$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: /eBjjq+QCMQWA0Kb9Y0BIDX9rIu2WyCEzwHXY/Xlf/0= Subject key identifier: E0:4A:68:8F:96:70:5A:8C:54:94:F2:3D:F7:C5:BB:1C:97:4F:9D:11 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C81 Signing time: Sat 18 Oct 2025 19:10:10 +0000 Manifest this update: Sat 18 Oct 2025 19:10:09 +0000 Manifest next update: Sat 25 Oct 2025 19:10:09 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: i0GDaB4l0iFrn18o1iNoUTQ/dEURN5DVnDSJ0IgIrZ4=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Oct 18 19:10:09 2025 GMT Not After : Oct 25 19:10:09 2025 GMT Subject: CN=68f3e611-19aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:a3:01:16:17:5f:29:1d:db:dd:5a:07:01: 8d:58:3c:5a:64:44:ab:84:b3:23:ce:01:76:6d:31: 4e:4c:42:f2:67:9b:63:a1:89:44:e2:95:45:b8:9d: 2a:36:0b:47:da:32:7a:ef:7e:77:a9:cd:90:fd:26: 7c:f8:bb:5a:e0:e5:09:32:6e:e6:f5:f6:c9:ae:d5: 73:8a:1c:0b:61:f9:b5:8f:7b:f4:de:74:ba:3d:38: e5:87:b6:fe:79:57:36:dc:a0:8a:17:2a:2b:74:83: 8e:fd:e9:59:a0:bf:39:d9:9f:6f:ca:2a:b9:ef:b1: df:aa:07:26:5f:db:09:af:a8:ad:fd:f2:f4:68:90: 2a:a7:ee:6c:67:b6:17:17:5b:d7:07:93:80:4b:1d: 5a:48:d6:5c:d4:2a:1f:6e:b8:1d:91:ac:21:ea:60: 60:10:b3:65:75:f3:8a:84:78:00:d4:ee:41:74:ac: f6:57:d2:81:c5:f7:0b:8f:b4:f3:ac:87:61:b3:75: 75:3a:f3:aa:9a:41:5f:b4:b5:88:bc:a1:c4:ae:08: e7:f1:2c:ac:f4:a3:a9:78:06:6f:fa:7a:01:e7:3d: ae:46:60:c6:c2:60:34:e6:83:16:54:3d:88:4f:2b: 43:35:b0:c5:a6:92:d9:1c:2b:ad:71:a5:02:dc:11: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4A:68:8F:96:70:5A:8C:54:94:F2:3D:F7:C5:BB:1C:97:4F:9D:11 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e9:d1:be:7c:0c:1b:15:ee:9a:e1:e6:22:44:64:c6:f2:55: cc:79:f8:08:0f:21:30:c0:6e:82:e7:ef:fd:3b:3f:d8:87:14: a5:b2:dd:68:fb:41:96:bf:fc:77:6a:48:8f:b1:db:6e:85:60: f1:bd:35:3c:3d:2b:c6:5b:86:45:f5:20:74:09:d1:74:36:8b: 71:6d:d4:a5:a8:50:97:21:6b:60:03:15:52:cf:83:5b:a6:55: 4a:e1:cb:0a:75:f6:17:b7:11:c0:51:ed:ee:29:8b:6d:02:a5: 24:7e:1b:c7:b6:63:5e:61:d7:10:5d:73:6d:ce:f6:9d:9a:fe: 83:d8:08:2c:60:d4:3c:21:a7:2f:24:ea:86:04:df:8d:3e:f2: 9e:00:2d:9c:6e:8a:dd:1a:58:15:1b:8c:d2:88:d3:f8:cc:ec: ff:27:9b:d0:d9:b4:61:80:77:27:0b:d7:62:0e:6f:c1:39:ec: a2:d5:28:26:f9:54:0e:be:03:36:85:ef:5f:ee:14:68:2d:83: a2:be:aa:a0:43:c7:82:57:1c:b1:88:0c:c9:bb:4e:aa:25:61: 35:c9:f1:bf:eb:5e:5d:fa:9b:8d:ba:03:49:93:e0:45:1f:dc: b8:c8:3a:a3:db:82:34:d7:76:cb:7e:3e:71:f9:a5:33:48:28: ed:c5:58:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUxMDE4MTkxMDA5WhcNMjUxMDI1MTkxMDA5WjAYMRYwFAYD VQQDEw02OGYzZTYxMS0xOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bmjARYXXykd291aBwGNWDxaZESrhLMjzgF2bTFOTELyZ5tjoYlE4pVFuJ0q NgtH2jJ67353qc2Q/SZ8+Lta4OUJMm7m9fbJrtVzihwLYfm1j3v03nS6PTjlh7b+ eVc23KCKFyordIOO/elZoL852Z9vyiq577HfqgcmX9sJr6it/fL0aJAqp+5sZ7YX F1vXB5OASx1aSNZc1Cofbrgdkawh6mBgELNldfOKhHgA1O5BdKz2V9KBxfcLj7Tz rIdhs3V1OvOqmkFftLWIvKHErgjn8Sys9KOpeAZv+noB5z2uRmDGwmA05oMWVD2I TytDNbDFppLZHCutcaUC3BGIpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBKaI+W cFqMVJTyPffFuxyXT50RMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/6dG+fAwbFe6a4eYiRGTG8lXMefgIDyEwwG6C5+/9Oz/YhxSlst1o +0GWv/x3akiPsdtuhWDxvTU8PSvGW4ZF9SB0CdF0NotxbdSlqFCXIWtgAxVSz4Nb plVK4csKdfYXtxHAUe3uKYttAqUkfhvHtmNeYdcQXXNtzvadmv6D2AgsYNQ8Iacv JOqGBN+NPvKeAC2cbordGlgVG4zSiNP4zOz/J5vQ2bRhgHcnC9diDm/BOeyi1Sgm +VQOvgM2he9f7hRoLYOivqqgQ8eCVxyxiAzJu06qJWE1yfG/615d+puNugNJk+BF H9y4yDqj24I013bLfj5x+aUzSCjtxVgb -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:15 2025 by rpki-client