$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: YxJnYrgnN8mgIo+BXq80ICCcJgZin1KamhuVik8U/yM= Subject key identifier: 30:4A:D7:C4:62:D1:CD:F9:22:82:42:73:69:81:A6:00:CE:9C:FE:80 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 11 Signing time: Sun 19 Oct 2025 11:35:56 +0000 Manifest this update: Sun 19 Oct 2025 11:35:56 +0000 Manifest next update: Sun 26 Oct 2025 11:35:55 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: zoOzxIaWq5YOZ8do9kEiTUpEyP1cxbWhnCUeKLn8xRs=) 2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: rrG273YrKP30bIP6LI9pQgElPTdMGXNtxru1G29zetU=) 3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: zhniOmksUDRXONnEcT5JY0KumHd8uj/NZx0Y0gByQxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Oct 19 11:35:56 2025 GMT Not After : Oct 26 11:35:55 2025 GMT Subject: CN=68f4cd1c-886c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:db:6a:7a:93:a0:36:2f:16:a5:d6:7b:ec: 2f:9a:27:db:90:da:cb:0b:e3:27:72:f8:77:4a:df: c8:8a:cb:ad:01:f3:18:c4:09:d0:37:65:73:0a:60: ab:45:3d:4b:fb:db:dd:8d:dd:5e:f2:13:c1:f3:e5: 44:68:ff:ee:b1:2d:b4:01:00:b5:3b:7b:11:be:77: 15:9a:7a:fe:8a:ff:a2:cc:36:fb:9b:dc:d1:f2:e4: 96:bf:99:3d:44:13:3e:64:44:66:47:e4:fd:f2:8a: 8c:f5:52:a1:03:c0:31:21:2e:96:40:b4:74:94:1a: 2e:c2:b7:ea:fa:35:c0:33:08:59:80:c5:17:2c:a5: 79:e8:ff:7b:9c:16:ca:2c:ac:2b:20:fa:5a:3a:cf: c2:79:32:19:89:d3:1a:e6:77:6e:d6:81:f5:49:7f: 8e:21:09:fc:00:0e:59:ea:b1:aa:df:e1:2a:d1:ea: f2:7b:b6:c9:ad:d1:29:fd:d4:d2:b9:39:1a:ee:86: b2:0c:a5:5f:92:a1:f8:ed:da:18:ba:f8:84:81:ee: 59:79:65:b9:a0:ea:6d:2b:a0:41:c9:c0:b6:c8:a9: 5f:36:a7:d8:5b:c6:1f:9b:a9:8c:3a:16:3a:20:92: 23:7b:64:ef:96:2e:f7:cf:25:44:d4:49:0e:d5:c5: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:D7:C4:62:D1:CD:F9:22:82:42:73:69:81:A6:00:CE:9C:FE:80 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0e:39:67:d2:55:e9:aa:f8:3d:37:90:45:f6:c1:3e:9e:86: 86:80:cb:56:d3:ca:c4:e4:82:e3:2f:66:40:f5:9a:bb:1d:1a: 8f:96:dd:dd:e0:e9:5e:24:27:f9:0a:8d:2e:1f:c0:78:b1:69: e1:fd:a9:df:da:af:65:fa:c9:30:eb:92:69:4c:0b:c7:30:95: e5:42:73:55:d6:31:66:e5:a0:02:eb:98:2c:c5:3c:cc:37:24: 66:53:4e:b0:db:73:88:b1:2a:7d:59:5a:ab:e4:44:90:90:83: 38:2e:1c:d0:67:e1:44:07:23:a2:73:bd:2d:78:ff:81:cd:3d: c1:85:2e:2d:b4:96:ad:02:18:00:91:1f:2e:1a:36:fa:47:d7: de:4f:64:a4:08:61:e0:6a:27:aa:a9:d8:0c:9e:49:de:f4:09: 27:cb:f6:3c:f0:73:de:50:a1:e6:34:51:fb:70:b9:e6:62:ed: 7b:c5:87:b4:94:9a:54:3d:75:aa:36:22:23:be:91:e7:1b:62: 8d:f3:a5:50:a4:a9:48:14:00:d3:37:01:f8:c2:49:66:92:f7: 84:72:c5:31:a4:b1:3b:eb:4c:61:6d:18:81:08:ba:9e:c6:4a: 0a:79:e8:35:a9:3a:e9:46:dd:a7:e4:06:35:05:dc:a1:44:c4: 89:9a:12:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNTEwMTkxMTM1NTZaFw0yNTEwMjYxMTM1NTVaMBgxFjAUBgNV BAMTDTY4ZjRjZDFjLTg4NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgHNtqepOgNi8WpdZ77C+aJ9uQ2ssL4ydy+HdK38iKy60B8xjECdA3ZXMKYKtF PUv7292N3V7yE8Hz5URo/+6xLbQBALU7exG+dxWaev6K/6LMNvub3NHy5Ja/mT1E Ez5kRGZH5P3yioz1UqEDwDEhLpZAtHSUGi7Ct+r6NcAzCFmAxRcspXno/3ucFsos rCsg+lo6z8J5MhmJ0xrmd27WgfVJf44hCfwADlnqsarf4SrR6vJ7tsmt0Sn91NK5 ORruhrIMpV+Sofjt2hi6+ISB7ll5Zbmg6m0roEHJwLbIqV82p9hbxh+bqYw6Fjog kiN7ZO+WLvfPJUTUSQ7VxSCpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMErXxGLR zfkigkJzaYGmAM6c/oAwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEOOWfSVemq+D03kEX2wT6ehoaAy1bTysTkguMvZkD1mrsdGo+W3d3g 6V4kJ/kKjS4fwHixaeH9qd/ar2X6yTDrkmlMC8cwleVCc1XWMWbloALrmCzFPMw3 JGZTTrDbc4ixKn1ZWqvkRJCQgzguHNBn4UQHI6JzvS14/4HNPcGFLi20lq0CGACR Hy4aNvpH195PZKQIYeBqJ6qp2AyeSd70CSfL9jzwc95QoeY0UftwueZi7XvFh7SU mlQ9dao2IiO+kecbYo3zpVCkqUgUANM3AfjCSWaS94RyxTGksTvrTGFtGIEIup7G Sgp56DWpOulG3afkBjUF3KFExImaEu8= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:03 2025 by rpki-client