$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json) Hash identifier: lESAZzQCJsVL33Oq/PHP+/BEKmPMBpGG4c4bMFnBTFE= Subject key identifier: 44:57:E1:05:1E:5A:7F:09:65:33:7F:76:8A:38:D7:A7:B3:2C:B9:EC Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:33:19 +0000 Manifest this update: Sun 19 Oct 2025 11:33:19 +0000 Manifest next update: Sun 26 Oct 2025 11:33:19 +0000 Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: Vx3YegauvFe2SGoYOXMnS7wjuRbmxxUtvfHbg3JwSgI=) 2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: H0Iwpph5C0NznDpgp/Qg/LJo8mI5O7HMAwbb7Y6vKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Oct 19 11:33:19 2025 GMT Not After : Oct 26 11:33:19 2025 GMT Subject: CN=68f4cc7f-445e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2b:d0:33:9f:a5:69:d2:5c:82:a1:2f:0c:8e: 51:3d:af:76:24:3e:ca:a6:7c:c1:73:61:27:1c:20: f9:2e:0c:69:6d:f5:da:0e:a6:35:fe:c1:ba:25:74: ad:5f:5a:a3:56:ff:75:50:bb:9c:a0:10:20:dd:96: 34:c2:56:4c:94:59:67:8d:96:d1:16:7a:88:c7:60: 7e:7b:b9:5c:ef:b2:00:00:3b:98:2e:cb:d1:ba:d2: 97:f2:f1:01:29:af:78:9d:6d:ce:4e:d3:82:45:f9: 7a:91:60:0c:65:03:e8:30:43:43:b9:63:13:8f:77: 1b:f8:91:a7:1e:91:26:bd:45:ff:38:cb:44:1f:f2: 28:6d:6a:0e:ae:8c:a3:f1:94:31:b8:60:3a:08:ab: e5:fd:f8:fc:43:df:30:7c:a2:c1:14:34:95:0c:3c: 18:c8:69:e5:97:f3:fd:1f:a6:d6:bc:6d:2c:35:65: 67:d9:a5:eb:66:82:30:0c:c0:f4:46:3d:e9:5f:73: 8e:f7:00:3d:be:73:3e:37:28:a9:f4:e2:0a:48:ee: 6b:c7:e5:21:93:88:36:e5:e1:ba:68:6f:66:1a:b3: 7c:8b:a7:2a:c1:c2:bd:89:0b:50:88:22:cc:65:1f: 93:9c:59:c9:d2:e9:52:7b:c3:d2:c9:8e:bd:fc:f4: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:E1:05:1E:5A:7F:09:65:33:7F:76:8A:38:D7:A7:B3:2C:B9:EC X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:34:e4:ae:ff:6d:cc:18:d5:fc:9b:a4:90:16:bb:fd:06:3a: fb:b4:d0:ad:58:81:b9:73:ef:cf:ad:51:ee:43:bc:72:44:22: 07:4d:03:f1:34:98:34:dc:6b:a6:95:b8:83:f3:fd:68:f4:64: aa:1d:12:e5:9e:6c:97:ca:c0:34:16:36:5d:2a:54:5d:68:2a: aa:75:45:8b:9e:1c:14:00:bf:48:e0:ce:19:af:30:5d:49:1e: 7f:91:32:75:9d:4b:4e:de:77:82:06:67:07:c5:06:f1:71:c5: 04:5b:7e:3a:03:88:f8:5e:d2:e2:db:e2:c9:83:52:e3:20:3c: 86:54:0d:ff:ed:7e:73:51:5a:a0:85:19:53:9b:48:83:c5:c1: 19:c2:86:2a:92:c2:da:62:3f:42:a3:75:02:27:5e:3e:64:fa: f5:1c:65:d5:35:86:b6:ca:16:38:db:a1:6e:92:fe:2e:d7:3d: 3d:ad:69:25:24:a0:46:99:59:fb:64:c9:f5:28:6f:15:26:71: eb:8f:af:2d:7e:e5:54:35:a6:30:05:a2:ac:8c:3d:b8:5b:d2: 95:cf:3c:26:e3:0e:b9:6c:41:a8:58:0c:26:0c:68:68:7f:a6: fb:e4:09:44:60:3c:37:d7:d5:5e:30:83:64:10:2d:8b:e0:3c: 2a:86:1d:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4 MUQzRTgwRjAeFw0yNTEwMTkxMTMzMTlaFw0yNTEwMjYxMTMzMTlaMBgxFjAUBgNV BAMTDTY4ZjRjYzdmLTQ0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzK9Azn6Vp0lyCoS8MjlE9r3YkPsqmfMFzYSccIPkuDGlt9doOpjX+wboldK1f WqNW/3VQu5ygECDdljTCVkyUWWeNltEWeojHYH57uVzvsgAAO5guy9G60pfy8QEp r3idbc5O04JF+XqRYAxlA+gwQ0O5YxOPdxv4kacekSa9Rf84y0Qf8ihtag6ujKPx lDG4YDoIq+X9+PxD3zB8osEUNJUMPBjIaeWX8/0fpta8bSw1ZWfZpetmgjAMwPRG Pelfc473AD2+cz43KKn04gpI7mvH5SGTiDbl4bpob2Yas3yLpyrBwr2JC1CIIsxl H5OcWcnS6VJ7w9LJjr389KxZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURFfhBR5a fwllM392ijjXp7MsuewwHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QTk0LzZDRDAwREQyOThDQjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZ bEUtOUh1TzQ0aVlIVDZBOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGg05K7/bcwY1fybpJAWu/0GOvu00K1Ygblz78+tUe5DvHJEIgdNA/E0 mDTca6aVuIPz/Wj0ZKodEuWebJfKwDQWNl0qVF1oKqp1RYueHBQAv0jgzhmvMF1J Hn+RMnWdS07ed4IGZwfFBvFxxQRbfjoDiPhe0uLb4smDUuMgPIZUDf/tfnNRWqCF GVObSIPFwRnChiqSwtpiP0KjdQInXj5k+vUcZdU1hrbKFjjboW6S/i7XPT2taSUk oEaZWftkyfUobxUmceuPry1+5VQ1pjAFoqyMPbhb0pXPPCbjDrlsQahYDCYMaGh/ pvvkCURgPDfX1V4wg2QQLYvgPCqGHYU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:51 2025 by rpki-client