$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: A3HPy0wd9yajldrIZkrOqmlhwa4kICnbjAvOvrbASFA= Subject key identifier: 23:5E:5B:48:DD:B8:40:8F:2A:CB:30:01:FC:16:0D:72:E0:BC:A1:03 Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 084F Signing time: Sat 18 Oct 2025 21:58:14 +0000 Manifest this update: Sat 18 Oct 2025 21:58:14 +0000 Manifest next update: Sat 25 Oct 2025 21:58:14 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: 1waqcBAGmKkQaPeSd7jrXfoNDiw3sQWcshOH07fkduw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Oct 18 21:58:14 2025 GMT Not After : Oct 25 21:58:14 2025 GMT Subject: CN=68f40d76-a409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:07:49:e0:9a:e6:c5:92:9d:2c:c3:71:ea: 74:b1:32:80:52:1f:d5:fb:57:4d:ff:19:5b:c0:86: 7c:e1:a1:55:72:3e:79:bd:f0:23:ab:8b:57:0f:22: 7e:93:8e:df:9b:98:c0:d8:e5:19:9b:f3:4f:bc:6c: 0b:35:a7:b2:0f:52:a3:36:ce:2e:93:c2:3e:c4:24: 7e:e9:3c:34:35:79:70:4b:3e:15:31:c2:44:9d:3e: ef:a7:fe:c5:cb:12:da:fc:90:6a:1a:f7:01:ac:9d: 5e:33:fe:2c:cf:87:66:cc:0c:3e:a4:d7:98:83:f7: 0e:46:a0:5c:71:4f:4b:d5:d2:29:ff:98:58:e1:c9: 09:49:da:25:80:90:1b:39:20:06:8b:4f:54:91:6d: 60:3d:65:f9:a5:70:f8:23:86:3a:ea:fd:c5:ca:d4: 0c:d2:73:3d:7d:88:e5:06:cb:73:31:3e:bb:69:51: 31:11:2b:17:b2:27:83:78:fb:67:35:ed:b3:35:6e: fe:d5:13:e8:a7:42:c8:9f:83:5f:c2:ae:5f:e9:48: cd:42:83:c8:e5:a7:72:e1:78:b6:65:ab:61:6c:6e: 90:f2:70:bd:cf:2b:94:82:34:44:66:7a:50:b0:89: a5:3e:a2:ef:6b:f9:9a:6b:76:34:13:5a:bd:2e:43: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:5B:48:DD:B8:40:8F:2A:CB:30:01:FC:16:0D:72:E0:BC:A1:03 X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f6:9d:2c:20:44:3d:52:f4:05:05:1d:9a:0b:2a:b4:bb:ea:e5: ff:71:1b:f6:27:b3:b1:3b:ed:d3:1c:bc:75:8e:2a:3d:ad:6c: 84:2c:8d:4b:d2:41:af:e8:14:9a:b2:74:d5:1f:30:b1:1a:d5: ed:e5:fb:99:de:58:e6:72:74:ef:78:f8:b1:24:60:72:8b:6e: e2:3c:2e:f5:6e:fd:44:ee:87:84:15:ab:84:0d:c1:51:7b:a0: 1e:f9:38:22:06:83:1f:29:8c:fe:b1:de:b5:ed:33:fd:a6:ae: dc:ba:2b:ef:95:96:c7:8f:53:b1:74:f5:97:71:24:c9:40:ed: 93:d9:9b:0a:d5:e3:f1:36:f8:cb:bf:45:3c:d9:d1:1d:c2:0e: af:9d:b5:55:db:9b:5f:47:90:1b:d6:65:07:dd:60:95:ca:ed: d0:e7:15:53:7f:3b:65:0a:49:03:a5:30:fd:e2:aa:f4:0d:03: f8:90:f9:37:d1:fb:2d:80:88:2b:b2:c0:d4:fb:b9:9d:67:b5: 85:5f:82:99:81:5e:be:6a:77:84:c0:02:84:3f:ab:bf:d6:30: fb:22:28:56:b0:f8:25:73:1b:aa:69:bf:86:c4:01:f6:70:9d: 01:d6:83:0a:36:ec:31:27:02:24:6a:74:f2:ca:0a:d5:3a:ee: 15:b6:d3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUxMDE4MjE1ODE0WhcNMjUxMDI1MjE1ODE0WjAYMRYwFAYD VQQDEw02OGY0MGQ3Ni1hNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z8HSeCa5sWSnSzDcep0sTKAUh/V+1dN/xlbwIZ84aFVcj55vfAjq4tXDyJ+ k47fm5jA2OUZm/NPvGwLNaeyD1KjNs4uk8I+xCR+6Tw0NXlwSz4VMcJEnT7vp/7F yxLa/JBqGvcBrJ1eM/4sz4dmzAw+pNeYg/cORqBccU9L1dIp/5hY4ckJSdolgJAb OSAGi09UkW1gPWX5pXD4I4Y66v3FytQM0nM9fYjlBstzMT67aVExESsXsieDePtn Ne2zNW7+1RPop0LIn4Nfwq5f6UjNQoPI5ady4Xi2ZathbG6Q8nC9zyuUgjREZnpQ sImlPqLva/maa3Y0E1q9LkNCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNeW0jd uECPKsswAfwWDXLgvKEDMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD2nSwgRD1S9AUFHZoLKrS76uX/cRv2J7OxO+3THLx1jio9rWyELI1L 0kGv6BSasnTVHzCxGtXt5fuZ3ljmcnTvePixJGByi27iPC71bv1E7oeEFauEDcFR e6Ae+TgiBoMfKYz+sd617TP9pq7cuivvlZbHj1OxdPWXcSTJQO2T2ZsK1ePxNvjL v0U82dEdwg6vnbVV25tfR5Ab1mUH3WCVyu3Q5xVTfztlCkkDpTD94qr0DQP4kPk3 0fstgIgrssDU+7mdZ7WFX4KZgV6+aneEwAKEP6u/1jD7IihWsPglcxuqab+GxAH2 cJ0B1oMKNuwxJwIkanTyygrVOu4VttMY -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:58 2025 by rpki-client