$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: 7q78iasJbMuCRbl6U527Ault7zBR+sLCCnmD+9H9wVk= Subject key identifier: F9:13:A9:A0:14:B1:69:13:58:9A:42:5E:4D:5B:3E:1C:97:09:9E:2D Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: C0 Signing time: Sun 19 Oct 2025 09:01:26 +0000 Manifest this update: Sun 19 Oct 2025 09:01:25 +0000 Manifest next update: Sun 26 Oct 2025 09:01:25 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: OXE5XgiSipZgFOy+qw6NNtkI78Q6ck6LTCCCX1I7UpI=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: 7mz7uGJXQ4CqBMTrgZFYe2WUHKGmXyVago/PI7EUVO8=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: OPmEmqIaKed2x77tjIp4ZdpM1ffHxBwU3VDB8mthG20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Oct 19 09:01:25 2025 GMT Not After : Oct 26 09:01:25 2025 GMT Subject: CN=68f4a8e6-1830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a2:e4:23:9c:4c:fa:89:2b:27:79:23:94:12: 26:0c:f5:03:68:47:c1:ab:5e:bd:85:15:00:3c:68: b6:0f:18:21:35:78:df:56:6d:a4:7c:e4:90:80:40: b4:1c:85:b9:4d:ed:c9:6b:06:2e:7e:90:50:a7:66: 67:8e:65:96:82:82:f0:0a:74:a7:39:55:b9:a2:6e: 71:2b:02:ee:e7:ea:c3:69:dd:a7:cb:2c:06:b5:84: e9:71:7a:e3:34:41:4d:b5:cb:9b:4d:ba:77:05:d3: 6f:26:44:45:e8:c4:b4:4c:0c:99:a8:ff:4b:eb:e9: 1a:71:3b:dd:ac:62:30:f1:d1:63:87:0b:e9:5b:5a: 24:28:ef:df:30:b7:48:90:1c:6b:85:15:a3:26:95: 5c:fe:88:b7:99:4f:d2:67:40:da:b5:fc:5c:89:8c: e3:ca:b6:5e:ca:cc:4d:35:82:9f:c7:b4:2c:99:d5: 47:3c:a7:78:ba:cd:7f:b7:1d:4a:17:0a:11:71:54: b2:79:00:fc:22:dd:94:96:78:32:18:3c:47:71:df: 88:f9:c7:70:0c:17:65:0c:b4:7c:34:a1:e2:4b:3d: 7b:a0:03:bf:c6:06:6a:e4:77:d0:86:f0:65:c5:bc: 67:b5:89:b2:c5:bd:65:36:63:02:db:19:31:54:66: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:13:A9:A0:14:B1:69:13:58:9A:42:5E:4D:5B:3E:1C:97:09:9E:2D X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:cf:f4:6c:af:4c:ec:87:84:a9:17:78:f8:21:d8:1f:ec:8b: f2:7f:09:91:fd:60:26:da:74:f8:3e:e8:05:fa:9e:5f:4b:e5: 22:42:f0:95:d1:f6:d5:67:17:c9:b9:76:7f:50:9a:b1:cf:bc: ec:fe:ba:07:fe:3f:cb:ee:bf:4c:b9:72:8b:59:4d:40:bf:ef: a0:75:4a:47:9b:1e:4b:a0:b1:8a:3f:b9:42:44:24:c7:a1:04: 5f:7f:7a:fc:ec:65:f8:aa:31:25:f3:0f:14:5a:e4:27:66:cb: 61:91:bc:df:f1:e5:f5:03:b7:1e:e5:e4:fd:86:ab:4c:95:ac: b5:a4:d4:fc:1b:88:f3:ed:71:02:2c:2e:4c:6b:03:28:28:8d: c3:63:a1:22:c3:9a:33:10:ff:1a:c3:a6:b3:10:40:e9:08:8c: 6c:97:a6:79:8a:53:0c:d9:93:78:21:5d:8d:26:69:39:39:63: 85:e0:f6:12:4c:f8:8c:45:8e:81:de:e2:0b:59:bb:0a:5b:1c: 6e:5d:d5:b7:1d:a1:e8:3f:f7:f8:15:65:ce:54:d0:74:10:77: 33:38:4e:3c:60:c9:f4:e7:aa:26:96:4a:0a:a4:e6:43:a7:7a: 20:a2:5f:80:50:0c:60:2a:e5:be:6d:e4:b3:d4:85:35:d2:ae: d5:16:f1:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUxMDE5MDkwMTI1WhcNMjUxMDI2MDkwMTI1WjAYMRYwFAYD VQQDEw02OGY0YThlNi0xODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9aLkI5xM+okrJ3kjlBImDPUDaEfBq169hRUAPGi2DxghNXjfVm2kfOSQgEC0 HIW5Te3JawYufpBQp2ZnjmWWgoLwCnSnOVW5om5xKwLu5+rDad2nyywGtYTpcXrj NEFNtcubTbp3BdNvJkRF6MS0TAyZqP9L6+kacTvdrGIw8dFjhwvpW1okKO/fMLdI kBxrhRWjJpVc/oi3mU/SZ0DatfxciYzjyrZeysxNNYKfx7QsmdVHPKd4us1/tx1K FwoRcVSyeQD8It2UlngyGDxHcd+I+cdwDBdlDLR8NKHiSz17oAO/xgZq5HfQhvBl xbxntYmyxb1lNmMC2xkxVGaO/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkTqaAU sWkTWJpCXk1bPhyXCZ4tMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGz/Rsr0zsh4SpF3j4Idgf7IvyfwmR/WAm2nT4PugF+p5fS+UiQvCV 0fbVZxfJuXZ/UJqxz7zs/roH/j/L7r9MuXKLWU1Av++gdUpHmx5LoLGKP7lCRCTH oQRff3r87GX4qjEl8w8UWuQnZsthkbzf8eX1A7ce5eT9hqtMlay1pNT8G4jz7XEC LC5MawMoKI3DY6Eiw5ozEP8aw6azEEDpCIxsl6Z5ilMM2ZN4IV2NJmk5OWOF4PYS TPiMRY6B3uILWbsKWxxuXdW3HaHoP/f4FWXOVNB0EHczOE48YMn056omlkoKpOZD p3ogol+AUAxgKuW+beSz1IU10q7VFvH9 -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:36 2025 by rpki-client