5:80:e6:65:2e:04:67:6c: b6:ba:28:64:c7:de:e4:d7:9d:4c:a3:4b:34:fc:7a: f8:41:49:3d:6f:37:f6:46:8c:80:03:b2:9f:e3:fd: 42:d7:c3:41:78:7e:42:0e:d3:99:5d:8e:32:ad:bd: f9:c3:a1:51:ac:ba:fd:01:06:3f:fa:07:69:73:dd: ae:5d:00:34:00:90:03:67:0e:da:59:99:6b:19:96: e2:bc:6e:bf:12:75:3c:f3:35:44:31:94:07:4f:a4: 3a:65:8f:66:0e:e0:5f:26:2f:8e:01:1e:ae:d0:a1: fa:b7:2f:8c:f1:9d:62:48:51:c7:94:39:66:4d:a3: cc:74:57:f9:0b:1d:86:8b:1d:91:94:82:e3:a4:9a: 76:a5:eb:e1:ca:51:01:44:9b:0f:5d:78:94:97:84: de:5b:38:54:8c:f5:45:f5:5f:7e:07:9b:22:e5:e3: bc:36:21:88:2d:40:f9:5f:4d:ef:d1:50:7b:5b:45: a3:c1:df:5f:51:66:21:cd:fb:c7:af:d6:28:1c:1c: 6e:0d:d5:69:4e:73:f0:6e:fe:d9:a6:fa:57:ad:3b: 22:bc:e9:d0:1a:f1:91:e4:8d:fb:69:2b:2c:20:12: 97:c2:8d:93:89:4a:50:f7:e9:0b:28:0a:26:b9:fa: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DA:90:10:34:84:1D:CD:2F:63:0B:51:48:58:64:33:86:D9:D2:28 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a1:46:82:b8:c0:e1:9f:0b:f6:16:5f:d3:b6:f9:b1:66:79: a6:91:27:72:d1:7b:af:0c:1c:a3:9b:93:b9:32:a8:db:95:d0: 16:e5:c3:6f:35:eb:2d:92:b1:ac:4a:3e:57:12:49:11:ff:4e: 6e:54:ab:80:6f:a4:4c:19:2c:ef:db:de:82:f7:89:51:34:4c: 75:8c:8e:36:63:9e:23:a3:c2:de:3d:d8:77:88:02:79:c6:dc: 1d:b7:b5:85:0f:ea:6a:17:51:5d:b5:20:a5:27:9d:94:4e:63: c2:eb:82:02:f0:94:53:73:e9:47:fc:c5:09:1b:e2:be:d8:67: 99:3f:80:20:8d:d1:56:af:00:db:d4:e6:e8:13:f9:3b:61:a1: 48:f9:56:39:88:02:ff:3e:87:f7:df:d8:b3:67:0d:09:36:72: b9:45:e1:e4:a1:a1:dc:f9:87:d9:a9:1a:53:28:7f:c8:c6:c8: 0e:55:05:58:2d:37:4a:e4:e2:0b:df:2b:c1:05:76:ab:b2:f9: 24:b3:56:fb:b6:16:54:ea:81:07:37:15:47:4a:37:65:3d:50: 3e:29:d8:b2:12:9b:d4:77:be:c3:c5:8e:e6:fa:20:53:05:a3: 7b:54:c1:69:89:36:33:f9:d0:b7:6c:02:58:58:6e:4b:8d:87: eb:d9:71:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUxMDE4MTQyOTU5WhcNMjUxMDI1MTQyOTU5WjAYMRYwFAYD VQQDEw02OGYzYTQ2Ny1iNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AQdpH4w1YDmZS4EZ2y2uihkx97k151Mo0s0/Hr4QUk9bzf2RoyAA7Kf4/1C 18NBeH5CDtOZXY4yrb35w6FRrLr9AQY/+gdpc92uXQA0AJADZw7aWZlrGZbivG6/ EnU88zVEMZQHT6Q6ZY9mDuBfJi+OAR6u0KH6ty+M8Z1iSFHHlDlmTaPMdFf5Cx2G ix2RlILjpJp2pevhylEBRJsPXXiUl4TeWzhUjPVF9V9+B5si5eO8NiGILUD5X03v 0VB7W0Wjwd9fUWYhzfvHr9YoHBxuDdVpTnPwbv7ZpvpXrTsivOnQGvGR5I37aSss IBKXwo2TiUpQ9+kLKAomufowCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbakBA0 hB3NL2MLUUhYZDOG2dIoMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7oUaCuMDhnwv2Fl/TtvmxZnmmkSdy0XuvDByjm5O5MqjbldAW5cNv NestkrGsSj5XEkkR/05uVKuAb6RMGSzv296C94lRNEx1jI42Y54jo8LePdh3iAJ5 xtwdt7WFD+pqF1FdtSClJ52UTmPC64IC8JRTc+lH/MUJG+K+2GeZP4AgjdFWrwDb 1OboE/k7YaFI+VY5iAL/Pof339izZw0JNnK5ReHkoaHc+YfZqRpTKH/IxsgOVQVY LTdK5OIL3yvBBXarsvkks1b7thZU6oEHNxVHSjdlPVA+KdiyEpvUd77DxY7m+iBT BaN7VMFpiTYz+dC3bAJYWG5LjYfr2XHB -----END CERTIFICATE-----Generated at Mon Oct 20 04:14:18 2025 by rpki-client